Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
File: NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft (raw, json)
Hash identifier: 8vlMQodQW9OcSglL5hyAPoZrXK6+lukTzHnaNFtH1zQ=
Subject key identifier: EE:18:AB:C6:2F:B6:00:13:34:E0:2F:5B:BF:7F:DB:FD:55:0D:48:7D
Authority key identifier: 35:36:20:DA:44:52:AC:82:AA:F4:C8:C0:88:19:EB:0B:82:51:3B:83
Certificate issuer: /CN=353620da4452ac82aaf4c8c08819eb0b82513b83
Certificate serial: 019A4FD013AA9679EFF9D5B77435B7E00562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
Manifest number: 0568
Signing time: Tue 04 Nov 2025 17:00:27 +0000
Manifest this update: Tue 04 Nov 2025 17:00:27 +0000
Manifest next update: Wed 05 Nov 2025 17:00:27 +0000
Files and hashes: 1: NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl (hash: 70yWmhgN3qbZ6M14pHchIkL/nrCQBoDpdyzSIL/m37U=)
2: YYXnMCAt040NcLATlrH2pdrRzy4.roa (hash: //AxvWil0+RRuTzD9Iyynz1Qj6s3Pa74fW9rqeU5a2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:13:aa:96:79:ef:f9:d5:b7:74:35:b7:e0:05:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353620da4452ac82aaf4c8c08819eb0b82513b83
Validity
Not Before: Nov 4 17:00:27 2025 GMT
Not After : Nov 5 17:00:27 2025 GMT
Subject: CN=ee18abc62fb6001334e02f5bbf7fdbfd550d487d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d8:84:71:92:0e:2a:6b:2b:49:21:9a:32:67:
37:b1:04:60:8c:10:45:a0:f9:5c:2e:12:c9:d0:0c:
d6:b0:1d:c6:39:7f:67:70:7f:5c:b0:03:fa:02:aa:
28:b9:36:62:f3:ae:b0:a7:01:ad:06:56:c0:fe:a0:
02:4d:de:9e:e5:7b:e4:31:0a:a8:cb:ce:8c:d8:dc:
e7:2e:7b:a3:00:48:76:cb:5e:88:ee:a5:bd:f0:4e:
81:a4:e2:e1:19:76:96:a9:b6:95:39:87:42:26:ce:
60:3f:19:7c:dd:9d:dd:57:61:99:91:47:0e:ed:cc:
a1:ab:41:45:e3:e6:37:66:81:bc:d1:d6:c7:68:01:
4b:c4:c1:99:7b:d5:07:6c:58:09:d2:af:55:a4:87:
62:4e:6a:ce:f0:b8:88:65:f3:da:75:d9:33:6f:ea:
7a:8b:b4:59:5f:8d:90:75:dd:03:a2:d9:34:02:47:
69:6d:74:87:74:bb:57:64:f8:d9:93:e1:ee:74:64:
00:e3:d7:39:69:d2:5c:77:32:e3:8f:11:43:c8:23:
4c:ce:d5:74:77:7a:a3:c7:66:b0:9f:0d:74:14:db:
07:5b:91:0c:31:04:2a:3e:ed:a8:75:c1:f9:b7:58:
94:e5:7a:20:30:71:69:f4:2b:14:f4:22:68:d6:23:
c5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:18:AB:C6:2F:B6:00:13:34:E0:2F:5B:BF:7F:DB:FD:55:0D:48:7D
X509v3 Authority Key Identifier:
keyid:35:36:20:DA:44:52:AC:82:AA:F4:C8:C0:88:19:EB:0B:82:51:3B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NTYg2kRSrIKq9MjAiBnrC4JRO4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/bf2631-cfac-4a87-a37b-551584e5c0a4/1/NTYg2kRSrIKq9MjAiBnrC4JRO4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:0d:f1:55:64:a7:d7:10:aa:e9:07:12:e6:93:79:82:84:cd:
b4:fd:d5:ac:8e:f6:33:e0:e0:54:02:b9:32:b2:0d:c6:e0:45:
79:ed:81:c7:60:8c:65:b5:20:9d:ee:fe:4b:b0:0b:7a:9a:31:
58:de:40:30:a7:91:bc:d8:6e:c9:41:73:92:b9:12:80:b6:2c:
d9:cc:60:44:07:c1:2d:4c:ba:b7:d0:67:02:fb:6e:7b:69:7b:
96:e1:4a:67:fc:db:85:ec:39:1b:49:69:3d:89:a2:8c:2a:a9:
95:6e:e9:cd:18:ef:78:4e:43:fc:80:1e:16:66:ff:ff:d4:f9:
8a:d2:71:f3:c6:5f:9b:fc:e5:0a:40:62:b3:b2:25:53:c1:62:
14:c4:67:6d:f4:8b:2d:71:2d:90:42:7b:45:de:d1:4b:49:58:
c8:96:6b:d5:0d:4b:2a:41:2d:53:99:ed:36:b5:2d:f9:15:c5:
2c:49:2d:a2:fe:86:16:ad:06:8b:83:55:38:47:97:64:15:7f:
5e:da:07:cb:08:ac:22:e6:e0:e8:e6:fb:1f:0a:b0:1c:57:1f:
cd:db:56:48:45:c0:c9:d8:fb:1c:66:74:97:7d:17:27:3d:cf:
3a:3a:75:95:2d:e6:c8:2e:93:5e:13:62:36:d2:d2:0d:0b:cc:
00:d4:7d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:52:13 2025 by rpki-client