
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
File: NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft (raw, json)
Hash identifier: veWh4gkK00oT5OD1FT2hMFlCPSZSkBrt/dapmu22Zl4=
Subject key identifier: F2:65:F4:C9:5A:05:D3:75:79:55:20:37:D6:A9:61:23:E4:1A:2D:1B
Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
Certificate issuer: /CN=3545a7200164912041bb931efb1feac123b43a18
Certificate serial: 019A52D12EB1D02EA5171A0D3ADBA305466B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
Manifest number: 1715
Signing time: Wed 05 Nov 2025 07:00:31 +0000
Manifest this update: Wed 05 Nov 2025 07:00:31 +0000
Manifest next update: Thu 06 Nov 2025 07:00:31 +0000
Files and hashes: 1: 8s1U0KmUYb897VvjMdVaiCCBr8Y.roa (hash: 5qEC8e4y3KYPBzPpD5dv/300fB0lSnNjSuXLoow+Q8w=)
2: LaYkRMNeto2OFZ9VBnU48w_HGgs.roa (hash: 16B1JfqcXDvmz5pVWUS+KsHYpQRrCgD9R9Tg6uXacIA=)
3: NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl (hash: 8W17U9Wrthx5Cg9G7U1eahx0CMN4+K6vfvWqTy7JaoI=)
4: W8oJrry2382XyDpwYu9d1fRM57k.roa (hash: vgOtreWyL8SSvp1wiImWd0ZzLXQJtP4n+ctgbIbJd6I=)
5: ZPnSp5toQpthOZvn7vrTi1PIJ0A.roa (hash: 2xJoiopsp/aP4IfMiv71h2CCh2maxmce9cHqGdAd1jM=)
6: hDuQO-2O-6Lo8qgrhYqNM0G4P24.roa (hash: WUDxmKQLeVQHlfqkPeKYvZqVqvTuBp11Xfwh/S2zHnQ=)
7: rJESdqv17knzJ4wNzfBk8WWWnw0.roa (hash: BdHgAA5eA1A53dV1mMcPmgdF0S7eP4oFR6WHvpTEZ/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:2e:b1:d0:2e:a5:17:1a:0d:3a:db:a3:05:46:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3545a7200164912041bb931efb1feac123b43a18
Validity
Not Before: Nov 5 07:00:31 2025 GMT
Not After : Nov 6 07:00:31 2025 GMT
Subject: CN=f265f4c95a05d37579552037d6a96123e41a2d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5f:84:ac:50:3c:41:93:12:16:b6:c9:c9:37:
1a:8c:41:ad:0f:a6:be:85:da:19:89:ce:8c:78:2e:
d2:16:05:bb:7d:18:09:ac:cb:1f:d2:ed:e3:f5:0a:
90:9b:fd:a8:48:0d:1c:6a:5c:16:d7:b9:98:1e:b3:
92:01:0f:7e:5a:0f:c9:eb:89:aa:86:c0:c9:96:de:
9d:87:0c:d6:18:c6:15:e3:c2:09:4d:e3:9f:01:1e:
1b:48:68:4a:74:4e:f7:7a:be:f3:29:99:31:90:e9:
37:89:6a:70:59:07:b1:32:13:99:3f:67:65:0c:2a:
78:7e:3c:19:e8:60:ea:72:15:43:a1:85:3c:8c:11:
bb:c0:57:14:eb:43:5c:c5:d1:6f:8e:39:da:c6:34:
e7:8f:d2:dd:8b:0c:e4:28:9f:7f:d1:5f:4e:e3:ab:
0c:1b:90:ea:be:1f:6d:30:12:38:e3:84:bc:0e:34:
17:be:3d:2a:d8:a1:44:17:1f:50:40:96:af:c0:5f:
7c:a6:5e:d8:db:98:cf:42:1e:7a:72:35:65:aa:3a:
2d:36:94:ff:42:eb:5c:41:11:e2:ee:b4:db:b1:b4:
43:4c:65:13:0f:1d:00:c3:17:22:3d:22:07:b5:c3:
77:cc:d0:0b:06:71:65:f3:27:9f:a5:eb:de:0d:b7:
22:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:65:F4:C9:5A:05:D3:75:79:55:20:37:D6:A9:61:23:E4:1A:2D:1B
X509v3 Authority Key Identifier:
keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:65:af:65:06:a2:a6:e5:99:0d:25:78:8d:24:68:56:4c:95:
44:0f:23:6b:3c:c5:c1:d5:03:52:a6:62:73:a0:ed:ec:b0:66:
1b:d2:69:e9:17:8e:2d:af:c3:71:ce:ce:2f:0d:fd:8c:c7:26:
d9:fe:28:61:06:ac:f3:4f:24:66:d5:6e:aa:cf:02:d1:2d:6b:
7b:56:d5:b5:77:28:98:fe:07:8a:01:f6:2d:cd:36:92:66:b8:
35:82:09:7b:f1:ed:9e:6d:94:90:a4:3d:ac:3f:9b:57:58:8b:
19:61:a5:f8:29:f3:49:cd:65:5b:0c:31:a5:39:b9:07:cb:73:
13:9a:e9:f3:6a:00:53:97:a5:9f:8c:df:9c:64:49:c5:51:9c:
7d:ed:a4:1e:b0:7c:65:20:90:65:3b:41:73:23:80:29:58:36:
2c:37:b1:93:58:45:37:37:bc:f3:6d:68:12:63:05:c1:12:3a:
50:2d:53:e5:38:b8:79:ce:58:4c:f8:5e:1d:18:eb:79:05:ee:
a3:81:fc:a9:84:95:2a:b4:ca:0f:c7:27:df:ff:2c:47:41:01:
3b:67:c4:eb:76:95:e2:e6:c9:6b:d0:fb:c9:2a:9e:20:ac:47:
d6:38:74:01:60:14:95:96:f2:5e:ed:3d:72:a3:ca:45:a7:58:
0a:66:26:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:56:10 2025 by rpki-client