Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.mft
File: NOg_QeXSQlTJCobjsrt6gK8DlyE.mft (raw, json)
Hash identifier: JPOQ1nYMzkDXGqHYcRbMz4QgL70L7aw8QioccBmxzLE=
Subject key identifier: CC:DB:81:33:41:2B:E5:86:EC:23:EC:72:5F:7B:77:50:A3:68:95:E9
Authority key identifier: 34:E8:3F:41:E5:D2:42:54:C9:0A:86:E3:B2:BB:7A:80:AF:03:97:21
Certificate issuer: /CN=34e83f41e5d24254c90a86e3b2bb7a80af039721
Certificate serial: 019A70DC54ABE793DE7F0982B06FF69C278B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOg_QeXSQlTJCobjsrt6gK8DlyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.mft
Manifest number: 15B2
Signing time: Tue 11 Nov 2025 03:01:18 +0000
Manifest this update: Tue 11 Nov 2025 03:01:18 +0000
Manifest next update: Wed 12 Nov 2025 03:01:18 +0000
Files and hashes: 1: NOg_QeXSQlTJCobjsrt6gK8DlyE.crl (hash: WckJqhFFXlUXheDk4hzgL1CC2+pI/l0bCqUFB+2J+Y8=)
2: UO1KioDak-iT8kDHcohpIq9FtOw.roa (hash: c3Q9cGyrR1r4x1r6NclTtEj7o03+DJv3Ywm72vFkEgk=)
3: kh50C_NbBjs1xffmc65N3htJRDA.roa (hash: zegMkFf00MvL1ZefKCFbf5kmHagYnvltoauO7HXIkok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOg_QeXSQlTJCobjsrt6gK8DlyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:54:ab:e7:93:de:7f:09:82:b0:6f:f6:9c:27:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e83f41e5d24254c90a86e3b2bb7a80af039721
Validity
Not Before: Nov 11 03:01:18 2025 GMT
Not After : Nov 12 03:01:18 2025 GMT
Subject: CN=ccdb8133412be586ec23ec725f7b7750a36895e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:95:f7:27:87:ac:3e:ed:e9:d3:47:ca:45:78:
63:4b:35:2d:2c:17:d2:12:7a:d1:cb:1d:36:47:c0:
f8:52:1d:f3:d1:65:3d:91:d3:52:67:1e:13:d7:6e:
51:38:a0:91:15:c8:24:43:0e:a3:a3:ce:65:b4:68:
55:8e:d0:3a:7f:b2:9e:7e:fe:68:99:f2:ab:b8:da:
13:d3:f4:78:f9:14:7b:57:0e:8c:87:24:36:ad:cd:
0c:83:ba:54:8d:ee:34:61:28:cf:4c:ae:60:eb:e6:
2a:51:08:99:56:13:d7:ad:79:5a:cf:7d:d7:1d:14:
41:25:2d:22:28:72:2b:ef:5c:86:d9:9a:e7:a6:fa:
bf:33:8d:f7:50:e6:61:d1:ff:61:e0:c4:43:ce:49:
7c:cb:b0:06:20:bb:ce:b3:65:3c:7f:04:ce:f8:01:
bd:d5:33:8a:d9:5f:3c:c1:c4:33:64:e1:94:02:4e:
dc:38:8a:08:81:74:af:73:e2:30:63:85:da:ae:78:
93:03:7a:2b:9b:c8:af:94:1d:1b:15:48:c5:ef:c0:
11:25:b5:c5:c2:05:b5:4a:35:a7:c2:ba:c4:35:f8:
b4:39:13:00:87:83:9e:d9:f1:89:28:0c:f1:14:64:
8b:f3:d7:fd:16:f0:66:c8:e2:69:df:31:54:82:2c:
d8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DB:81:33:41:2B:E5:86:EC:23:EC:72:5F:7B:77:50:A3:68:95:E9
X509v3 Authority Key Identifier:
