Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.mft
File: NGbkl-i6koMIR7TYtnEDJdI72oU.mft (raw, json)
Hash identifier: X0UxaAKGDaQSVQitWsXsPfyChd4M36/4wnPKxZIXB0I=
Subject key identifier: E1:18:EF:7A:9B:BC:A4:77:EF:C8:12:81:F4:80:A0:D7:87:F1:14:DF
Authority key identifier: 34:66:E4:97:E8:BA:92:83:08:47:B4:D8:B6:71:03:25:D2:3B:DA:85
Certificate issuer: /CN=3466e497e8ba92830847b4d8b6710325d23bda85
Certificate serial: 019A725C7B68D55356985027BDEDCC79430B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGbkl-i6koMIR7TYtnEDJdI72oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.mft
Manifest number: 077E
Signing time: Tue 11 Nov 2025 10:00:54 +0000
Manifest this update: Tue 11 Nov 2025 10:00:54 +0000
Manifest next update: Wed 12 Nov 2025 10:00:54 +0000
Files and hashes: 1: NGbkl-i6koMIR7TYtnEDJdI72oU.crl (hash: L4DBvpj7fxj0hvvrMKjU1VVP3kXqqvEKUuPTLxxbSsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGbkl-i6koMIR7TYtnEDJdI72oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:7b:68:d5:53:56:98:50:27:bd:ed:cc:79:43:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3466e497e8ba92830847b4d8b6710325d23bda85
Validity
Not Before: Nov 11 10:00:54 2025 GMT
Not After : Nov 12 10:00:54 2025 GMT
Subject: CN=e118ef7a9bbca477efc81281f480a0d787f114df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b3:0f:cb:9b:11:4d:d0:7c:50:21:d7:9f:1f:
44:5f:27:f0:0b:97:49:c4:0d:66:64:0a:c1:d7:27:
61:43:d5:fb:fc:bf:cd:64:eb:d7:82:cb:83:4f:06:
ee:fa:e5:94:cc:d7:4f:33:7d:ac:17:3f:33:50:51:
97:bb:b7:e3:d5:de:68:26:fb:c5:52:e3:46:91:d8:
d5:6f:61:7f:38:a9:17:eb:5f:db:cd:a1:11:06:77:
91:fe:10:2e:7e:17:10:14:a9:1e:fe:a8:00:55:10:
93:a0:ce:0b:8e:c5:1e:d8:42:12:6d:2f:82:26:f3:
52:51:a9:a2:16:d6:b5:3e:2a:d8:9b:04:8f:93:fa:
77:5f:3d:de:97:51:64:70:f1:d8:70:4e:bb:34:f1:
06:aa:60:12:4a:e6:2e:6f:87:6c:df:b7:be:90:73:
4c:3a:d4:49:27:ff:b5:fd:b5:62:63:68:3a:3b:c3:
d3:1a:77:a3:2a:f1:97:cf:44:87:7a:fd:e5:de:45:
45:c0:9c:6d:d1:e0:3f:3b:f4:3a:09:1e:49:5f:52:
86:34:ed:f9:d9:48:21:25:95:05:09:6a:0f:54:ce:
6e:76:bc:61:24:05:7d:37:af:5c:9f:36:99:f9:06:
ca:ab:ba:e0:63:cc:13:a4:e5:d9:56:60:58:b7:5f:
e8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:18:EF:7A:9B:BC:A4:77:EF:C8:12:81:F4:80:A0:D7:87:F1:14:DF
X509v3 Authority Key Identifier:
keyid:34:66:E4:97:E8:BA:92:83:08:47:B4:D8:B6:71:03:25:D2:3B:DA:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGbkl-i6koMIR7TYtnEDJdI72oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/44846d-55d0-4a20-bd11-dcad08f2f23f/1/NGbkl-i6koMIR7TYtnEDJdI72oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:6e:1e:65:4c:1e:de:73:29:47:ca:c9:d1:ab:7d:1a:6a:02:
