Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
File: NePUvxvA-BcoIF5R3gl884Ogzck.mft (raw, json)
Hash identifier: 3IZH9oaxSY9W7WvN6HvVxOIeRS8VTqwm6S4OzGussQo=
Subject key identifier: 84:6C:B4:EF:99:81:FF:8E:FD:A6:71:A2:36:A1:FF:86:D0:3A:57:8C
Authority key identifier: 35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
Certificate issuer: /CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Certificate serial: 019A4EF493D9EFE68C6A20C72665EB3A197F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
Manifest number: 164C
Signing time: Tue 04 Nov 2025 13:00:42 +0000
Manifest this update: Tue 04 Nov 2025 13:00:42 +0000
Manifest next update: Wed 05 Nov 2025 13:00:42 +0000
Files and hashes: 1: 0RltyGXYqOw5Hx9cC0hpgbUGn1M.roa (hash: mg2bYRQawjXXkuGc/ehoyx4cItI7XGim10ZVkynzOuM=)
2: NePUvxvA-BcoIF5R3gl884Ogzck.crl (hash: xoiEYFWR3/3oHFWNoePkswSqT2N8EaCGBy4Uv6GtwTk=)
3: cC3qEyLwvQCoEx0E8fa6hCQIIMk.roa (hash: t6q5YnGG2tDRloa96C40IAzp6BUV/ndP0HTUzMGh9cA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:93:d9:ef:e6:8c:6a:20:c7:26:65:eb:3a:19:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Validity
Not Before: Nov 4 13:00:42 2025 GMT
Not After : Nov 5 13:00:42 2025 GMT
Subject: CN=846cb4ef9981ff8efda671a236a1ff86d03a578c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6f:3a:1e:d0:2a:e5:a3:4f:72:d6:cc:dc:2c:
cb:28:66:49:0b:c0:df:5f:5f:28:0c:b2:0f:65:40:
80:81:2c:ce:f7:0c:74:1f:39:a0:51:17:fb:69:2a:
68:98:be:02:fa:30:20:b7:61:5d:2c:f1:0d:41:48:
20:e5:6a:d5:e0:82:39:9a:12:d7:1b:71:f2:de:12:
d3:c0:16:55:3c:a0:4f:e3:7a:f2:28:f4:8f:dc:30:
45:61:5f:ae:b0:7a:02:a5:15:1d:e6:2c:34:35:da:
4c:15:cc:33:a4:88:3c:fb:a9:88:18:fe:ff:9c:97:
26:44:90:3c:08:50:d5:2d:ae:65:77:e3:93:82:1f:
5f:f8:0c:21:a5:9e:be:78:37:9a:6b:57:d7:ed:49:
3f:5d:98:92:30:26:38:98:b8:bc:05:8c:75:da:a0:
87:cc:da:8a:48:c0:a0:46:d3:8d:35:2a:4f:03:52:
43:f1:57:0e:95:d0:18:c0:2b:7c:2d:8b:c7:72:63:
e1:1d:61:7d:0b:17:ab:e4:10:86:e5:27:98:35:96:
8f:b8:a1:5a:bf:2d:db:a3:aa:8b:01:24:bb:b0:a9:
4d:e5:9f:cb:ea:cc:61:74:36:59:a7:0b:b7:a4:af:
e1:e6:3d:ac:36:11:ea:31:7e:5c:b0:de:28:20:bc:
ae:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6C:B4:EF:99:81:FF:8E:FD:A6:71:A2:36:A1:FF:86:D0:3A:57:8C
X509v3 Authority Key Identifier:
keyid:35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:33:c6:95:4b:3b:47:c0:c0:ee:11:99:98:e7:10:b7:6a:62:
97:13:0f:bc:b6:56:b3:15:90:ad:96:54:84:63:c3:bf:38:a8:
4b:2b:4b:de:5b:b1:05:20:46:79:c7:77:90:20:42:fe:7c:19:
65:f0:04:00:91:d8:2d:d9:72:4b:dd:b4:86:23:18:0e:ba:8e:
e5:67:48:ea:9c:bb:9c:fd:41:b8:c2:e3:b5:e3:ac:3d:9b:50:
7e:12:f8:2c:ad:a5:0f:95:55:50:90:d8:bc:da:9c:5c:75:f3:
c6:3d:db:3e:95:4f:47:02:8e:71:9d:fe:0f:d5:0a:4a:93:e3:
28:57:10:4f:63:66:d4:7b:63:52:00:5f:68:76:60:44:ec:ff:
3a:ae:ca:3c:a6:ab:33:a6:c9:00:d5:dd:f3:b1:0e:83:c8:4e:
71:05:97:95:eb:f4:7b:b0:c1:50:a4:ae:16:62:66:9d:6b:7b:
b2:a5:9d:80:52:5f:30:8a:b0:97:eb:ae:dd:7b:c8:cd:33:7f:
1f:97:18:6e:39:41:ac:f4:c6:26:77:e9:e6:cb:db:36:22:89:
b5:84:50:80:19:b5:48:4e:94:e7:ea:30:2c:13:f6:bc:ff:33:
90:68:6c:b2:81:a8:37:9c:f1:4f:b7:4a:dd:1a:d2:0d:3f:9c:
16:c2:03:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:18:39 2025 by rpki-client