Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
File: NEcY0TWgm7UkcGtCWcq8xiblFO8.mft (raw, json)
Hash identifier: NAw/z1a97YMYihE+EeuEODNI/ffHixyp7aEkTaGxkdA=
Subject key identifier: CF:CB:93:A2:75:53:E4:87:6B:42:AA:FE:AB:D8:DD:BA:57:30:D5:10
Authority key identifier: 34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF
Certificate issuer: /CN=344718d135a09bb524706b4259cabcc626e514ef
Certificate serial: 019A4F6244B1C2DF26251AB34FDCC9E2FF70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
Manifest number: 16A0
Signing time: Tue 04 Nov 2025 15:00:31 +0000
Manifest this update: Tue 04 Nov 2025 15:00:31 +0000
Manifest next update: Wed 05 Nov 2025 15:00:31 +0000
Files and hashes: 1: NEcY0TWgm7UkcGtCWcq8xiblFO8.crl (hash: /y+67nXqawXLBEUgzMF39nYxAqT4lG8Wf6pGkwLqTas=)
2: sO-QyC1vz5w60dvkaCQsXtLi8YA.roa (hash: wtWXsxxZV53+P/qICncBE0LIXN7QWpyRCdTXr4pbwmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:44:b1:c2:df:26:25:1a:b3:4f:dc:c9:e2:ff:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344718d135a09bb524706b4259cabcc626e514ef
Validity
Not Before: Nov 4 15:00:31 2025 GMT
Not After : Nov 5 15:00:31 2025 GMT
Subject: CN=cfcb93a27553e4876b42aafeabd8ddba5730d510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6f:4c:b0:d4:b8:d4:75:0e:05:fc:55:b4:85:
a1:34:8e:e5:6a:59:dc:b6:fc:cf:63:06:98:22:33:
2a:c5:91:03:21:60:7e:cb:be:eb:9b:99:9e:55:21:
81:5d:49:6b:cf:1b:15:ce:d4:ac:79:95:46:c0:af:
66:56:39:76:84:5a:7f:ef:17:e5:ea:14:f5:36:f5:
83:d2:7a:96:c0:5d:86:01:92:f5:bb:d7:61:85:8c:
a7:9d:c7:a1:0b:24:21:cc:4b:45:ce:c8:f1:4c:48:
ff:88:29:bd:66:80:3b:ed:09:ed:75:b4:69:f9:66:
dc:23:b6:d0:ba:21:2a:fe:05:21:9e:63:1c:a8:9c:
f7:2f:9f:0f:6d:30:33:88:29:33:a3:cb:20:d6:3a:
47:7b:77:2d:a8:e6:34:5e:13:1d:b3:af:ad:0d:77:
02:64:4d:d3:64:f9:ef:99:db:7f:9d:24:39:cd:0d:
00:3e:9f:31:ad:cb:9a:cd:2d:aa:cd:93:61:04:2f:
5c:a3:30:8f:6b:51:f7:57:b4:7b:25:3d:27:ae:eb:
c1:2c:ac:e9:67:67:4d:d1:d4:ea:fc:e0:34:79:c1:
0d:3a:61:87:d1:45:74:99:21:51:a9:76:18:b5:5a:
85:4a:c5:e7:f8:af:10:c4:48:17:ed:67:ce:a5:93:
f5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CB:93:A2:75:53:E4:87:6B:42:AA:FE:AB:D8:DD:BA:57:30:D5:10
X509v3 Authority Key Identifier:
keyid:34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:30:7d:b7:11:b6:0b:63:25:56:63:d8:22:13:d3:97:78:3c:
e2:da:27:4e:b0:a5:de:55:49:a9:74:6d:7e:6c:9c:c5:e7:8a:
5a:cd:22:6b:a1:94:2a:d9:4c:06:4f:87:ce:1d:82:cd:ea:09:
a7:1b:ac:dc:ce:23:e2:b8:55:14:e2:0d:33:17:a6:48:4f:9c:
c6:47:46:96:0d:03:db:89:a1:7e:9f:b4:b3:19:0e:2d:d4:8e:
c7:da:d1:3b:c9:b8:bd:5f:cc:75:48:61:f0:c1:f5:dd:53:0e:
90:54:34:5e:94:38:00:bd:68:16:93:41:34:3f:55:35:22:59:
c0:5f:aa:3f:97:65:f2:e9:1d:26:46:0f:d3:4f:5c:82:63:98:
66:7c:3b:c4:92:44:b7:3c:f4:6b:46:7c:52:92:d2:72:96:48:
d2:1d:25:a3:0a:74:70:73:3e:3d:91:23:0d:5e:89:51:73:59:
f7:9c:1a:f4:23:d8:e1:48:ef:e3:71:3d:f4:8d:60:1f:c4:90:
f2:e0:26:8e:44:05:36:5f:56:3d:eb:14:33:79:4f:71:f4:51:
63:91:fa:33:12:71:c3:bd:98:2d:4d:24:76:ed:7a:ba:89:e5:
f6:6b:ce:ff:2e:6a:e7:3a:0e:c6:66:18:ca:b6:55:19:01:fe:
d4:18:28:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:18 2025 by rpki-client