Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
File: NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft (raw, json)
Hash identifier: pDeScAA+uoLw4GXXbOHO68iO5/9j5W6WC1vLNvnuEO0=
Subject key identifier: 4E:94:03:DB:4F:E1:69:44:84:B7:53:F5:FE:1E:BA:29:14:D1:E4:DD
Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
Certificate issuer: /CN=3545a7200164912041bb931efb1feac123b43a18
Certificate serial: 019A2477993E1F50A0DF123F0F01A42CC352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
Manifest number: 16FD
Signing time: Mon 27 Oct 2025 07:00:09 +0000
Manifest this update: Mon 27 Oct 2025 07:00:09 +0000
Manifest next update: Tue 28 Oct 2025 07:00:09 +0000
Files and hashes: 1: 8s1U0KmUYb897VvjMdVaiCCBr8Y.roa (hash: 5qEC8e4y3KYPBzPpD5dv/300fB0lSnNjSuXLoow+Q8w=)
2: LaYkRMNeto2OFZ9VBnU48w_HGgs.roa (hash: 16B1JfqcXDvmz5pVWUS+KsHYpQRrCgD9R9Tg6uXacIA=)
3: NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl (hash: cwO6ZZQj50M5nZom1ldhjjxiIJ+22tZGCF6xHExZEcs=)
4: W8oJrry2382XyDpwYu9d1fRM57k.roa (hash: vgOtreWyL8SSvp1wiImWd0ZzLXQJtP4n+ctgbIbJd6I=)
5: ZPnSp5toQpthOZvn7vrTi1PIJ0A.roa (hash: 2xJoiopsp/aP4IfMiv71h2CCh2maxmce9cHqGdAd1jM=)
6: hDuQO-2O-6Lo8qgrhYqNM0G4P24.roa (hash: WUDxmKQLeVQHlfqkPeKYvZqVqvTuBp11Xfwh/S2zHnQ=)
7: rJESdqv17knzJ4wNzfBk8WWWnw0.roa (hash: BdHgAA5eA1A53dV1mMcPmgdF0S7eP4oFR6WHvpTEZ/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:77:99:3e:1f:50:a0:df:12:3f:0f:01:a4:2c:c3:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3545a7200164912041bb931efb1feac123b43a18
Validity
Not Before: Oct 27 07:00:09 2025 GMT
Not After : Oct 28 07:00:09 2025 GMT
Subject: CN=4e9403db4fe1694484b753f5fe1eba2914d1e4dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5f:f6:48:ad:49:a8:79:1b:a0:70:b7:ff:9a:
a0:fd:08:b6:b3:2f:37:0b:c1:ff:3d:3b:8f:8a:52:
4f:05:0f:74:9a:ce:ac:fe:c6:01:be:5f:33:d0:03:
ad:e6:0b:dd:8b:ad:7d:12:05:28:a7:50:fc:18:19:
d1:77:f0:ef:85:b6:ac:be:fc:c4:57:cd:8f:ad:d0:
f0:4f:36:bd:47:f3:6f:d6:2f:00:3c:29:2a:f2:73:
e3:70:90:ce:9e:5e:fd:1d:74:a2:b9:d3:c6:6e:75:
33:4c:54:84:de:8f:61:6c:79:4c:90:77:ce:e9:5e:
0b:de:8a:66:37:48:a2:54:d5:35:e0:c1:5f:72:52:
94:b1:51:a4:eb:6b:85:32:15:2e:73:50:24:41:72:
17:ab:a6:30:91:7c:a5:72:6b:0c:96:04:12:51:35:
11:f3:45:47:91:93:8e:1c:a5:46:0b:b1:40:1f:5e:
d9:69:e5:81:88:18:0f:4b:13:33:7e:b8:fb:6d:36:
d8:56:23:7b:4d:c7:9a:cd:c6:75:f8:48:80:84:2a:
6b:d0:ef:42:0a:dd:ce:e7:8c:2e:71:5b:6b:a5:69:
da:1c:6a:2c:52:07:93:5c:70:4a:ff:f9:17:35:f7:
28:a7:75:1e:6a:08:4f:43:04:61:f5:da:07:5f:95:
50:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:94:03:DB:4F:E1:69:44:84:B7:53:F5:FE:1E:BA:29:14:D1:E4:DD
X509v3 Authority Key Identifier:
keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d9:5c:86:1b:33:fe:c2:cf:f9:fa:ca:30:d5:f2:c3:57:4c:
29:8b:95:58:31:f8:78:17:06:32:ef:98:24:f6:ca:d0:f4:04:
19:ed:2e:6d:68:04:f9:c7:13:78:42:17:d2:29:f2:61:55:bd:
38:0d:cf:9c:90:ea:e3:40:e8:40:94:30:fb:52:ee:fd:03:c8:
49:9d:f2:d4:93:45:ef:c2:f4:01:d4:93:14:4e:92:61:eb:89:
66:db:ec:48:04:18:90:33:3a:fb:0c:8f:51:9c:ea:3a:01:ea:
5d:fd:a4:df:bf:15:70:bc:6f:37:2a:53:a3:17:28:1e:70:77:
f2:f9:dc:1e:02:a3:9b:e1:aa:03:4a:46:fc:68:82:e9:23:43:
e9:85:b1:51:51:bf:6b:66:79:9a:7e:f5:13:fc:c9:d2:08:36:
18:b5:c6:4c:66:2f:1e:93:2b:2d:86:ea:33:55:a5:06:18:1b:
c3:bd:52:1c:d6:87:72:cd:c5:56:85:66:af:12:74:df:20:80:
0a:f4:91:e1:b4:aa:2c:92:68:09:db:a0:e0:83:34:d1:b6:3a:
6e:d6:4f:34:3b:c8:82:7d:0b:9a:10:88:be:86:ad:63:05:9b:
3e:23:19:f2:8d:66:9f:c1:aa:8f:5a:bb:16:c8:6a:c4:59:69:
dc:fd:f8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:38:27 2025 by rpki-client