Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
File: NePUvxvA-BcoIF5R3gl884Ogzck.mft (raw, json)
Hash identifier: 8Cbia/qwG3OEYo4Wg0IHhGSeTf6MbhVqE2Z7V1TZM48=
Subject key identifier: 2D:72:67:E2:6F:8E:D3:AC:6A:A0:81:F8:C3:F7:E4:D1:C3:78:42:49
Authority key identifier: 35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
Certificate issuer: /CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Certificate serial: 0199C3E99A540C8B99F2D997EA9076C5F4AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
Manifest number: 1604
Signing time: Wed 08 Oct 2025 13:01:30 +0000
Manifest this update: Wed 08 Oct 2025 13:01:30 +0000
Manifest next update: Thu 09 Oct 2025 13:01:30 +0000
Files and hashes: 1: 0RltyGXYqOw5Hx9cC0hpgbUGn1M.roa (hash: mg2bYRQawjXXkuGc/ehoyx4cItI7XGim10ZVkynzOuM=)
2: NePUvxvA-BcoIF5R3gl884Ogzck.crl (hash: srJgw6w9/nHmBrrT4hzrpOAppRxaAkPgwZ74iFkUmNE=)
3: cC3qEyLwvQCoEx0E8fa6hCQIIMk.roa (hash: t6q5YnGG2tDRloa96C40IAzp6BUV/ndP0HTUzMGh9cA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:e9:9a:54:0c:8b:99:f2:d9:97:ea:90:76:c5:f4:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Validity
Not Before: Oct 8 13:01:30 2025 GMT
Not After : Oct 9 13:01:30 2025 GMT
Subject: CN=2d7267e26f8ed3ac6aa081f8c3f7e4d1c3784249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:39:ac:73:a2:ee:dc:f9:06:a0:27:e7:c6:43:
be:7b:bf:a0:69:09:5b:af:4d:9c:bf:82:72:49:09:
09:f1:34:17:7a:de:fa:d0:b7:75:04:e3:c0:36:61:
93:c5:e6:b7:c4:dc:9b:af:93:1c:aa:42:70:c3:1c:
cf:ce:c4:ec:8a:21:08:07:51:95:f9:77:0c:16:c0:
ae:60:24:c7:2f:de:78:c3:00:1a:41:e2:68:d6:52:
2e:04:7b:da:1e:62:5b:95:78:c8:ad:ca:94:bd:d4:
d8:6b:90:a0:4c:10:ac:6f:80:87:4b:88:ad:6a:3c:
54:c2:cd:f6:94:ea:05:53:dc:7e:83:bd:d3:87:3b:
e8:19:4e:96:a0:44:1c:96:71:bd:4a:08:58:72:c4:
82:70:92:01:e4:6b:90:7a:9c:0a:d2:4b:a9:69:9d:
6e:31:d0:14:1c:59:82:d3:44:2f:65:ba:c0:b3:dc:
7c:49:85:18:9a:64:a1:e8:53:c2:7d:8d:ff:72:91:
5d:e5:55:b9:79:8a:1d:f4:d7:20:1a:1a:0e:35:3c:
a8:60:5d:1e:42:f5:48:2f:6a:e8:bf:01:cf:76:90:
42:b8:56:30:75:b9:05:7c:27:aa:b7:00:25:22:3d:
5b:e3:77:2b:f9:65:33:29:ab:82:89:f8:63:b4:07:
ac:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:72:67:E2:6F:8E:D3:AC:6A:A0:81:F8:C3:F7:E4:D1:C3:78:42:49
X509v3 Authority Key Identifier:
keyid:35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:d2:25:c6:4f:2d:01:82:5c:1d:aa:97:a7:0c:cb:e1:54:98:
