Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft
File: ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft (raw, json)
Hash identifier: Sa6fTgekr8Nq+YubNzKXqXfqcVO7Dfldnw02vkA+I3Y=
Subject key identifier: 6C:BC:E8:E6:81:F4:87:6C:F9:89:96:20:C7:E9:B2:45:91:CA:EB:D0
Authority key identifier: 9E:07:E7:C3:72:A9:DB:09:33:2C:47:9C:72:91:B8:62:97:21:AF:E3
Certificate issuer: /CN=9e07e7c372a9db09332c479c7291b8629721afe3
Certificate serial: 019A71B8EA0F9DBE7CC969BD9DEB2CE14152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngfnw3Kp2wkzLEeccpG4Ypchr-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft
Manifest number: 0205
Signing time: Tue 11 Nov 2025 07:02:15 +0000
Manifest this update: Tue 11 Nov 2025 07:02:15 +0000
Manifest next update: Wed 12 Nov 2025 07:02:15 +0000
Files and hashes: 1: ngfnw3Kp2wkzLEeccpG4Ypchr-M.crl (hash: 6YfS4ltm0jMTsYmV6HHVsQOTJouRRvGPZN9/iI15FBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngfnw3Kp2wkzLEeccpG4Ypchr-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ea:0f:9d:be:7c:c9:69:bd:9d:eb:2c:e1:41:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e07e7c372a9db09332c479c7291b8629721afe3
Validity
Not Before: Nov 11 07:02:15 2025 GMT
Not After : Nov 12 07:02:15 2025 GMT
Subject: CN=6cbce8e681f4876cf9899620c7e9b24591caebd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:38:23:39:d9:31:04:b1:54:4e:ed:25:fd:e9:
6b:f8:de:6b:2a:8c:f0:ed:d2:4a:37:48:5f:71:7d:
8c:fa:20:d5:00:3e:85:38:f6:04:a5:6e:07:88:06:
43:e3:54:7f:15:00:ff:51:55:f8:0f:f1:f6:a1:07:
00:24:6a:0d:04:02:c8:48:68:41:44:57:52:98:95:
0f:3d:08:4f:2e:bb:54:1a:d0:0c:ee:21:e4:50:b0:
88:e5:91:a3:fa:29:b8:e8:87:ce:4c:39:ad:da:a9:
02:42:e8:8b:50:7f:88:48:9c:b3:40:27:fd:ee:ee:
10:08:d4:b3:cb:01:f4:35:c6:e2:25:e8:7c:76:87:
32:ac:6d:c8:b9:27:74:06:42:63:93:d1:dd:d5:4b:
6e:80:a6:8c:9d:63:56:1e:d6:07:f4:41:58:fe:0a:
e8:f0:8d:2d:f5:08:01:3c:d0:1b:a1:3a:79:61:15:
67:08:d3:fe:4d:4c:fd:7d:76:35:f7:34:62:bd:67:
10:73:d6:1e:ec:3d:4b:31:e6:f4:54:0c:5c:2d:05:
f8:fa:e9:44:e6:cd:97:34:72:b4:00:f8:ef:85:ec:
84:9d:02:db:c6:50:c1:ab:1c:bc:01:50:f3:8f:80:
e7:18:c2:fd:6e:a9:fa:f9:3e:a3:37:89:60:87:0c:
f2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BC:E8:E6:81:F4:87:6C:F9:89:96:20:C7:E9:B2:45:91:CA:EB:D0
X509v3 Authority Key Identifier:
keyid:9E:07:E7:C3:72:A9:DB:09:33:2C:47:9C:72:91:B8:62:97:21:AF:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngfnw3Kp2wkzLEeccpG4Ypchr-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a156e6-1e41-404a-9688-57b40fced829/1/ngfnw3Kp2wkzLEeccpG4Ypchr-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:36:1a:ae:ee:bd:c4:6d:59:1e:44:ee:1c:5b:df:1e:a8:ea:
