Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
File: NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft (raw, json)
Hash identifier: qLkFYM+zjvkrZ96o88+lxnpdgAq7G7sRi9tDuQWUVos=
Subject key identifier: 96:EC:61:80:D9:DF:F8:CC:32:5B:64:05:D3:89:90:1C:23:24:C6:69
Authority key identifier: 34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45
Certificate issuer: /CN=34e40348463c60ce9fc694060a37f4683093f045
Certificate serial: 0199FAD84EA0DF5A507C0309257FC630CECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
Manifest number: 0ACB
Signing time: Sun 19 Oct 2025 05:01:43 +0000
Manifest this update: Sun 19 Oct 2025 05:01:43 +0000
Manifest next update: Mon 20 Oct 2025 05:01:43 +0000
Files and hashes: 1: NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl (hash: hIHwjxctmmn61gtOtQ3YoByLz/WgaNOR35nk3fkGLBQ=)
2: t1BHctdeN3-hwrpqiOWRf8QN_Co.roa (hash: sJPUaFdOg0DhAMbLJjpATv5AEJJ9zxfLTR5pbOXKFNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:4e:a0:df:5a:50:7c:03:09:25:7f:c6:30:ce:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e40348463c60ce9fc694060a37f4683093f045
Validity
Not Before: Oct 19 05:01:43 2025 GMT
Not After : Oct 20 05:01:43 2025 GMT
Subject: CN=96ec6180d9dff8cc325b6405d389901c2324c669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:66:b0:3e:c2:e2:d7:2b:0c:3c:c1:cd:32:57:
0b:22:74:91:5f:31:e8:e4:09:a4:cb:7b:c0:d5:27:
42:05:b7:fe:81:83:c9:1b:ac:1a:af:61:38:7c:a4:
73:a5:e1:f3:f9:27:15:e2:65:44:b8:c1:ba:52:b6:
fb:57:77:c5:ca:f0:01:cc:9f:40:f5:83:5a:d8:17:
ff:eb:ce:b2:26:ab:f6:ee:28:44:25:d7:fb:6e:94:
18:c2:ef:72:ce:5b:45:77:6e:e7:b0:b6:10:c7:70:
8e:d1:4f:5f:44:47:4f:26:31:c5:24:71:f5:4f:60:
d4:80:67:5f:33:16:7d:ee:99:b0:e1:0c:95:c7:ae:
07:03:20:0c:99:da:bc:5c:4b:f1:24:c8:86:b0:76:
d7:d6:0c:1e:fd:c4:6e:6f:49:37:60:15:d9:fb:05:
69:f1:4c:cc:34:3c:2f:1f:13:31:12:1b:e8:32:70:
8e:f2:47:15:76:1e:50:30:37:13:12:bb:d4:61:4c:
6b:ac:66:e1:16:4f:77:39:a3:1a:e3:55:d5:a8:39:
c0:3e:ef:30:ff:41:8a:f0:de:f1:2a:a4:b4:42:b0:
f7:38:10:46:3b:44:8c:de:6a:f5:b5:cd:22:af:3f:
b4:09:a9:c2:9c:f9:98:52:5f:89:9d:bd:49:39:45:
37:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:EC:61:80:D9:DF:F8:CC:32:5B:64:05:D3:89:90:1C:23:24:C6:69
X509v3 Authority Key Identifier:
keyid:34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:89:29:8d:88:12:df:a5:26:a3:2b:d5:b4:68:f6:91:1a:b0:
a1:9c:f2:12:0a:66:a8:8b:1c:5b:20:40:5e:0f:e2:86:b5:87:
