Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
File: NCUppgkAWDTcELW4AP5TEMWMxH4.mft (raw, json)
Hash identifier: Txe0Uqxpyqcw9um0TwQFIzgRaYIJ0vxcVYzwZB34314=
Subject key identifier: 5D:62:21:50:72:1F:FF:CA:C4:5F:F6:8B:5B:F3:10:86:71:6E:63:C0
Authority key identifier: 34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
Certificate issuer: /CN=342529a609005834dc10b5b800fe5310c58cc47e
Certificate serial: 019A72938DFB564A851CFC532FB33D70DBAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
Manifest number: 0307
Signing time: Tue 11 Nov 2025 11:01:03 +0000
Manifest this update: Tue 11 Nov 2025 11:01:03 +0000
Manifest next update: Wed 12 Nov 2025 11:01:03 +0000
Files and hashes: 1: NCUppgkAWDTcELW4AP5TEMWMxH4.crl (hash: aL2pe9z0WdNVMq1zKiHFNIewa0bwC4pxvRQeDcF14eg=)
2: Z_eZrq0pMGEuCobzf2HGLgxhvHM.roa (hash: L/Qhu9gR3mWIDrVB/JXQbyHDSmMMhTwgUj0OQ/bpGK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:8d:fb:56:4a:85:1c:fc:53:2f:b3:3d:70:db:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342529a609005834dc10b5b800fe5310c58cc47e
Validity
Not Before: Nov 11 11:01:03 2025 GMT
Not After : Nov 12 11:01:03 2025 GMT
Subject: CN=5d622150721fffcac45ff68b5bf31086716e63c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d9:89:1c:78:85:b2:40:6b:b2:92:11:64:70:
d1:dc:32:0c:3a:39:8e:31:f9:91:11:b3:86:22:f0:
c0:3f:db:79:9c:4d:cf:4c:c9:fd:b2:6f:5f:3d:6e:
96:62:a2:88:eb:37:5a:17:dd:1b:e6:04:de:d5:0d:
3b:35:59:68:2f:58:93:38:95:8e:cd:85:d2:52:63:
7d:a0:f4:5f:13:6b:07:ba:e4:56:b6:54:3f:5a:14:
07:53:91:29:0b:4b:7e:11:82:a4:55:6b:37:f9:e5:
ef:6c:7e:87:ba:1a:0b:17:80:e0:57:0c:39:83:b2:
19:f6:e4:b1:5e:bf:d5:71:45:a5:0d:68:0a:f6:ab:
7b:c6:48:ac:2a:ad:62:a6:52:88:b3:2f:ed:2d:5e:
fe:5e:4a:ef:c9:70:0f:ab:52:58:8b:5e:c1:89:28:
28:a5:75:39:70:b6:a5:62:74:78:cd:16:b7:7a:4b:
6d:a0:dd:a4:be:33:d5:53:26:4b:ed:b8:a5:f2:4c:
6b:c4:3b:ed:27:c9:dc:3d:c1:26:d6:74:2d:6a:27:
b2:95:3f:e0:ac:ac:26:78:b0:02:ec:d6:39:6d:8a:
92:9a:2f:b9:c1:0f:2c:77:bc:46:b5:c9:88:70:f2:
c0:32:46:ae:67:7d:ff:8c:1f:eb:00:95:8f:30:cd:
0e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:62:21:50:72:1F:FF:CA:C4:5F:F6:8B:5B:F3:10:86:71:6E:63:C0
X509v3 Authority Key Identifier:
keyid:34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:6a:0a:68:54:63:ed:3e:08:a8:09:4a:2c:4b:b0:fc:4b:3d:
2b:95:77:da:3c:15:05:fa:d5:8d:c5:7e:1a:d0:3c:8a:5e:d8:
cc:24:63:d9:2b:49:84:22:54:8c:9b:ae:6c:e5:4c:b8:d3:20:
fb:7c:99:84:09:2f:82:c2:26:48:6e:a6:f4:26:39:58:4e:33:
1e:e9:72:1f:ca:7d:63:a0:9f:2b:6e:fe:46:c3:42:87:30:c0:
a3:01:ee:5e:f0:f1:e6:e0:5a:45:0a:4d:e6:49:2e:df:26:97:
0a:8a:b9:f1:39:b5:c3:0d:0f:80:93:ce:81:64:b8:7d:81:e6:
97:2d:c7:74:35:fe:2f:b1:2c:82:7d:39:ed:ae:6d:0f:13:0b:
df:5b:03:43:cc:78:93:a4:43:e8:6c:01:6b:c4:3b:9b:b4:fe:
0f:a6:b3:7e:ce:89:e6:6f:f6:ab:0f:71:d7:2f:50:b7:ba:41:
61:1b:28:ba:91:2a:f2:ab:c7:6f:d3:4f:ab:8f:8c:4d:45:b5:
b6:4e:27:75:4f:13:0a:90:f4:6e:37:5d:bd:c8:e2:c0:ca:5e:
47:d3:59:2e:8c:b0:14:e9:6c:bd:5b:24:f1:71:54:f1:3d:33:
5e:28:db:d9:95:e7:62:e9:a9:1c:f8:d6:f7:3e:3a:0d:66:02:
0b:15:fa:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:55 2025 by rpki-client