55:42:44:02:b1:e6:99:7a:9b:8e:fa:33:35:72:28:01:6f:2e:
de:8f:2e:40:17:f1:3b:8c:74:8d:4f:5e:87:e9:7b:18:23:08:
3d:35:ad:63:0d:fd:96:bd:a1:58:8c:f7:6b:91:3e:7b:1e:a9:
99:2c:ca:d2:b3:ea:ec:1f:99:33:c0:9a:ca:5c:3e:4f:3e:0d:
90:a7:7d:2e:88:60:bf:6f:ff:08:e4:39:f5:58:0c:7b:c6:53:
24:24:d0:c0:18:c3:aa:1d:17:d4:f1:e1:3b:de:db:48:43:7a:
76:fc:2f:1c:a5:b1:8e:08:dc:50:b0:86:ce:3b:d1:f8:0d:5b:
a4:7d:b0:76:d1:b4:e3:63:79:e5:96:ec:d1:0d:ff:68:07:7d:
ab:29:c1:7a:62:d2:1a:19:61:31:f4:5b:6f:66:ad:1f:c6:be:
9b:eb:19:f2:0f:db:ad:13:8b:86:ab:e0:66:96:b9:0e:8a:ec:
10:6a:f9:15:72:f8:60:bb:54:a6:77:6b:19:eb:5a:b2:49:d5:
05:9d:31:a1:0d:a9:4b:98:59:7f:1f:69:42:8b:b6:95:3b:5e:
83:8b:85:a6:6c:36:13:54:47:34:19:d0:53:18:af:eb:81:ba:
b5:d7:8d:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuOoPnb58yWm9ness4UFSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMDdlN2MzNzJhOWRiMDkzMzJjNDc5YzcyOTFiODYyOTcy
MWFmZTMwHhcNMjUxMTExMDcwMjE1WhcNMjUxMTEyMDcwMjE1WjAzMTEwLwYDVQQD
Eyg2Y2JjZThlNjgxZjQ4NzZjZjk4OTk2MjBjN2U5YjI0NTkxY2FlYmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jgjOdkxBLFUTu0l/elr+N5rKozw
7dJKN0hfcX2M+iDVAD6FOPYEpW4HiAZD41R/FQD/UVX4D/H2oQcAJGoNBALISGhB
RFdSmJUPPQhPLrtUGtAM7iHkULCI5ZGj+im46IfOTDmt2qkCQuiLUH+ISJyzQCf9
7u4QCNSzywH0NcbiJeh8docyrG3IuSd0BkJjk9Hd1UtugKaMnWNWHtYH9EFY/gro
8I0t9QgBPNAboTp5YRVnCNP+TUz9fXY19zRivWcQc9Ye7D1LMeb0VAxcLQX4+ulE
5s2XNHK0APjvheyEnQLbxlDBqxy8AVDzj4DnGML9bqn6+T6jN4lghwzy5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGy86OaB9Ids+YmWIMfpskWRyuvQMB8GA1UdIwQY
MBaAFJ4H58NyqdsJMyxHnHKRuGKXIa/jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmdmbnczS3Ayd2t6TEVlY2NwRzRZcGNoci1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9hMTU2ZTYtMWU0MS00MDRhLTk2ODgt
NTdiNDBmY2VkODI5LzEvbmdmbnczS3Ayd2t6TEVlY2NwRzRZcGNoci1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9hMTU2ZTYtMWU0MS00MDRhLTk2ODgtNTdiNDBmY2VkODI5
LzEvbmdmbnczS3Ayd2t6TEVlY2NwRzRZcGNoci1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeTYaru69
xG1ZHkTuHFvfHqjqVUJEArHmmXqbjvozNXIoAW8u3o8uQBfxO4x0jU9eh+l7GCMI
PTWtYw39lr2hWIz3a5E+ex6pmSzK0rPq7B+ZM8Caylw+Tz4NkKd9Lohgv2//COQ5
9VgMe8ZTJCTQwBjDqh0X1PHhO97bSEN6dvwvHKWxjgjcULCGzjvR+A1bpH2wdtG0
42N55Zbs0Q3/aAd9qynBemLSGhlhMfRbb2atH8a+m+sZ8g/brROLhqvgZpa5Dors
EGr5FXL4YLtUpndrGetasknVBZ0xoQ2pS5hZfx9pQou2lTteg4uFpmw2E1RHNBnQ
Uxiv64G6tdeNFA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:10 2025 by rpki-client