Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
File: CNedINdqndsHW5T58ABSqyGCdrc.mft (raw, json)
Hash identifier: nVAcfoJblrspnqtIj34BCz1fjQLzd9fzfUBXQ8dekl0=
Subject key identifier: 31:C0:F7:3B:BA:E6:3D:83:02:3A:8E:D7:A4:8E:F6:B4:6B:41:58:ED
Authority key identifier: 08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
Certificate issuer: /CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Certificate serial: 019A722579FF5105E08C37E8C6D9BD142CF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
Manifest number: 10EA
Signing time: Tue 11 Nov 2025 09:00:49 +0000
Manifest this update: Tue 11 Nov 2025 09:00:49 +0000
Manifest next update: Wed 12 Nov 2025 09:00:49 +0000
Files and hashes: 1: CNedINdqndsHW5T58ABSqyGCdrc.crl (hash: IOqlynREgI3J+ESQ28P5y87wmaJnFwmIxXDpJZUDUV0=)
2: NxR6rjQYDvK-6beKZqhb21Ma0h0.roa (hash: eDS+0w8Ojc9YalXnJemejPGahb1kTWYCKBq2prUt9qg=)
3: _BQI9-Z6Ir5h5KACcOfrToSjkeU.roa (hash: +8QwmWebGpDaCA9AoYcnSa24keLkeW7OwUobTrC8xMY=)
4: ytooMvIrVe1UKIoWb2AsvqDHusU.roa (hash: FNi924Rn+Q0YpiKfx0DUW4i6K1Um3nkEm9RbN6FN7Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:79:ff:51:05:e0:8c:37:e8:c6:d9:bd:14:2c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Validity
Not Before: Nov 11 09:00:49 2025 GMT
Not After : Nov 12 09:00:49 2025 GMT
Subject: CN=31c0f73bbae63d83023a8ed7a48ef6b46b4158ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a5:a6:88:d1:74:79:ae:5d:81:36:83:03:cf:
b4:42:05:b2:8d:11:c1:eb:53:fb:ae:03:75:20:f0:
cc:5a:46:28:38:20:d5:af:e0:d4:db:b0:7d:cb:69:
b1:75:f8:c0:fe:e2:cd:4c:9d:16:2d:02:72:68:11:
f0:f0:54:ed:6e:df:58:ea:19:b6:5c:55:47:0b:ee:
dc:cb:ce:65:3c:4f:d1:25:13:52:dd:d1:4e:d4:8d:
b3:59:f6:dd:79:1b:40:ff:f2:e5:fc:85:99:55:bd:
5e:bf:e9:f2:51:03:71:e8:a7:d8:64:b8:08:5c:3b:
c1:cf:98:f4:1a:dd:1c:ba:51:b5:b4:82:d9:2d:89:
64:e2:56:13:d9:a4:68:ea:d1:14:1a:ca:18:bf:2c:
31:93:6f:92:7f:8e:9f:13:96:f8:51:ac:cd:e9:02:
eb:7b:0e:bf:21:36:cd:cd:52:ef:9d:9d:96:3f:21:
d4:51:2b:8f:b1:89:65:7c:fe:ea:3c:e7:1c:ca:8c:
fd:73:55:91:4d:18:48:02:76:97:4b:66:17:9b:89:
75:78:00:a2:03:4d:13:ad:8a:99:e6:12:ec:96:bb:
52:2c:4f:e4:7f:d4:36:00:45:16:d0:96:b3:6a:ed:
e7:81:23:3e:96:79:f5:16:fc:1e:54:02:c5:ec:43:
e7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C0:F7:3B:BA:E6:3D:83:02:3A:8E:D7:A4:8E:F6:B4:6B:41:58:ED
X509v3 Authority Key Identifier:
keyid:08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:62:74:b3:05:37:2f:d7:ac:7d:63:75:39:4f:ac:39:74:75:
