Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
File: NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft (raw, json)
Hash identifier: dGxih7V4gyPn3xzKZG6r4vG6aTWnqY7OVE8W18DE1zk=
Subject key identifier: 75:D9:2B:31:8F:30:71:6E:23:8F:4E:0D:9A:92:10:C3:FF:E6:45:14
Authority key identifier: 34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
Certificate issuer: /CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
Certificate serial: 019A5D55EB2AC22967821D8CF3F43527C51E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
Manifest number: 026E
Signing time: Fri 07 Nov 2025 08:01:43 +0000
Manifest this update: Fri 07 Nov 2025 08:01:43 +0000
Manifest next update: Sat 08 Nov 2025 08:01:43 +0000
Files and hashes: 1: NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl (hash: BFnSrpd+V63oUZBbgphS+hjn8BxdrZloC5er0fNpMb0=)
2: fKWVJTY44C7pCGjwUOliWqaQJVU.roa (hash: 326Won+tbl9hhxcDH9reueW+5gTKRXqeRW0uSwLhsDA=)
3: xuTySrtO69FPOcG6SUnZEPsSQ9o.roa (hash: luyQlxdtnhbzwgU08jLpwvc2YYpUGSiEGEb8snEjI6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5d:55:eb:2a:c2:29:67:82:1d:8c:f3:f4:35:27:c5:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342e6536b2e74220ef4b092bc090cc4c250f3ed6
Validity
Not Before: Nov 7 08:01:43 2025 GMT
Not After : Nov 8 08:01:43 2025 GMT
Subject: CN=75d92b318f30716e238f4e0d9a9210c3ffe64514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3a:70:09:86:32:70:cc:4b:ec:1f:6f:b2:f6:
4c:08:5d:f8:9c:2e:49:c9:9d:33:79:23:3f:b3:20:
ae:bf:1e:29:cb:09:87:4c:86:17:4d:ab:8d:ad:f8:
3b:ca:9b:07:e4:5c:2a:e0:6b:93:62:d4:e2:7b:8e:
e3:00:9d:e7:7c:d1:8d:e5:11:c7:e0:a2:b9:48:18:
70:1c:11:90:54:16:9c:e0:e0:3f:3d:53:a8:57:57:
11:fc:83:dc:77:7f:7e:a1:00:8e:e8:b1:79:97:27:
d7:70:ce:22:f3:77:c3:b5:5d:75:7f:3c:f5:1b:f5:
a2:d7:f5:05:70:66:c9:59:1e:ce:3f:88:16:27:24:
cb:36:75:6c:16:64:c5:75:cd:66:cf:a1:8e:c3:f9:
be:8c:06:a2:88:d6:5b:01:c3:59:88:52:d0:9a:d6:
4f:0d:8f:a6:91:b4:21:e7:61:b2:5d:be:8d:33:26:
b8:cd:c3:1f:99:af:e5:5b:17:62:36:6b:42:6e:a9:
d2:d7:25:0b:65:cc:32:f9:1a:1c:6f:bf:b4:cc:0f:
17:5a:78:aa:e9:cb:73:97:49:a2:90:d7:72:b4:1b:
48:3f:bb:09:0b:72:c0:6a:9e:27:0f:65:c4:b1:d5:
fe:48:5c:96:58:a3:d2:d9:2a:0b:26:ab:bc:a3:5b:
c2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D9:2B:31:8F:30:71:6E:23:8F:4E:0D:9A:92:10:C3:FF:E6:45:14
X509v3 Authority Key Identifier:
keyid:34:2E:65:36:B2:E7:42:20:EF:4B:09:2B:C0:90:CC:4C:25:0F:3E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NC5lNrLnQiDvSwkrwJDMTCUPPtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f9462b-3749-44bb-84ee-ecd8a2474a02/1/NC5lNrLnQiDvSwkrwJDMTCUPPtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:cc:4c:66:2b:96:97:bf:cd:79:99:3d:65:51:e8:99:93:01:
e2:e6:85:78:5a:bc:4f:1f:a9:65:ae:5c:ea:ca:31:04:65:c6:
96:13:76:09:c3:a8:6f:bd:e6:e1:24:6d:79:cc:14:10:4a:db:
99:c4:2b:27:0b:a8:75:7d:95:f5:e2:a9:64:73:27:66:a4:96:
d9:a7:7e:42:df:ec:0e:6e:00:af:17:38:20:09:95:d8:b4:e9:
f9:c5:22:40:2f:4f:d4:f0:c4:ac:dc:93:85:63:59:ee:2e:60:
77:9f:3c:36:6e:24:b4:b0:3e:38:0b:43:1f:89:c4:60:54:55:
e6:a7:03:05:c9:d3:70:61:a1:8d:fe:6c:a4:20:6b:46:48:17:
51:80:c1:ac:5c:4b:50:f0:d2:4b:38:db:8f:2a:44:b5:44:68:
5c:69:4d:ce:05:00:06:35:25:3b:87:63:1e:48:9c:77:06:c0:
5d:92:cf:f4:70:f0:72:66:c2:5e:37:30:a2:66:d6:c9:84:4e:
c7:a9:66:31:38:e5:b7:7f:15:68:81:71:2c:f7:cb:5e:a0:f4:
b8:01:7e:e2:16:97:72:ac:d6:89:fd:4f:5e:1c:54:e0:1f:91:
be:2c:54:9d:ed:2c:02:81:ae:af:41:cf:e0:4e:f9:c4:b8:21:
fd:7a:7a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 14:06:22 2025 by rpki-client