Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft
File: NA5TAUvwOK3g13rmeP9t80ylPcA.mft (raw, json)
Hash identifier: 3ZI3Sw6F6eB95YKgpp1mvsIRe0nHyslJO48AXZJVHxI=
Subject key identifier: 36:A0:AB:0C:F7:09:3F:3B:BA:6A:4C:03:63:70:DF:00:78:58:92:95
Authority key identifier: 34:0E:53:01:4B:F0:38:AD:E0:D7:7A:E6:78:FF:6D:F3:4C:A5:3D:C0
Certificate issuer: /CN=340e53014bf038ade0d77ae678ff6df34ca53dc0
Certificate serial: 0199FD6B07F89FAD88749790CE8AF9BCE6FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft
Manifest number: 0689
Signing time: Sun 19 Oct 2025 17:01:13 +0000
Manifest this update: Sun 19 Oct 2025 17:01:13 +0000
Manifest next update: Mon 20 Oct 2025 17:01:13 +0000
Files and hashes: 1: NA5TAUvwOK3g13rmeP9t80ylPcA.crl (hash: UBypqMGuw2PKtEJ7zRC6kPM97/Ac38RANmuWBYCwRDQ=)
2: _RGZJkC_maX9Rk5gq7HAO40xyLk.roa (hash: UMn242+aY7D7FSfVsCmwNFJLABV4j5b5GNVt9RDj5KE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:07:f8:9f:ad:88:74:97:90:ce:8a:f9:bc:e6:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340e53014bf038ade0d77ae678ff6df34ca53dc0
Validity
Not Before: Oct 19 17:01:13 2025 GMT
Not After : Oct 20 17:01:13 2025 GMT
Subject: CN=36a0ab0cf7093f3bba6a4c036370df0078589295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:25:99:d0:4e:3e:4f:67:1c:d0:71:ad:ae:38:
cd:aa:0f:f8:30:75:6b:56:fb:be:7b:d1:fa:03:8a:
9a:ef:00:4b:d3:5b:4e:bc:73:90:d4:75:db:31:7b:
4c:0a:0f:bb:2c:01:02:71:4b:c9:a2:85:60:41:3a:
e3:b8:e7:1e:80:26:3b:5a:df:de:15:2c:20:16:a1:
54:e8:80:f2:94:e7:6b:d7:34:e9:2a:eb:62:39:f2:
b2:7d:2c:c2:00:13:02:03:b4:82:cf:b6:5b:0f:99:
6d:53:a2:4d:61:eb:2e:c4:4e:9b:ba:5a:d7:b6:07:
c9:e4:82:21:7e:6a:eb:aa:46:bb:12:f1:81:90:26:
06:fb:59:48:78:c6:14:c2:1a:65:f4:ba:50:0a:98:
d9:a1:d5:ef:44:40:5d:d5:39:bc:fe:e5:79:1d:3f:
85:61:27:3c:3d:f1:1b:d9:f1:63:34:d5:0e:53:7e:
52:1f:5c:26:52:1c:b5:5f:bf:87:5d:a8:65:e8:3b:
51:7f:57:62:24:09:c3:48:06:6f:ea:b4:29:30:b6:
61:2a:4b:8a:55:aa:54:93:e9:c6:db:ac:47:fc:da:
35:47:9e:9e:14:62:31:06:70:00:eb:ce:8c:a7:19:
8d:37:98:8b:59:09:c6:b3:39:6b:fd:d4:7a:fb:3e:
85:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A0:AB:0C:F7:09:3F:3B:BA:6A:4C:03:63:70:DF:00:78:58:92:95
X509v3 Authority Key Identifier:
keyid:34:0E:53:01:4B:F0:38:AD:E0:D7:7A:E6:78:FF:6D:F3:4C:A5:3D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:1d:1e:6a:cd:2e:25:03:8f:c8:43:b7:73:c0:9c:e6:9d:a6:
17:ee:d0:b9:a9:69:56:7a:c2:e4:e9:b9:70:89:93:ff:3c:12:
69:9f:9f:19:77:15:6c:a9:f0:b9:eb:29:88:b9:c1:b3:9b:d1:
09:61:5e:64:1e:d2:f7:73:76:33:e3:53:1f:d0:da:77:88:55:
31:e4:0c:2b:08:7b:87:8c:d7:9c:aa:bd:a2:84:6d:2c:51:83:
20:fb:75:47:0c:9d:77:2a:ec:b9:e0:db:5e:4b:80:fb:69:41:
a4:13:93:bc:b0:84:86:a5:df:e1:58:06:51:56:e9:f3:cd:16:
9a:70:1f:12:d5:bd:cd:16:b8:4f:c3:c9:47:04:56:06:53:d7:
4d:54:ef:ff:f4:a5:a8:31:4d:fa:bc:08:ca:ab:d0:c9:d1:06:
ef:e1:60:9a:e1:4a:15:81:76:4d:e1:4d:0e:43:37:32:67:d3:
2b:d7:ed:b8:cc:43:f3:07:d8:40:d9:4d:f0:c0:af:e9:2b:3e:
f2:8b:d6:7c:4a:83:1d:26:a4:51:28:07:58:e5:8a:3c:18:e1:
af:9c:27:6d:91:11:e8:e4:e9:ad:38:7a:97:e6:fc:79:40:e3:
8a:e7:67:41:aa:ed:8d:20:9a:84:cb:88:70:9d:25:d7:47:7d:
02:73:e0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:42 2025 by rpki-client