41:7d:cb:ba:24:0b:8d:5b:91:9b:c7:2f:3b:3e:6f:a4:bf:7b:
c5:65:0c:d4:c9:20:0e:32:33:e2:05:48:30:4a:82:e6:82:5d:
4d:f9:1a:27:9e:59:80:9c:a8:ac:0b:4c:66:16:91:61:a0:44:
db:8b:65:83:94:f1:b3:30:b7:33:5b:28:1a:dc:ab:eb:4d:01:
29:8a:30:48:4a:9f:23:b3:1a:36:0f:22:0a:fb:36:9e:88:17:
09:e5:a5:6e:5d:9a:fe:40:48:cb:7c:97:12:c0:de:ab:6a:20:
a0:31:47:45:65:89:61:fe:a6:df:84:55:1b:8e:91:d1:08:6b:
5f:87:01:16:d3:b4:83:87:21:aa:f7:54:fe:1e:cf:7f:e8:db:
f7:b6:6c:18:67:30:8e:50:ff:a0:e9:c3:c3:56:a2:bc:a3:54:
38:d0:30:25:cc:e5:7a:ee:e1:ea:71:64:c2:d7:34:a9:fd:41:
df:18:85:af:3f:4f:e6:e6:3e:f3:6a:af:a0:d3:d6:bf:61:25:
24:81:d6:de:37:15:38:9c:f1:78:3e:d2:64:4e:f5:08:1c:8d:
a3:62:7d:29:4b:25:a0:47:7f:65:11:69:51:5b:97:74:5b:c5:
cc:bb:9e:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnD6ZpUDIuZ8tmX6pB2xfSqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZTNkNGJmMWJjMGY4MTcyODIwNWU1MWRlMDk3Y2YzODNh
MGNkYzkwHhcNMjUxMDA4MTMwMTMwWhcNMjUxMDA5MTMwMTMwWjAzMTEwLwYDVQQD
EygyZDcyNjdlMjZmOGVkM2FjNmFhMDgxZjhjM2Y3ZTRkMWMzNzg0MjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjmsc6Lu3PkGoCfnxkO+e7+gaQlb
r02cv4JySQkJ8TQXet760Ld1BOPANmGTxea3xNybr5McqkJwwxzPzsTsiiEIB1GV
+XcMFsCuYCTHL954wwAaQeJo1lIuBHvaHmJblXjIrcqUvdTYa5CgTBCsb4CHS4it
ajxUws32lOoFU9x+g73ThzvoGU6WoEQclnG9SghYcsSCcJIB5GuQepwK0kupaZ1u
MdAUHFmC00QvZbrAs9x8SYUYmmSh6FPCfY3/cpFd5VW5eYod9NcgGhoONTyoYF0e
QvVIL2rovwHPdpBCuFYwdbkFfCeqtwAlIj1b43cr+WUzKauCifhjtAesewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1yZ+JvjtOsaqCB+MP35NHDeEJJMB8GA1UdIwQY
MBaAFDXj1L8bwPgXKCBeUd4JfPODoM3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmVQVXZ4dkEtQmNvSUY1UjNnbDg4NE9nemNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9jM2NkYTUtOGE2NC00MjkwLWEyM2Qt
YTYzNDc5MTQ0MGNhLzEvTmVQVXZ4dkEtQmNvSUY1UjNnbDg4NE9nemNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9jM2NkYTUtOGE2NC00MjkwLWEyM2QtYTYzNDc5MTQ0MGNh
LzEvTmVQVXZ4dkEtQmNvSUY1UjNnbDg4NE9nemNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAetIlxk8t
AYJcHaqXpwzL4VSYQX3LuiQLjVuRm8cvOz5vpL97xWUM1MkgDjIz4gVIMEqC5oJd
TfkaJ55ZgJyorAtMZhaRYaBE24tlg5TxszC3M1soGtyr600BKYowSEqfI7MaNg8i
Cvs2nogXCeWlbl2a/kBIy3yXEsDeq2ogoDFHRWWJYf6m34RVG46R0QhrX4cBFtO0
g4chqvdU/h7Pf+jb97ZsGGcwjlD/oOnDw1aivKNUONAwJczleu7h6nFkwtc0qf1B
3xiFrz9P5uY+82qvoNPWv2ElJIHW3jcVOJzxeD7SZE71CByNo2J9KUsloEd/ZRFp
UVuXdFvFzLueRw==
-----END CERTIFICATE-----
Generated at Wed Oct 8 21:25:10 2025 by rpki-client