
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
File: NCUppgkAWDTcELW4AP5TEMWMxH4.mft (raw, json)
Hash identifier: SsFfoa0KUmmnsUWLOpOvZZEgBYXoCXeLBGTSqD0zcvU=
Subject key identifier: 0C:CF:6F:D7:76:CF:A8:53:0A:78:AF:CC:0F:E7:09:9D:04:6B:A3:8A
Authority key identifier: 34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
Certificate issuer: /CN=342529a609005834dc10b5b800fe5310c58cc47e
Certificate serial: 0199FAD85E5247CBE0B4BBB1D6F17D5C6234
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
Manifest number: 02C9
Signing time: Sun 19 Oct 2025 05:01:47 +0000
Manifest this update: Sun 19 Oct 2025 05:01:47 +0000
Manifest next update: Mon 20 Oct 2025 05:01:47 +0000
Files and hashes: 1: NCUppgkAWDTcELW4AP5TEMWMxH4.crl (hash: wz27RbTAzMmDu8fzZsY+NCd4QxWCx/mCbdQjpwsW8sE=)
2: Z_eZrq0pMGEuCobzf2HGLgxhvHM.roa (hash: L/Qhu9gR3mWIDrVB/JXQbyHDSmMMhTwgUj0OQ/bpGK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:5e:52:47:cb:e0:b4:bb:b1:d6:f1:7d:5c:62:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=342529a609005834dc10b5b800fe5310c58cc47e
Validity
Not Before: Oct 19 05:01:47 2025 GMT
Not After : Oct 20 05:01:47 2025 GMT
Subject: CN=0ccf6fd776cfa8530a78afcc0fe7099d046ba38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a4:59:59:10:f8:52:ae:84:72:78:a4:b0:53:
c3:8b:6f:dc:4d:94:95:1f:a0:86:84:9b:64:27:36:
76:36:f0:4d:f6:5d:83:ff:38:79:06:9e:58:38:9f:
50:1e:3a:3a:e6:b0:49:1e:59:18:a7:29:a7:b8:08:
8a:6e:0c:fb:d5:e9:d7:c1:a4:09:93:7a:b2:f5:ea:
ce:3a:59:2f:8a:bf:b5:df:79:24:91:f2:f2:58:17:
93:d7:ba:6d:8e:3b:93:e6:a4:34:a9:01:34:50:74:
67:09:23:48:5d:57:76:db:5e:b8:13:06:df:c0:b6:
10:c2:c5:e9:dd:a5:d0:d6:18:90:70:c4:ca:0b:eb:
74:a6:82:5d:97:55:86:fb:0b:15:f6:aa:ba:aa:d1:
50:d3:6c:33:43:b0:e0:cd:f8:b6:cb:ee:4b:df:9d:
eb:69:c6:d9:f5:a9:e8:e6:a8:67:f5:eb:7c:6e:bd:
07:9e:82:ac:84:b1:23:ae:e1:b2:46:13:9e:97:0b:
61:59:dc:75:8d:80:59:d1:4d:7a:b3:85:66:d2:3f:
33:d2:96:e6:f2:68:10:b4:85:b9:d5:36:28:bf:80:
87:cf:8b:28:be:81:a3:ba:bb:be:6b:39:38:6c:c7:
92:1f:1a:01:c0:a5:5c:bf:11:af:c0:2d:e6:ff:18:
cd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CF:6F:D7:76:CF:A8:53:0A:78:AF:CC:0F:E7:09:9D:04:6B:A3:8A
X509v3 Authority Key Identifier:
keyid:34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:68:fe:8d:e0:1c:9f:b4:19:bf:f8:86:3f:c2:6f:47:18:f4:
cb:94:e0:7b:49:4e:ae:d3:83:db:f9:35:1d:3b:cf:1d:8a:0a:
46:d2:e4:61:34:e2:6f:c3:ad:d5:08:dc:c4:87:e7:7a:38:b6:
e7:9a:c1:88:be:9f:4d:30:e9:2c:06:bb:db:1b:8f:53:b1:0d:
c5:d9:3c:54:84:f8:1d:39:e4:16:22:d5:b5:cd:3d:18:78:0c:
d4:08:1e:6a:42:d2:bd:98:af:33:a2:03:81:1b:e7:dc:0c:d4:
74:e9:79:06:cc:b7:23:98:e3:49:cf:99:11:79:76:e3:cd:07:
89:ff:3a:69:f2:6a:7f:c3:69:90:38:44:95:86:16:4d:1c:16:
7b:c8:74:e1:7e:04:43:e5:3f:6e:ec:75:01:80:19:9d:8f:f7:
b7:3a:42:c2:53:20:e5:d8:4b:86:e6:7f:ca:6d:d1:9a:14:af:
57:98:bb:c5:87:91:50:70:46:bc:04:37:be:25:e5:85:e8:a4:
3f:48:63:c7:e7:3e:8b:c0:47:4b:94:39:a0:44:31:ab:6e:ea:
8c:ee:3d:6a:11:fb:06:b1:24:c7:03:5e:11:d2:b5:1f:18:16:
09:18:de:b4:3e:a0:f2:c1:3e:ed:69:8f:a8:0c:96:cb:e8:f7:
25:ff:cc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:06 2025 by rpki-client