Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
File: NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft (raw, json)
Hash identifier: emuaMw6mcZjo676/1UbCKI+7/xaP/+ifiuDZei5Nb1U=
Subject key identifier: 81:1F:6E:32:21:3A:54:64:50:79:81:89:53:52:7B:FA:F4:A4:1C:02
Authority key identifier: 34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E
Certificate issuer: /CN=34e110b59362f673eae33b66ee7aea3c4028294e
Certificate serial: 019A21ADDD5848EBA90023CAC54B68FFF062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
Manifest number: 0E6D
Signing time: Sun 26 Oct 2025 18:00:33 +0000
Manifest this update: Sun 26 Oct 2025 18:00:33 +0000
Manifest next update: Mon 27 Oct 2025 18:00:33 +0000
Files and hashes: 1: NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl (hash: tqVORs/G8BM9Og017THRCAzaIBAkZGuXbHT1lKCqwOY=)
2: XtfUxUGkjCJuklebiN54Yxg8R5M.roa (hash: 6ylTl3fnc+Bg9Pz92d7wJrvdCwc0XcQ4KZdtR4bRI4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 18:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ad:dd:58:48:eb:a9:00:23:ca:c5:4b:68:ff:f0:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e110b59362f673eae33b66ee7aea3c4028294e
Validity
Not Before: Oct 26 18:00:33 2025 GMT
Not After : Oct 27 18:00:33 2025 GMT
Subject: CN=811f6e32213a54645079818953527bfaf4a41c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a1:a0:88:06:90:70:0a:1c:52:12:e3:67:36:
c4:56:97:5b:e1:16:e5:43:07:84:66:41:2e:2e:ab:
2b:ac:1f:b7:e1:f4:8b:72:40:e8:3f:1b:ea:d0:64:
b9:6a:dd:4c:72:f4:77:c8:d5:f9:32:9e:27:8f:ac:
17:bc:ff:c7:3b:0d:84:e2:19:c7:d1:16:62:0c:4f:
a3:76:07:fd:2d:0b:a4:89:ed:c2:c2:9b:35:78:93:
fd:ae:79:6e:d7:6b:16:cb:96:ab:42:0d:02:f6:02:
78:d2:21:0f:4d:4a:ec:2c:ed:a7:ca:57:f7:33:d0:
b4:dc:91:ef:0c:96:c6:81:73:c9:5f:b6:52:4a:f9:
f4:9b:f2:af:ab:ec:45:b3:ea:eb:fb:95:33:dc:b2:
32:74:f5:87:82:ac:e6:c4:09:0e:2d:56:97:d1:c9:
9b:51:b5:a7:ae:c5:a4:4a:55:35:d9:72:1c:ed:fc:
fa:4d:e8:75:26:4f:6f:84:f4:99:e8:4b:7a:10:82:
10:37:a4:03:e2:ba:f5:df:9e:b2:62:c2:13:e8:c2:
ba:d0:16:86:39:42:53:76:e9:89:54:39:0c:0b:48:
54:a6:c9:1f:b9:9c:d8:4c:48:36:cb:f8:dc:0a:a2:
ed:ca:06:fc:06:78:c5:4e:95:e8:c6:68:c9:1e:b4:
68:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1F:6E:32:21:3A:54:64:50:79:81:89:53:52:7B:FA:F4:A4:1C:02
X509v3 Authority Key Identifier:
keyid:34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:e6:3a:94:1b:52:e7:cb:8d:8d:70:2d:9b:1b:47:cf:36:5a:
3d:c9:85:31:31:9c:97:4e:ae:4e:21:5d:ba:7b:c6:31:ca:bd:
59:85:df:47:b0:04:39:69:42:68:52:9e:ec:fe:47:3b:50:a0:
ce:77:45:8b:d0:8e:dc:27:29:2b:29:9d:d6:ef:60:39:d9:6b:
ff:73:81:8a:65:1e:9e:39:d2:67:de:9e:c7:26:fa:87:88:34:
36:49:70:43:0b:a2:e9:d9:04:e3:d8:d4:d3:9a:fb:f2:99:79:
ab:27:fe:30:0e:4b:d4:1f:23:5d:50:96:0d:fc:47:6b:f0:4b:
20:ac:df:02:56:3e:71:d5:84:b4:d3:9a:4a:0e:6b:79:ab:f7:
d7:9c:d5:fc:21:93:c5:d2:54:92:ef:68:d1:cf:bf:0d:cf:45:
59:f7:bc:61:41:67:22:0c:d9:81:dd:0b:36:bb:f3:38:ff:27:
e7:e6:e4:2c:0d:4a:8d:b9:56:a6:80:a2:e9:62:68:80:50:d8:
bc:a8:fc:35:5e:98:b3:f4:90:7b:6d:ba:95:98:f6:88:13:b2:
cd:4c:e3:2f:f8:f9:72:b0:84:06:12:d8:d5:65:92:38:b5:92:
ae:28:76:1a:77:21:3a:9f:ac:49:c6:35:7f:bc:33:26:e7:7d:
9b:3b:d9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:37:25 2025 by rpki-client