keyid:34:E8:3F:41:E5:D2:42:54:C9:0A:86:E3:B2:BB:7A:80:AF:03:97:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOg_QeXSQlTJCobjsrt6gK8DlyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:64:d0:fa:d1:d5:d3:ba:7a:30:e4:0e:d1:e0:2b:de:e3:21:
27:4a:6a:e3:44:6e:d0:ca:44:fa:da:b3:96:e5:c1:db:13:a9:
12:3f:a5:22:3b:e4:13:5c:8f:f8:f6:ef:ad:dc:de:32:f7:ec:
c6:a6:f1:b9:eb:aa:fd:b3:ef:41:17:a9:67:11:21:de:8f:7c:
d1:ed:37:48:9e:ae:04:14:b2:f3:93:4e:73:70:70:f9:9c:4b:
e7:f7:b5:cd:c1:bc:c7:f3:75:ee:bf:47:64:71:8d:1a:3c:d1:
2f:2b:86:59:a4:b8:9b:34:5d:83:23:3d:38:2a:e2:80:9c:9b:
72:b3:4c:20:a9:b9:a3:6b:55:e6:58:b7:60:3c:20:ed:bf:19:
4b:70:be:40:41:07:76:7d:c1:ee:11:59:21:17:ac:3e:b9:6e:
81:8a:b6:a8:37:40:c0:54:00:d2:19:d6:6e:6e:d8:c4:31:05:
a8:d0:5c:e4:2a:6f:a8:eb:be:d6:81:df:a0:26:8c:b4:da:df:
e0:bf:e5:69:72:c4:d5:0b:2a:9d:85:39:9d:83:8e:b6:cf:2f:
ad:8f:45:8f:7b:88:8d:64:0e:b5:49:03:bb:37:0d:b1:f2:05:
b4:ab:e1:20:29:99:f2:10:8b:6b:b9:a4:ca:2b:d0:0e:af:da:
e5:00:0e:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3FSr55PefwmCsG/2nCeLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZTgzZjQxZTVkMjQyNTRjOTBhODZlM2IyYmI3YTgwYWYw
Mzk3MjEwHhcNMjUxMTExMDMwMTE4WhcNMjUxMTEyMDMwMTE4WjAzMTEwLwYDVQQD
EyhjY2RiODEzMzQxMmJlNTg2ZWMyM2VjNzI1ZjdiNzc1MGEzNjg5NWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpX3J4esPu3p00fKRXhjSzUtLBfS
EnrRyx02R8D4Uh3z0WU9kdNSZx4T125ROKCRFcgkQw6jo85ltGhVjtA6f7Kefv5o
mfKruNoT0/R4+RR7Vw6MhyQ2rc0Mg7pUje40YSjPTK5g6+YqUQiZVhPXrXlaz33X
HRRBJS0iKHIr71yG2Zrnpvq/M433UOZh0f9h4MRDzkl8y7AGILvOs2U8fwTO+AG9
1TOK2V88wcQzZOGUAk7cOIoIgXSvc+IwY4XarniTA3orm8ivlB0bFUjF78ARJbXF
wgW1SjWnwrrENfi0ORMAh4Oe2fGJKAzxFGSL89f9FvBmyOJp3zFUgizYgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMzbgTNBK+WG7CPscl97d1CjaJXpMB8GA1UdIwQY
MBaAFDToP0Hl0kJUyQqG47K7eoCvA5chMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk9nX1FlWFNRbFRKQ29ianNydDZnSzhEbHlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9mYmEyOGMtNmIxNy00NjI2LTk2M2Mt
MDU4Y2M5NTNlODAzLzEvTk9nX1FlWFNRbFRKQ29ianNydDZnSzhEbHlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9mYmEyOGMtNmIxNy00NjI2LTk2M2MtMDU4Y2M5NTNlODAz
LzEvTk9nX1FlWFNRbFRKQ29ianNydDZnSzhEbHlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfmTQ+tHV
07p6MOQO0eAr3uMhJ0pq40Ru0MpE+tqzluXB2xOpEj+lIjvkE1yP+PbvrdzeMvfs
xqbxueuq/bPvQRepZxEh3o980e03SJ6uBBSy85NOc3Bw+ZxL5/e1zcG8x/N17r9H
ZHGNGjzRLyuGWaS4mzRdgyM9OCrigJybcrNMIKm5o2tV5li3YDwg7b8ZS3C+QEEH
dn3B7hFZIResPrlugYq2qDdAwFQA0hnWbm7YxDEFqNBc5CpvqOu+1oHfoCaMtNrf
4L/laXLE1QsqnYU5nYOOts8vrY9Fj3uIjWQOtUkDuzcNsfIFtKvhICmZ8hCLa7mk
yivQDq/a5QAOoQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:05 2025 by rpki-client