Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
File: NGyrWUu9qbRA_afTl0y9RByY5ck.mft (raw, json)
Hash identifier: ksqMmMae2IVlBe5tw2aVUbjR/bKgbouLN2/RUU/e8yg=
Subject key identifier: 36:8A:6F:1A:FB:1F:39:03:4D:74:F5:B3:AB:66:DC:6F:DD:CD:86:E3
Authority key identifier: 34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9
Certificate issuer: /CN=346cab594bbda9b440fda7d3974cbd441c98e5c9
Certificate serial: 019A4DE193C84FBD059F9BFA7C6A27EA4FDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
Manifest number: 1708
Signing time: Tue 04 Nov 2025 08:00:20 +0000
Manifest this update: Tue 04 Nov 2025 08:00:20 +0000
Manifest next update: Wed 05 Nov 2025 08:00:20 +0000
Files and hashes: 1: NGyrWUu9qbRA_afTl0y9RByY5ck.crl (hash: vnoXw0I8Zup1o1uuxLgxGagJW/Ikk/Z1QdyxMvCbYOs=)
2: qWxHxzkwFGcxa5jSluitx-sE42Y.roa (hash: 3aDiNAN4onF/Cdaq+yTsD+jmRJ2OmMmFOaHRV5Fmhp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:93:c8:4f:bd:05:9f:9b:fa:7c:6a:27:ea:4f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=346cab594bbda9b440fda7d3974cbd441c98e5c9
Validity
Not Before: Nov 4 08:00:20 2025 GMT
Not After : Nov 5 08:00:20 2025 GMT
Subject: CN=368a6f1afb1f39034d74f5b3ab66dc6fddcd86e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:88:c3:19:e6:8a:b0:91:cb:ab:bc:f4:38:55:
97:5f:54:0c:76:09:f4:f4:f0:43:49:2e:4b:7d:0b:
79:d5:50:59:5f:58:b5:3c:64:c3:eb:62:be:5e:a8:
4e:86:a5:55:59:14:9e:7d:be:29:be:f7:a4:62:f3:
bd:5c:48:26:00:0a:47:8a:cd:22:a6:7f:7a:03:80:
62:b8:8f:1c:51:9f:81:47:c7:5d:c8:d0:02:af:88:
48:e2:c9:c3:cf:e6:d3:c3:1b:5b:21:6d:af:00:37:
39:d0:84:99:e8:37:2c:ff:52:dc:24:59:e3:1a:64:
67:e0:cb:bb:8b:10:68:95:2f:b6:4c:72:f4:fa:11:
a0:26:d3:d4:8f:01:56:aa:bc:94:44:2e:21:d3:9c:
ba:60:df:3b:5b:57:0b:12:05:d1:1d:78:41:a7:5f:
56:5a:5b:c0:38:cc:32:93:bf:40:a6:70:4d:ab:c2:
29:03:40:76:da:9b:27:c5:3a:65:ce:39:38:c2:89:
24:84:09:cb:05:7d:09:01:b5:86:80:73:86:70:c5:
7e:d1:67:b6:8a:8e:63:b5:39:84:d5:11:e6:5c:cd:
cf:0c:c3:af:18:61:17:2a:60:3d:ab:bd:ce:22:e7:
8c:79:14:c3:9a:28:87:16:be:47:79:6b:89:3a:19:
9d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8A:6F:1A:FB:1F:39:03:4D:74:F5:B3:AB:66:DC:6F:DD:CD:86:E3
X509v3 Authority Key Identifier:
keyid:34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:6e:9e:2b:55:b1:e4:b9:75:cf:c7:79:86:86:c1:f4:21:b3:
a8:b1:e3:86:f8:40:f5:f5:f1:51:5f:25:58:16:3d:db:71:70:
e5:a8:c2:00:a2:c5:ea:6b:3d:63:0c:a0:9a:b4:6c:01:2d:89:
a9:39:f2:9e:51:6b:8c:26:c9:b4:61:e3:65:bb:d9:a4:f0:f3:
2c:5e:ce:85:27:8b:e9:f9:dd:cd:82:42:cd:a1:41:a4:e1:22:
f5:2b:15:51:30:f4:33:d7:35:b4:b8:17:65:2f:3d:9a:bf:be:
29:d9:72:92:7b:7b:53:17:80:c0:7b:df:8b:e5:90:4c:26:b6:
4f:22:cf:85:2d:a9:60:46:48:f6:b4:00:87:64:aa:b4:50:79:
0b:d1:16:ef:e9:f7:71:49:3e:6c:86:e9:11:89:b6:f5:0c:f5:
26:ad:41:1c:17:fb:39:9a:e4:d1:66:01:a7:5e:94:6c:d7:a6:
55:89:d6:be:48:66:9b:cb:09:cd:4d:38:ca:79:9a:7a:75:0c:
11:f2:e9:fe:89:9b:b5:92:66:fd:d3:39:2e:5e:36:0a:91:5b:
15:0d:9f:ce:bd:be:ad:0d:4b:ec:77:3e:7f:82:b0:fb:8f:ff:
bb:fa:0e:c2:97:3d:41:9b:fd:0f:b3:bf:36:7f:24:60:b5:8b:
7e:e9:db:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:32:16 2025 by rpki-client