26:1c:1c:6d:eb:d3:f6:55:37:c6:8c:bf:f1:7c:86:f7:d2:da:
87:f3:ff:bd:df:b9:12:3d:71:3b:dd:49:91:74:fb:da:4d:43:
59:ff:64:d7:c2:3b:63:8d:99:36:df:4a:97:5f:9f:56:c3:11:
e6:e2:df:f8:9c:4a:e3:37:4f:79:f9:df:cf:ff:95:cc:1f:c2:
6e:88:9b:e5:96:68:4c:fd:ca:5f:87:7f:ea:a7:9b:6c:4c:1f:
e6:80:ed:31:0d:a2:4b:33:03:31:1e:bd:35:ee:a3:d9:5e:fa:
9c:80:cc:1a:7a:e3:ec:32:41:d5:4d:7c:7d:a8:b5:49:76:04:
e0:f3:7c:95:c6:3f:33:48:ce:78:f4:55:6f:f6:b3:bd:9e:3e:
a0:c4:53:b1:3b:12:0e:3a:13:16:c5:ac:e8:fb:d6:ce:3f:0b:
9c:59:e0:5a:91:be:7f:64:e4:26:5b:bf:ae:ff:53:f6:bd:a6:
fd:f3:21:e2:36:09:2b:52:75:2b:09:58:31:40:7f:53:d1:72:
4e:a1:05:11:84:9d:d0:93:0b:ce:fd:b6:2e:03:8c:ec:52:8d:
0e:e2:a0:bf:78:9d:58:83:4f:bb:6b:05:a0:d6:79:5c:dc:7c:
e1:32:de:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXHto1VNWmFAnve3MeUMLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NjZlNDk3ZThiYTkyODMwODQ3YjRkOGI2NzEwMzI1ZDIz
YmRhODUwHhcNMjUxMTExMTAwMDU0WhcNMjUxMTEyMTAwMDU0WjAzMTEwLwYDVQQD
EyhlMTE4ZWY3YTliYmNhNDc3ZWZjODEyODFmNDgwYTBkNzg3ZjExNGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbMPy5sRTdB8UCHXnx9EXyfwC5dJ
xA1mZArB1ydhQ9X7/L/NZOvXgsuDTwbu+uWUzNdPM32sFz8zUFGXu7fj1d5oJvvF
UuNGkdjVb2F/OKkX61/bzaERBneR/hAufhcQFKke/qgAVRCToM4LjsUe2EISbS+C
JvNSUamiFta1PirYmwSPk/p3Xz3el1FkcPHYcE67NPEGqmASSuYub4ds37e+kHNM
OtRJJ/+1/bViY2g6O8PTGnejKvGXz0SHev3l3kVFwJxt0eA/O/Q6CR5JX1KGNO35
2UghJZUFCWoPVM5udrxhJAV9N69cnzaZ+QbKq7rgY8wTpOXZVmBYt1/oNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOEY73qbvKR378gSgfSAoNeH8RTfMB8GA1UdIwQY
MBaAFDRm5JfoupKDCEe02LZxAyXSO9qFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkdia2wtaTZrb01JUjdUWXRuRURKZEk3Mm9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80NDg0NmQtNTVkMC00YTIwLWJkMTEt
ZGNhZDA4ZjJmMjNmLzEvTkdia2wtaTZrb01JUjdUWXRuRURKZEk3Mm9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS80NDg0NmQtNTVkMC00YTIwLWJkMTEtZGNhZDA4ZjJmMjNm
LzEvTkdia2wtaTZrb01JUjdUWXRuRURKZEk3Mm9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhW4eZUwe
3nMpR8rJ0at9GmoCJhwcbevT9lU3xoy/8XyG99Lah/P/vd+5Ej1xO91JkXT72k1D
Wf9k18I7Y42ZNt9Kl1+fVsMR5uLf+JxK4zdPefnfz/+VzB/Cboib5ZZoTP3KX4d/
6qebbEwf5oDtMQ2iSzMDMR69Ne6j2V76nIDMGnrj7DJB1U18fai1SXYE4PN8lcY/
M0jOePRVb/azvZ4+oMRTsTsSDjoTFsWs6PvWzj8LnFngWpG+f2TkJlu/rv9T9r2m
/fMh4jYJK1J1KwlYMUB/U9FyTqEFEYSd0JMLzv22LgOM7FKNDuKgv3idWINPu2sF
oNZ5XNx84TLeHA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:55 2025 by rpki-client