Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft
File: NldL5q52zVI7M3h8-9tpJkJj0HQ.mft (raw, json)
Hash identifier: O970jEDXM0mq+u/HXoywpTfAH4pdlMC1wigey9ucrpc=
Subject key identifier: 77:4D:B5:DD:FB:DE:3D:99:F1:3A:3A:41:7D:02:0D:67:64:DD:CA:8F
Authority key identifier: 36:57:4B:E6:AE:76:CD:52:3B:33:78:7C:FB:DB:69:26:42:63:D0:74
Certificate issuer: /CN=36574be6ae76cd523b33787cfbdb69264263d074
Certificate serial: 019A07EE7C917065FF028567D217AEF32CAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft
Manifest number: 16EC
Signing time: Tue 21 Oct 2025 18:01:01 +0000
Manifest this update: Tue 21 Oct 2025 18:01:01 +0000
Manifest next update: Wed 22 Oct 2025 18:01:01 +0000
Files and hashes: 1: 1-gyxFvtsdFvYTZX0Y9fbT2PSGFM.roa (hash: EABdk5cioKlboVX+5roxKxOS78qf+VdGIdGNtobQ0pE=)
2: KArVYyPO9fBEhTTRJ1tDthlJCOw.roa (hash: a0gp1BPnbKmQpx9TqJhgPqer5KuegL1mEbSjNdCn0ek=)
3: NldL5q52zVI7M3h8-9tpJkJj0HQ.crl (hash: OlTyCyQL7n0045ijvWH7YzTvKLT6Cjh0xmjK1FNZBoQ=)
4: SErRHgSbJegvTKQp5_vKPuL-I0M.roa (hash: 5izdqURGD+Gcq0q1le3LSPtQmkAtZ+szcc8AfWWlrxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:ee:7c:91:70:65:ff:02:85:67:d2:17:ae:f3:2c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36574be6ae76cd523b33787cfbdb69264263d074
Validity
Not Before: Oct 21 18:01:01 2025 GMT
Not After : Oct 22 18:01:01 2025 GMT
Subject: CN=774db5ddfbde3d99f13a3a417d020d6764ddca8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d3:0e:33:61:ef:15:a1:05:1c:29:26:5e:a8:
bd:d2:a4:67:fc:85:fa:53:d3:d8:dd:3c:1f:8d:7c:
15:49:14:5a:66:12:62:9c:3e:45:82:8b:f6:85:f3:
7b:b9:7e:46:63:17:ec:84:cb:3c:c6:0d:f9:3a:7e:
ce:77:4f:2b:35:d9:db:14:92:68:80:a8:bf:c8:a4:
45:b7:59:66:70:3a:12:35:27:72:0d:43:00:a1:a8:
ed:5c:c0:46:90:d2:92:68:07:33:55:68:3a:22:83:
2f:f0:8d:cf:70:e3:ef:7c:bb:47:f4:0e:d7:b2:4b:
2b:06:46:57:7c:5f:b3:2a:3d:f3:06:0f:6f:d3:e1:
58:77:c9:d0:e8:0e:2b:25:10:2c:94:3c:eb:21:53:
4d:49:8b:de:a0:81:4e:c1:1a:03:a2:5b:d2:2d:28:
f5:4e:7d:1e:6e:3f:10:65:f1:15:45:f2:4e:90:e2:
cd:e5:5d:c2:3c:06:ec:1d:cc:1a:50:17:c4:44:8e:
b7:44:7d:a7:56:7b:75:63:32:bf:c7:f8:19:da:cf:
f9:b4:ef:c1:b6:a9:be:fe:45:9c:da:21:32:93:5a:
df:09:a0:42:7a:73:ce:4a:08:63:97:81:26:56:64:
fd:b9:1b:43:b1:44:a3:2e:bf:25:cb:90:a6:54:cc:
eb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:4D:B5:DD:FB:DE:3D:99:F1:3A:3A:41:7D:02:0D:67:64:DD:CA:8F
X509v3 Authority Key Identifier:
keyid:36:57:4B:E6:AE:76:CD:52:3B:33:78:7C:FB:DB:69:26:42:63:D0:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:74:06:c7:3b:e6:f7:99:cf:fa:ec:2f:06:49:e3:f4:61:38:
cc:9b:37:f4:10:12:d4:fa:36:81:9e:8e:2f:8c:20:f1:1b:0f:
b9:73:11:46:fd:dc:a1:fc:a8:84:12:9f:0e:16:bf:75:b7:60:
bc:de:fe:3f:03:6b:1b:66:c6:a0:4b:9e:22:28:36:b8:e4:79:
bf:2b:74:75:4d:a2:81:e6:b4:cf:10:13:01:57:aa:19:53:45:
d3:cd:f5:7f:02:7e:16:aa:04:e6:0c:b1:fc:bf:77:c9:26:4a:
fe:36:ea:e6:b1:ed:0e:6d:dc:68:27:14:24:9a:57:f7:5c:6b:
25:1e:5d:f6:31:28:07:6a:9f:06:af:fe:bb:ef:de:ca:08:df:
87:f4:6b:2e:54:00:fb:1c:5c:3a:db:7e:dc:43:42:55:ab:26:
4a:b4:d2:d9:5a:0c:40:c8:ca:a7:fb:e5:e3:07:76:be:3f:7a:
a5:4f:ef:98:39:e8:9d:1f:88:17:83:98:3b:ad:5b:6e:98:00:
95:78:18:ac:3e:fd:33:ff:52:d9:33:09:de:06:d7:76:3a:6e:
d8:6e:75:92:3e:77:f0:b9:45:bc:5a:48:9d:52:2f:0f:cc:a4:
6e:ea:f1:3d:9f:59:92:7a:d7:02:48:ea:28:01:ef:5d:15:53:
1d:8b:4c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 20:20:54 2025 by rpki-client