34:d2:a7:0b:da:8e:9c:90:c6:10:c2:9f:80:f8:a9:12:91:25:
d7:d4:da:b2:b8:10:85:56:9d:fc:10:36:71:28:06:09:97:23:
b1:9c:74:b2:f4:29:56:a9:8a:ae:7a:dd:d9:11:3e:da:16:13:
04:81:86:3c:bd:a2:d7:90:26:b6:51:a3:ae:33:2e:d3:c2:72:
38:d1:7d:8e:76:b5:9f:d6:98:65:44:e7:7c:c7:4a:25:9a:ba:
b6:ac:1c:96:3d:62:80:83:f6:8e:3d:68:0f:dc:35:e5:71:57:
40:e0:6f:84:92:79:cb:a5:5b:d8:cc:0a:dc:d3:f4:f1:fb:cc:
ea:99:5d:e4:2a:6a:bb:4c:3f:fd:05:b2:d7:92:08:ac:5d:3b:
ed:33:1d:70:7e:7b:67:98:30:11:6b:45:44:32:47:ec:c0:c4:
1c:a8:d4:69:03:b2:89:8f:ec:ff:49:51:1b:aa:9d:dc:f1:d8:
c3:10:b3:57:6b:d9:b1:92:c1:8d:2c:2b:2f:fd:fc:33:89:3f:
e6:c9:f0:7c:76:76:72:e5:a6:8b:73:a9:e1:79:19:d0:53:62:
ba:fc:c8:10:61:f0:9f:3a:f8:79:51:ff:67:3b:90:4a:2f:81:
ee:1c:a1:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJXn/UQXgjDfoxtm9FCzyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDc5ZDIwZDc2YTlkZGIwNzViOTRmOWYwMDA1MmFiMjE4
Mjc2YjcwHhcNMjUxMTExMDkwMDQ5WhcNMjUxMTEyMDkwMDQ5WjAzMTEwLwYDVQQD
EygzMWMwZjczYmJhZTYzZDgzMDIzYThlZDdhNDhlZjZiNDZiNDE1OGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qWmiNF0ea5dgTaDA8+0QgWyjRHB
61P7rgN1IPDMWkYoOCDVr+DU27B9y2mxdfjA/uLNTJ0WLQJyaBHw8FTtbt9Y6hm2
XFVHC+7cy85lPE/RJRNS3dFO1I2zWfbdeRtA//Ll/IWZVb1ev+nyUQNx6KfYZLgI
XDvBz5j0Gt0culG1tILZLYlk4lYT2aRo6tEUGsoYvywxk2+Sf46fE5b4UazN6QLr
ew6/ITbNzVLvnZ2WPyHUUSuPsYllfP7qPOccyoz9c1WRTRhIAnaXS2YXm4l1eACi
A00TrYqZ5hLslrtSLE/kf9Q2AEUW0Jazau3ngSM+lnn1FvweVALF7EPnwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDHA9zu65j2DAjqO16SO9rRrQVjtMB8GA1UdIwQY
MBaAFAjXnSDXap3bB1uU+fAAUqshgna3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05lZElOZHFuZHNIVzVUNThBQlNxeUdDZHJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zNzEwOWQtMTMzNy00YjJkLWJjMWIt
NDhkYzg4YjU2MDIwLzEvQ05lZElOZHFuZHNIVzVUNThBQlNxeUdDZHJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8zNzEwOWQtMTMzNy00YjJkLWJjMWItNDhkYzg4YjU2MDIw
LzEvQ05lZElOZHFuZHNIVzVUNThBQlNxeUdDZHJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMWJ0swU3
L9esfWN1OU+sOXR1NNKnC9qOnJDGEMKfgPipEpEl19TasrgQhVad/BA2cSgGCZcj
sZx0svQpVqmKrnrd2RE+2hYTBIGGPL2i15AmtlGjrjMu08JyONF9jna1n9aYZUTn
fMdKJZq6tqwclj1igIP2jj1oD9w15XFXQOBvhJJ5y6Vb2MwK3NP08fvM6pld5Cpq
u0w//QWy15IIrF077TMdcH57Z5gwEWtFRDJH7MDEHKjUaQOyiY/s/0lRG6qd3PHY
wxCzV2vZsZLBjSwrL/38M4k/5snwfHZ2cuWmi3Op4XkZ0FNiuvzIEGHwnzr4eVH/
ZzuQSi+B7hyhdg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:04 2025 by rpki-client