Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
File: NGyrWUu9qbRA_afTl0y9RByY5ck.mft (raw, json)
Hash identifier: sPflFxih41EWqtQm4w8ZYmX/emKL0SjvvYUhBchZCsM=
Subject key identifier: 11:C2:76:48:AD:4B:F2:ED:86:D9:F5:27:B7:41:F9:55:43:7B:D9:EF
Authority key identifier: 34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9
Certificate issuer: /CN=346cab594bbda9b440fda7d3974cbd441c98e5c9
Certificate serial: 019A7293371B6311B7F399C5EA4AB447B11E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 11:00:41 +0000
Manifest this update: Tue 11 Nov 2025 11:00:41 +0000
Manifest next update: Wed 12 Nov 2025 11:00:41 +0000
Files and hashes: 1: NGyrWUu9qbRA_afTl0y9RByY5ck.crl (hash: UT5fBRVtQwQYDyEeA3GvUdOvk5039Xx1eFJ987dg2Sg=)
2: qWxHxzkwFGcxa5jSluitx-sE42Y.roa (hash: 3aDiNAN4onF/Cdaq+yTsD+jmRJ2OmMmFOaHRV5Fmhp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:37:1b:63:11:b7:f3:99:c5:ea:4a:b4:47:b1:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=346cab594bbda9b440fda7d3974cbd441c98e5c9
Validity
Not Before: Nov 11 11:00:41 2025 GMT
Not After : Nov 12 11:00:41 2025 GMT
Subject: CN=11c27648ad4bf2ed86d9f527b741f955437bd9ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7d:1e:68:d4:6a:e3:01:f3:fb:49:5b:d8:6b:
53:ff:f8:8d:01:e7:73:e0:43:91:4f:79:31:91:91:
f6:66:22:95:cc:37:de:9c:ee:39:d7:72:b7:47:89:
b3:55:b4:1e:6a:47:b9:ea:4a:bf:bd:79:06:00:e3:
1c:4d:f5:81:d5:7e:11:e2:5f:8c:fc:bc:28:cc:51:
23:f1:50:e5:dd:98:51:dc:17:d9:a5:7d:8e:a5:78:
ff:5c:11:0a:a3:41:fa:be:8f:57:43:69:97:76:98:
5d:99:79:44:f3:6e:1e:1e:25:d9:ee:e7:b6:b3:07:
74:0a:82:13:4b:ff:1a:35:19:2b:4d:7f:c5:2d:eb:
f8:07:ac:bf:b6:e5:c1:da:03:c3:94:a0:60:fc:72:
e7:84:9e:65:0c:14:0e:e3:8a:26:38:8b:61:3e:9f:
8d:ac:93:f1:a4:dc:c4:ec:9f:4e:f9:00:5f:c7:05:
b0:67:63:68:2b:53:45:76:ed:e9:70:f2:e9:39:7f:
cb:e3:b1:c2:fa:b8:03:8d:2d:24:88:92:06:3b:d4:
cb:aa:eb:a0:30:9e:5a:de:90:d9:b9:46:5a:ea:82:
e4:91:dc:b6:ca:c2:4e:a0:f3:a5:14:a7:8c:4b:42:
91:98:2f:0e:14:c9:4d:c6:88:a4:cb:ca:f0:3c:47:
16:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C2:76:48:AD:4B:F2:ED:86:D9:F5:27:B7:41:F9:55:43:7B:D9:EF
X509v3 Authority Key Identifier:
keyid:34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:8f:56:bd:a0:02:a1:6e:d1:50:c4:73:22:7e:d3:a4:38:1e:
c7:00:23:49:f4:3b:bd:da:47:d0:8f:57:05:4c:d6:a8:25:24:
db:9c:01:93:2c:1b:f0:e3:50:a6:13:54:b7:66:6f:06:37:41:
27:59:3a:fe:dd:38:7d:cd:a2:aa:6c:87:50:70:11:40:bb:bb:
4d:ad:ed:97:f1:f3:75:f1:9f:a9:ed:96:df:58:3b:ee:3a:9f:
f2:10:b6:d6:2d:d6:b2:fb:c7:20:44:7c:4f:e9:62:04:33:59:
49:0f:f1:13:6f:19:24:9f:95:06:a6:0f:80:1a:e4:78:55:cf:
00:d0:04:0c:a1:97:23:0f:ef:3c:34:d3:b3:81:a0:d6:9c:07:
8b:b8:cf:5e:09:84:75:51:81:a6:01:7e:1a:aa:8c:1d:b1:d0:
1a:2d:97:8d:aa:c7:77:37:1e:59:59:82:a8:09:58:06:a4:09:
b5:a1:dd:15:21:04:44:1a:f3:fe:77:d5:0d:e6:98:8c:3f:29:
9f:b4:b6:cf:7a:2a:c9:04:54:d7:6b:74:f9:8f:f9:ec:bf:fb:
6e:cc:db:10:da:a1:f4:c8:00:ed:ac:0a:36:d9:27:34:f6:6d:
20:c9:a0:60:25:86:8a:1d:f5:58:f9:98:54:d3:2f:b7:ad:82:
57:81:4c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:55:52 2025 by rpki-client