Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
File: NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft (raw, json)
Hash identifier: +NX0+Lb7k7yqiZE3bX/MdyaD+HyeO/evyKo7HuHAC6g=
Subject key identifier: 72:AD:1F:B3:9F:33:6B:EA:0C:7F:BC:9C:C4:CD:CB:E2:9D:88:B3:77
Authority key identifier: 34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45
Certificate issuer: /CN=34e40348463c60ce9fc694060a37f4683093f045
Certificate serial: 019A70A5841C89DDE516CA71AD39E032F32B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
Manifest number: 0B08
Signing time: Tue 11 Nov 2025 02:01:26 +0000
Manifest this update: Tue 11 Nov 2025 02:01:26 +0000
Manifest next update: Wed 12 Nov 2025 02:01:26 +0000
Files and hashes: 1: NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl (hash: iacLBAeu9/zK9DOl7F+ieHX4+K3CSGuLMLdJi70z3eQ=)
2: t1BHctdeN3-hwrpqiOWRf8QN_Co.roa (hash: sJPUaFdOg0DhAMbLJjpATv5AEJJ9zxfLTR5pbOXKFNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:84:1c:89:dd:e5:16:ca:71:ad:39:e0:32:f3:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e40348463c60ce9fc694060a37f4683093f045
Validity
Not Before: Nov 11 02:01:26 2025 GMT
Not After : Nov 12 02:01:26 2025 GMT
Subject: CN=72ad1fb39f336bea0c7fbc9cc4cdcbe29d88b377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1d:e4:ec:20:1a:35:7a:71:9e:ec:0e:e3:ec:
5c:02:6a:98:3d:9a:89:da:c2:d9:1d:89:b9:fb:e0:
9e:03:69:c9:f0:0f:0c:cd:27:4f:27:71:03:26:4b:
7f:7d:f0:b8:46:14:4d:25:31:23:b3:90:0b:78:08:
29:cd:54:cc:f1:00:0e:af:ec:6f:37:67:87:e3:91:
8b:1c:69:ef:9a:e3:b1:4d:8e:40:45:3b:a9:6c:04:
36:23:b6:06:87:0e:c3:38:7a:93:ab:9a:d8:6f:b3:
97:ff:06:c9:f7:b3:b4:7f:12:25:4a:3d:42:37:1b:
5e:fd:d9:73:f2:5c:a0:18:53:e9:67:7e:0f:a9:70:
91:6d:8e:bd:b0:0a:72:f5:d9:65:83:02:8c:85:75:
8d:59:5d:a1:12:46:a1:e4:48:16:98:95:6e:97:7d:
83:56:25:bf:a1:70:e9:7c:a9:4f:02:0d:97:2f:fe:
17:a5:db:12:49:ef:ca:cc:7e:2d:d4:33:33:d8:36:
a0:6d:52:be:eb:14:55:83:3d:10:77:d7:dc:ab:92:
9e:70:07:96:aa:43:f7:1a:09:df:de:0f:95:1a:04:
c9:2e:74:3e:05:fc:3d:cc:34:40:9b:cc:a7:6b:96:
98:93:5f:e4:59:54:68:bc:a8:22:4c:50:3b:f9:46:
49:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AD:1F:B3:9F:33:6B:EA:0C:7F:BC:9C:C4:CD:CB:E2:9D:88:B3:77
X509v3 Authority Key Identifier:
keyid:34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:17:cb:c7:56:7c:48:42:03:9c:39:22:65:08:2e:99:0f:6c:
54:4b:23:74:9f:86:52:18:bb:ec:c9:04:33:0f:76:36:c2:db:
e3:34:58:7b:7c:af:2b:c2:79:e2:26:01:57:e1:c7:17:23:93:
e9:75:7b:14:fe:f6:f0:32:2d:3f:8f:c0:62:61:dc:69:49:6a:
12:5d:1e:97:86:dd:11:59:f9:46:6f:3b:0a:65:c3:c4:89:a6:
80:7c:e5:d1:9e:50:42:18:c7:11:27:53:f5:0d:77:63:61:74:
7c:ff:52:f9:7a:74:51:a3:c8:51:65:3a:ad:6c:b9:5a:9a:e3:
69:7f:82:e7:02:29:b2:70:7f:f1:f1:d9:bb:2c:4f:1e:db:82:
16:44:a8:94:9e:9b:8b:85:7e:1a:1b:53:7d:1c:c1:46:7e:69:
63:fc:78:15:f8:0b:30:cf:df:60:95:e6:35:57:9e:b2:e9:75:
b7:db:c2:24:d7:e7:74:55:72:e6:98:02:9d:47:16:84:ca:89:
3b:1d:cc:8a:ab:23:8c:8c:cb:2b:fc:55:67:80:a5:68:5f:b9:
40:5b:22:25:e5:46:24:94:85:6a:48:52:1a:55:df:1a:5e:27:
1d:41:7a:48:02:77:2d:3f:26:75:2b:c5:c3:4b:47:48:86:4d:
ab:da:3b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:34 2025 by rpki-client