ab:2a:a9:0a:2c:87:bb:26:63:89:f1:e2:4c:c2:78:07:c0:e7:
e2:5e:e5:b4:57:a0:80:98:a6:a5:6e:05:a7:48:9c:64:f9:f1:
f3:cd:aa:5d:6c:37:48:75:76:53:4e:0f:f5:67:d0:71:78:a5:
bb:a0:c8:d8:0f:7d:fe:3c:37:e8:94:1c:0b:fd:78:2f:18:2a:
17:53:f7:30:66:58:00:29:b3:30:b4:7d:62:f8:e9:74:5a:c8:
ce:b2:4c:74:0c:bf:47:d2:99:5f:82:5a:25:bf:aa:b7:d5:9a:
72:38:94:b0:a3:17:3e:1a:1d:90:17:cc:2b:84:5a:4b:fc:ca:
d2:08:7b:cf:9b:62:7e:db:02:92:8e:11:12:99:9e:e2:2d:57:
20:a0:04:72:fc:b0:81:2e:59:48:da:b3:d3:68:c9:56:9c:a1:
94:e6:cc:ea:4b:4a:5a:69:44:3b:99:07:15:33:83:49:67:d8:
3b:d0:a5:28:8e:b3:bb:2e:c6:96:78:40:53:a5:32:43:7a:70:
e9:7d:3a:f2:9e:05:84:5a:5c:4a:8f:11:ef:2c:e6:b9:aa:21:
63:82:a0:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn62E6g31pQfAMJJX/GMM7PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZTQwMzQ4NDYzYzYwY2U5ZmM2OTQwNjBhMzdmNDY4MzA5
M2YwNDUwHhcNMjUxMDE5MDUwMTQzWhcNMjUxMDIwMDUwMTQzWjAzMTEwLwYDVQQD
Eyg5NmVjNjE4MGQ5ZGZmOGNjMzI1YjY0MDVkMzg5OTAxYzIzMjRjNjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmawPsLi1ysMPMHNMlcLInSRXzHo
5Amky3vA1SdCBbf+gYPJG6war2E4fKRzpeHz+ScV4mVEuMG6Urb7V3fFyvABzJ9A
9YNa2Bf/686yJqv27ihEJdf7bpQYwu9yzltFd27nsLYQx3CO0U9fREdPJjHFJHH1
T2DUgGdfMxZ97pmw4QyVx64HAyAMmdq8XEvxJMiGsHbX1gwe/cRub0k3YBXZ+wVp
8UzMNDwvHxMxEhvoMnCO8kcVdh5QMDcTErvUYUxrrGbhFk93OaMa41XVqDnAPu8w
/0GK8N7xKqS0QrD3OBBGO0SM3mr1tc0irz+0CanCnPmYUl+Jnb1JOUU3cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJbsYYDZ3/jMMltkBdOJkBwjJMZpMB8GA1UdIwQY
MBaAFDTkA0hGPGDOn8aUBgo39Ggwk/BFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk9RRFNFWThZTTZmeHBRR0NqZjBhRENUOEVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8yYTNjY2MtMjkzYy00MWRhLWFkMTYt
MWI5OWZkMDk3NjNlLzEvTk9RRFNFWThZTTZmeHBRR0NqZjBhRENUOEVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8yYTNjY2MtMjkzYy00MWRhLWFkMTYtMWI5OWZkMDk3NjNl
LzEvTk9RRFNFWThZTTZmeHBRR0NqZjBhRENUOEVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzIkpjYgS
36UmoyvVtGj2kRqwoZzyEgpmqIscWyBAXg/ihrWHqyqpCiyHuyZjifHiTMJ4B8Dn
4l7ltFeggJimpW4Fp0icZPnx882qXWw3SHV2U04P9WfQcXilu6DI2A99/jw36JQc
C/14LxgqF1P3MGZYACmzMLR9YvjpdFrIzrJMdAy/R9KZX4JaJb+qt9WacjiUsKMX
PhodkBfMK4RaS/zK0gh7z5tiftsCko4REpme4i1XIKAEcvywgS5ZSNqz02jJVpyh
lObM6ktKWmlEO5kHFTODSWfYO9ClKI6zuy7GlnhAU6UyQ3pw6X068p4FhFpcSo8R
7yzmuaohY4Kg2w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 12:52:07 2025 by rpki-client