Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
File: NoBlGroGa0CEp-0g1_UgGyKWwZc.mft (raw, json)
Hash identifier: vIY86/O+LkBVkmlG/53Ao69sC071h807RbUvfjVHaQY=
Subject key identifier: 71:BE:B5:76:32:97:9F:6B:13:DA:1C:0D:1D:1A:99:FB:F7:90:2D:65
Authority key identifier: 36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
Certificate issuer: /CN=3680651aba066b4084a7ed20d7f5201b2296c197
Certificate serial: 019A53ACBAAB9FD9E92B7F5DE8F740F2D039
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
Manifest number: 0730
Signing time: Wed 05 Nov 2025 11:00:20 +0000
Manifest this update: Wed 05 Nov 2025 11:00:20 +0000
Manifest next update: Thu 06 Nov 2025 11:00:20 +0000
Files and hashes: 1: 4WEE6M8dthgW-fAXTbXKabGLlL0.roa (hash: Vz/LsTTjIy8GCO6P/Fc6vDeS0OdzaRulpb9xjUaoVO0=)
2: NoBlGroGa0CEp-0g1_UgGyKWwZc.crl (hash: g5oUcVTuVOIQe8HAh8W3nKwJqMYRsXI/5JfVuMiuIU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ac:ba:ab:9f:d9:e9:2b:7f:5d:e8:f7:40:f2:d0:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3680651aba066b4084a7ed20d7f5201b2296c197
Validity
Not Before: Nov 5 11:00:20 2025 GMT
Not After : Nov 6 11:00:20 2025 GMT
Subject: CN=71beb57632979f6b13da1c0d1d1a99fbf7902d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:43:dd:a2:d4:3b:0c:f1:ae:af:70:5f:16:c8:
37:c7:5d:06:e3:60:9b:c7:dc:9d:a4:e7:7d:88:6b:
79:e5:b5:17:cb:95:2a:af:dd:c7:cb:af:f9:99:67:
dc:e8:09:5b:b8:dc:88:27:dc:50:eb:21:48:6b:a3:
46:ae:ff:3f:6b:c4:91:54:50:43:ee:51:6f:ef:ab:
bf:64:44:dd:53:91:60:54:e7:9d:ef:52:46:93:51:
b8:e4:4c:f7:f9:e6:be:e5:38:85:9f:0e:db:ae:2e:
1e:17:58:f1:33:b9:87:88:37:a5:30:fb:67:47:99:
7c:96:14:9e:8d:30:92:0d:2c:6a:c8:5e:29:79:b8:
1c:61:80:4a:26:c7:19:b4:8a:40:73:8f:18:da:27:
de:ac:29:8c:6f:49:cb:ed:3f:19:db:8f:08:8d:23:
33:ae:fd:10:12:80:9d:20:1a:3c:33:85:f5:6e:8f:
f9:d8:cd:29:ca:fa:17:9b:c9:a0:60:02:c3:40:94:
76:5a:16:f5:45:05:8b:6d:aa:6e:e3:11:07:6e:5f:
0a:9a:d7:ef:55:ef:2a:63:97:42:62:4e:c7:eb:4b:
8c:48:88:91:be:32:4a:50:2a:0a:f4:60:76:eb:0d:
82:fc:1c:f1:eb:7b:56:f4:46:90:01:e9:3d:7a:80:
ec:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BE:B5:76:32:97:9F:6B:13:DA:1C:0D:1D:1A:99:FB:F7:90:2D:65
X509v3 Authority Key Identifier:
keyid:36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:6d:eb:d4:39:45:2c:a0:18:13:b8:f6:b0:1c:f6:a8:f8:a8:
8e:d5:aa:a8:e6:60:9c:ed:3f:9e:e5:12:3a:ea:81:2a:39:7a:
47:73:24:87:fa:23:52:15:85:99:4e:a5:e6:e8:84:79:77:12:
4f:97:9e:07:4f:6d:56:42:fb:47:4d:95:e2:92:58:5f:c8:e9:
bf:d7:89:6f:22:41:b3:68:ca:49:a1:01:29:41:7a:5c:26:df:
33:51:01:83:46:eb:62:90:44:b3:6e:52:5b:f3:bc:08:65:95:
75:c8:3d:1c:32:03:85:95:67:ad:33:a6:af:c6:6b:b4:17:8c:
91:90:5a:bb:22:b3:ee:dd:27:d6:6a:3f:72:3e:1d:0b:0a:3c:
26:6e:06:7b:2e:ba:c4:fd:c1:23:3b:38:04:fa:60:1d:34:99:
7b:ef:8a:99:08:91:17:01:4f:72:bd:cd:29:06:25:6b:8c:c6:
ce:4e:9b:9f:a6:57:cd:f5:3c:33:2e:4d:66:42:09:da:35:fc:
c4:b3:9b:ae:79:42:dc:4b:5a:b3:9f:25:27:5f:1a:77:16:1d:
e0:4a:21:1e:1f:db:7c:49:aa:22:7b:fc:cf:fc:61:98:d8:2a:
18:c0:5e:94:88:f5:f8:14:7c:93:ec:09:6d:ba:9b:67:81:b1:
c5:dd:18:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:06:20 2025 by rpki-client