Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
File: NoBlGroGa0CEp-0g1_UgGyKWwZc.mft (raw, json)
Hash identifier: N8bbUiUkmwzWVUXhx/tn5FxNCrQl5wKzjhAbMyjAfLM=
Subject key identifier: B5:2A:33:D0:29:04:CB:A0:69:AF:17:13:F0:0E:D3:2D:7B:FB:74:B8
Authority key identifier: 36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
Certificate issuer: /CN=3680651aba066b4084a7ed20d7f5201b2296c197
Certificate serial: 019A2D0D27B689973819A7F4E5A3177D7DA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
Manifest number: 071C
Signing time: Tue 28 Oct 2025 23:00:28 +0000
Manifest this update: Tue 28 Oct 2025 23:00:28 +0000
Manifest next update: Wed 29 Oct 2025 23:00:28 +0000
Files and hashes: 1: 4WEE6M8dthgW-fAXTbXKabGLlL0.roa (hash: Vz/LsTTjIy8GCO6P/Fc6vDeS0OdzaRulpb9xjUaoVO0=)
2: NoBlGroGa0CEp-0g1_UgGyKWwZc.crl (hash: Ij5ZSG2nErH01hICDuy12XTCDN5/MqBGy9Vaf2FYXj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:0d:27:b6:89:97:38:19:a7:f4:e5:a3:17:7d:7d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3680651aba066b4084a7ed20d7f5201b2296c197
Validity
Not Before: Oct 28 23:00:28 2025 GMT
Not After : Oct 29 23:00:28 2025 GMT
Subject: CN=b52a33d02904cba069af1713f00ed32d7bfb74b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:62:f9:c3:c5:db:41:4d:7c:79:ce:0f:01:73:
7a:52:6b:35:07:0b:0e:6b:f9:eb:f4:76:27:92:af:
5b:6c:28:2f:76:c1:ee:b2:9d:44:1b:99:c3:c3:a0:
65:65:2d:f7:64:b2:15:05:4b:17:9c:b9:d4:12:66:
c7:63:f3:b4:99:9b:8a:4f:c4:36:4e:fc:40:ae:3e:
66:1e:b9:1a:48:49:01:76:df:96:c6:1a:54:f5:a9:
76:98:63:65:2d:ac:80:88:8e:f9:93:d0:d0:35:43:
6b:d1:4a:fd:0c:d8:7b:85:ed:c7:cc:3d:43:e3:b3:
12:5a:db:e7:6f:5e:9e:e4:49:ba:c0:84:b2:a5:40:
da:d7:bd:b0:69:7d:16:9b:14:03:a4:5f:26:f1:40:
c7:d8:79:56:34:ec:35:1b:5b:48:36:61:04:7d:ba:
5b:b4:f2:31:9c:c9:dc:35:da:66:36:24:34:6b:e8:
65:35:db:e3:e0:1c:f6:d9:81:0c:5a:d2:37:20:6c:
0f:0a:3d:dd:e8:46:47:e6:03:10:69:1d:6e:95:bd:
4c:d9:47:f8:ef:95:39:e9:9a:d6:59:9f:5d:82:0b:
52:04:4f:83:2b:1d:9d:8f:23:54:66:bf:db:25:34:
fd:22:cf:fb:47:78:4d:e0:f0:96:b2:9d:10:b2:e4:
d1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:2A:33:D0:29:04:CB:A0:69:AF:17:13:F0:0E:D3:2D:7B:FB:74:B8
X509v3 Authority Key Identifier:
keyid:36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:eb:bd:ab:51:a0:23:31:35:d2:cd:87:6f:af:d5:be:95:50:
a1:2a:ac:d2:5b:af:de:35:a7:08:6a:50:3c:65:2a:c5:35:24:
86:f1:66:93:41:be:79:8d:99:d2:f6:a8:4d:5d:32:2c:5b:9b:
39:d0:2f:49:ee:98:71:d4:96:4d:17:1a:ed:bc:bc:f5:6d:dd:
79:2d:f4:8c:56:ca:81:01:ad:9b:a0:e0:00:9d:57:e9:22:43:
d8:fc:0e:58:89:e7:9e:95:a4:75:47:f7:8e:5e:69:a8:b7:16:
11:5c:0b:33:85:44:e4:a6:22:c4:28:ef:a4:5b:a3:40:f3:f7:
df:5e:8f:b8:34:36:10:8e:00:87:85:61:c6:3f:c9:6f:76:0b:
5c:9a:c2:ee:ad:df:12:1a:e3:30:2c:4b:5d:ab:63:c9:ae:fc:
41:b7:f4:2b:5e:c9:03:67:e3:f8:67:33:d3:51:c2:d4:18:5f:
32:53:0f:5d:04:14:b0:00:f4:d0:44:dd:8a:07:5b:b1:6d:46:
25:1a:62:9d:25:94:c8:aa:4a:f8:07:42:18:72:23:94:3d:cc:
43:46:65:9a:d4:76:83:3a:2c:9e:73:c4:02:24:2f:dd:4f:4a:
bc:ee:55:70:68:cd:ab:86:a3:b0:89:03:c9:41:9c:6a:7c:c6:
f2:ce:6a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 09:07:12 2025 by rpki-client