Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft
File: NEwINt1cc7B3WQTqo7foekoMDPU.mft (raw, json)
Hash identifier: I9tJHkCS6dgBEwe2YyM61Qp4Bim90JuOCsIKNnkJ4Ng=
Subject key identifier: CD:95:BC:ED:AC:C2:E0:59:82:C6:5D:22:82:F6:5E:52:4D:DF:A5:98
Authority key identifier: 34:4C:08:36:DD:5C:73:B0:77:59:04:EA:A3:B7:E8:7A:4A:0C:0C:F5
Certificate issuer: /CN=344c0836dd5c73b0775904eaa3b7e87a4a0c0cf5
Certificate serial: 019A71EE5F3B2101300C0E860485C0E1479D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEwINt1cc7B3WQTqo7foekoMDPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 08:00:38 +0000
Manifest this update: Tue 11 Nov 2025 08:00:38 +0000
Manifest next update: Wed 12 Nov 2025 08:00:38 +0000
Files and hashes: 1: BTCMCQxXpgg5K5ucl-jfs_-nD0A.roa (hash: 72PY3Qqmz1maPY+ZM8ykIYNT4ZWmcAK3NGiS506bQm0=)
2: NEwINt1cc7B3WQTqo7foekoMDPU.crl (hash: TR6YxbEoxDp2eRAnhf70X6B3+1jdhMZhPYxE2sI1TYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NEwINt1cc7B3WQTqo7foekoMDPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:5f:3b:21:01:30:0c:0e:86:04:85:c0:e1:47:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344c0836dd5c73b0775904eaa3b7e87a4a0c0cf5
Validity
Not Before: Nov 11 08:00:38 2025 GMT
Not After : Nov 12 08:00:38 2025 GMT
Subject: CN=cd95bcedacc2e05982c65d2282f65e524ddfa598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b8:58:96:73:e5:12:27:3c:37:56:6e:1d:60:
c4:1a:30:ee:c1:8c:d5:03:13:7d:a3:4d:88:e5:aa:
27:35:af:9e:9f:55:96:8b:6c:d5:fb:d0:ed:cc:9d:
39:30:67:a1:67:e6:ab:7d:a4:32:27:e3:f1:d6:e4:
5a:52:50:f0:6b:77:c6:ad:a0:d2:0c:43:98:f9:b0:
68:ab:72:24:f0:93:4d:2a:b0:3f:50:1b:4f:bc:13:
66:f4:3a:fb:e8:2a:ec:c4:71:24:6f:4a:25:1b:a1:
0e:6c:6a:a6:14:83:25:a5:a2:27:76:9b:bb:0f:35:
ed:85:3b:1e:ed:85:95:a2:5d:c6:86:d0:77:0f:82:
ad:6a:6c:b8:3a:db:17:e2:2b:14:78:70:9b:28:a2:
34:fb:2b:02:91:5c:5d:31:8c:e5:c8:4c:41:5c:9a:
89:34:d7:f6:42:66:17:66:98:be:e3:57:06:2b:9f:
82:01:c2:c6:8b:90:9a:3d:0e:df:83:1f:cb:f7:15:
11:34:ff:e6:ce:10:03:a9:cd:84:8f:ae:84:65:ef:
d1:df:1e:6d:be:60:81:d0:fb:d5:e2:a4:08:1c:6d:
5f:ff:67:c8:51:f2:39:95:04:82:86:29:e7:6e:6f:
e4:74:40:b9:5c:77:6f:83:2e:e4:db:65:e8:a9:c5:
6c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:95:BC:ED:AC:C2:E0:59:82:C6:5D:22:82:F6:5E:52:4D:DF:A5:98
X509v3 Authority Key Identifier:
keyid:34:4C:08:36:DD:5C:73:B0:77:59:04:EA:A3:B7:E8:7A:4A:0C:0C:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEwINt1cc7B3WQTqo7foekoMDPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:96:5f:1b:e2:11:ec:82:09:81:73:0e:3a:37:bd:15:4b:31:
a7:11:f3:eb:d3:7b:06:ab:c1:fa:1c:c3:66:f9:f9:de:ad:5e:
76:77:bf:29:81:af:3b:41:89:d4:a7:8f:ba:6b:e7:af:6c:d5:
d9:23:17:18:7a:26:b4:68:36:8f:fe:36:5c:30:59:ab:2e:3d:
46:34:2f:f0:3a:32:63:38:be:2b:71:9f:af:7c:f3:3c:35:86:
6e:c8:68:41:46:dc:bd:88:47:4f:5b:d6:3b:43:35:48:c8:38:
45:1c:0a:8b:43:75:1c:cf:a5:7e:2f:a0:e7:35:4c:e0:82:88:
e7:85:e8:20:2e:0d:b9:ef:23:88:97:98:09:bd:7f:fd:e3:a9:
df:c6:89:f3:c3:1e:57:5e:ba:31:55:9d:b4:20:7c:9a:fd:79:
75:f8:a4:16:dc:2d:21:c7:c8:5f:ee:a2:ac:bb:48:3b:f2:ba:
ec:ee:77:f9:01:88:6d:c7:5c:e5:1c:29:27:2f:f7:4b:4b:6c:
c0:5d:b1:2c:f3:e6:12:1f:41:dd:83:52:ca:d8:8c:c5:40:e0:
ee:d1:8c:ad:1b:71:a6:4c:87:41:46:ba:90:3e:fe:d8:31:1e:
79:a7:bc:f5:71:6e:ee:52:93:6f:95:95:86:85:31:56:f5:59:
d7:fb:4c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:33 2025 by rpki-client