Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft
File: NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft (raw, json)
Hash identifier: +Pjg7cTlCV3kwgq/PIFXc5zC0Z9T5Srsd0PP79hpFEM=
Subject key identifier: 9C:64:AF:B4:1C:CE:76:CA:3D:2E:15:7A:1E:7F:CE:06:33:78:32:EF
Authority key identifier: 36:0C:59:35:E5:1F:E7:06:C2:44:75:19:D9:B5:F9:5A:E3:63:C1:86
Certificate issuer: /CN=360c5935e51fe706c2447519d9b5f95ae363c186
Certificate serial: 019A725C72C5542E803CEDB0DACAE8E7E92B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft
Manifest number: 12CC
Signing time: Tue 11 Nov 2025 10:00:52 +0000
Manifest this update: Tue 11 Nov 2025 10:00:52 +0000
Manifest next update: Wed 12 Nov 2025 10:00:52 +0000
Files and hashes: 1: NgxZNeUf5wbCRHUZ2bX5WuNjwYY.crl (hash: UWXZ/IQl5X+R6uPaVk3rwGGwL6+E5bknCn9BOWqsJ/o=)
2: t502H2vMdpAeOhruVMNDr3Acpww.roa (hash: fOmBVqNdsH/gE4UkC59LOcZAoo+pjmsg19OUK4hM+ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:72:c5:54:2e:80:3c:ed:b0:da:ca:e8:e7:e9:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=360c5935e51fe706c2447519d9b5f95ae363c186
Validity
Not Before: Nov 11 10:00:52 2025 GMT
Not After : Nov 12 10:00:52 2025 GMT
Subject: CN=9c64afb41cce76ca3d2e157a1e7fce06337832ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f6:e5:6f:79:2c:62:91:fa:48:cc:b0:20:95:
93:bb:54:f7:df:9d:b9:86:93:22:61:2d:2a:ca:0b:
34:cd:f8:66:fc:01:4e:31:9d:a3:22:21:0d:f4:6e:
bb:6e:58:ab:e3:3d:7c:1f:e4:36:ce:04:fa:94:61:
1e:28:86:ee:d8:03:92:84:e5:a4:a1:dd:a4:1b:4b:
f8:16:2e:b0:fc:dd:68:f7:10:a5:e6:0f:06:33:af:
c3:3e:a8:78:04:98:db:07:18:1b:7c:b2:6d:47:ca:
c0:fc:77:ab:d9:a1:1e:b7:97:ba:27:f6:bc:db:36:
19:e4:c4:67:ec:43:07:86:a2:9d:9d:2c:79:35:89:
4e:2d:58:22:04:3e:c6:5a:5e:32:33:4e:ad:75:71:
cb:21:86:57:17:f9:84:6b:48:b6:45:43:7e:57:5c:
f0:64:ed:a8:8d:36:0c:1f:83:ab:ec:d4:18:22:e4:
1e:e1:83:31:a4:5e:b1:64:08:c3:14:9f:66:2f:b6:
5f:de:94:85:42:86:8b:22:90:6c:b5:c7:31:19:f2:
35:78:c7:1d:66:16:97:98:9f:63:52:1f:73:38:b0:
be:73:9c:2d:9b:1a:58:8f:54:e5:38:6d:33:7f:44:
9c:c1:d6:db:c0:ee:fc:97:9d:5f:f4:91:5b:7a:77:
fb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:64:AF:B4:1C:CE:76:CA:3D:2E:15:7A:1E:7F:CE:06:33:78:32:EF
X509v3 Authority Key Identifier:
keyid:36:0C:59:35:E5:1F:E7:06:C2:44:75:19:D9:B5:F9:5A:E3:63:C1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b0:45:80:19:44:32:08:74:3f:21:15:d1:38:67:1c:df:80:
6b:47:ae:6b:30:26:be:3e:a3:46:95:e9:bb:87:c7:16:b1:a7:
1c:03:cc:63:31:39:be:52:bd:08:cd:70:58:fd:67:9e:f0:57:
51:22:08:45:ea:36:9c:53:d3:f6:11:1a:11:f3:22:e4:83:2e:
7c:fd:37:d2:07:72:22:6e:d4:c3:99:25:7f:86:b3:ee:ae:bb:
c6:f0:b1:1d:77:30:d6:f2:0c:3f:46:b2:1b:0f:5c:f5:19:5e:
9e:b8:44:c0:35:b8:e7:fc:6f:eb:a4:60:2c:53:aa:6c:e0:44:
b2:7c:84:10:ad:45:5f:35:9e:2b:f8:98:e0:38:28:fc:fa:63:
9b:21:1a:1e:e6:8d:44:03:10:b1:99:d3:ad:9a:af:d5:30:64:
d4:8e:18:9f:47:da:b8:27:d2:01:06:f7:bd:dc:2c:55:19:95:
ea:20:72:b3:9b:0a:7c:77:68:0f:58:13:f9:81:f6:8f:41:e5:
37:6e:c3:fd:50:4c:20:15:48:3c:41:4f:19:e9:bd:7f:84:01:
e2:b7:3d:1d:b7:a4:21:f6:da:20:5f:f4:c6:1d:6d:c6:a6:58:
63:89:2d:69:0e:e0:c7:20:9b:15:a7:cf:34:2e:a7:0a:4b:16:
48:43:1d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:49 2025 by rpki-client