Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/1d4f36-b97d-4d98-bb2c-b8a27472a896/1/NEGOJrKutuqoFD_XGDD5s1Sue7w.mft
File: NEGOJrKutuqoFD_XGDD5s1Sue7w.mft (raw, json)
Hash identifier: PohT3+dYZSjFiM5qc1Aaj0TdAvSpy8dEfAsj0tyEawE=
Subject key identifier: 92:B8:9F:F3:72:CD:5C:57:C6:95:55:8F:E7:62:92:92:28:C4:C0:E3
Authority key identifier: 34:41:8E:26:B2:AE:B6:EA:A8:14:3F:D7:18:30:F9:B3:54:AE:7B:BC
Certificate issuer: /CN=34418e26b2aeb6eaa8143fd71830f9b354ae7bbc
Certificate serial: 019A01B4D24FF6D6624BE2AA059F619B6B25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEGOJrKutuqoFD_XGDD5s1Sue7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/1d4f36-b97d-4d98-bb2c-b8a27472a896/1/NEGOJrKutuqoFD_XGDD5s1Sue7w.mft
Manifest number: 0FBA
Signing time: Mon 20 Oct 2025 13:00:18 +0000
Manifest this update: Mon 20 Oct 2025 13:00:18 +0000
Manifest next update: Tue 21 Oct 2025 13:00:18 +0000
Files and hashes: 1: NEGOJrKutuqoFD_XGDD5s1Sue7w.crl (hash: w8r5VexBs/8RPud4EMKbeFCQk4QNRD7CFdqpWFUdsqo=)
2: nsObN2DjPGcwLXn29XqybNz0hdw.roa (hash: LniUQovzLZtOR3Vslt1uv0Oiv/eQZfXqUz8XebxPz+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/1d4f36-b97d-4d98-bb2c-b8a27472a896/1/NEGOJrKutuqoFD_XGDD5s1Sue7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/1d4f36-b97d-4d98-bb2c-b8a27472a896/1/NEGOJrKutuqoFD_XGDD5s1Sue7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/NEGOJrKutuqoFD_XGDD5s1Sue7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b4:d2:4f:f6:d6:62:4b:e2:aa:05:9f:61:9b:6b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34418e26b2aeb6eaa8143fd71830f9b354ae7bbc
Validity
Not Before: Oct 20 13:00:18 2025 GMT
Not After : Oct 21 13:00:18 2025 GMT
Subject: CN=92b89ff372cd5c57c695558fe762929228c4c0e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5f:b6:c3:0c:fa:eb:91:ff:26:4c:96:e1:7d:
21:b6:38:17:35:7c:1a:db:2c:bb:2e:98:44:56:7b:
87:31:36:4a:20:c0:ec:5c:cb:b5:a0:99:10:0d:92:
bd:80:32:47:67:a0:69:b5:b7:7e:e7:3e:a1:9a:5c:
94:fc:74:99:bf:4a:d6:75:c7:7e:52:32:b2:a4:24:
bc:f0:b9:e7:9a:5b:37:6c:b0:dd:5f:9c:50:d9:37:
99:21:c5:fb:ff:be:6f:47:d1:f1:a3:46:ef:27:69:
09:26:f6:3a:ae:8d:e7:ca:59:0d:bd:cb:97:d4:51:
76:b7:bb:fd:5b:39:34:fb:15:dd:d8:55:eb:4e:fc:
84:27:f0:b3:49:03:63:3f:d6:db:07:f1:ab:2b:59:
c6:e2:ec:3a:61:e6:b6:53:af:2c:49:fe:0d:36:ed:
ad:7f:53:1d:f1:52:83:c2:1a:77:d6:a8:f5:a0:9d:
a1:18:33:57:6f:3d:8e:7e:a1:3b:70:87:fa:ec:7b:
30:b0:51:a5:65:99:01:96:73:9a:c1:9a:ee:40:10:
9e:18:4d:dc:7c:84:3a:be:2c:5a:69:53:ef:1b:db:
b3:cb:91:56:f0:5e:f2:ab:40:39:d4:86:b4:ce:7e:
db:86:af:6b:cb:48:5c:65:51:27:9d:e8:45:15:c8:
6f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B8:9F:F3:72:CD:5C:57:C6:95:55:8F:E7:62:92:92:28:C4:C0:E3
X509v3 Authority Key Identifier:
keyid:34:41:8E:26:B2:AE:B6:EA:A8:14:3F:D7:18:30:F9:B3:54:AE:7B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEGOJrKutuqoFD_XGDD5s1Sue7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/1d4f36-b97d-4d98-bb2c-b8a27472a896/1/NEGOJrKutuqoFD_XGDD5s1Sue7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/1d4f36-b97d-4d98-bb2c-b8a27472a896/1/NEGOJrKutuqoFD_XGDD5s1Sue7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:a6:f2:05:64:53:92:82:4f:a1:9c:22:99:b0:87:79:13:2e:
e4:3f:60:3c:0b:ca:47:1d:d5:63:bd:2d:d5:ad:18:f5:6c:07:
36:79:89:39:65:77:61:8d:d9:7e:0c:e6:de:5d:88:e5:ed:38:
b5:50:d7:4a:49:7b:6f:44:ac:c4:03:9d:de:cb:a0:7e:55:e5:
48:ee:e9:dd:08:07:dd:05:0b:90:0b:4b:34:18:7b:ef:14:88:
d3:21:8f:a2:55:58:8d:ad:bf:2f:c2:8c:cb:8a:a0:77:85:2a:
e3:49:fb:42:ec:0a:bc:21:cc:30:25:22:e5:05:91:05:6d:03:
4e:01:5f:31:15:c7:83:df:23:81:f3:13:bb:de:71:fd:be:4a:
24:79:85:51:11:30:8b:ee:0a:eb:a5:5f:c6:44:a8:7d:27:f8:
44:db:e8:07:cc:c0:d5:cc:6f:ca:cd:9b:c7:08:d5:95:99:1b:
ce:fd:04:2e:e5:93:d6:7d:a7:70:ea:3d:9d:8d:6e:06:96:f4:
73:37:1e:65:f8:1d:aa:8d:f3:63:e6:f3:13:45:4c:1f:d2:01:
6e:1a:8e:ad:a7:00:3d:26:70:9e:d7:68:ca:59:74:e7:31:36:
a7:01:97:31:23:f2:e7:bf:e8:a0:91:dd:c1:64:19:fe:7e:4a:
5d:a5:36:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:26:40 2025 by rpki-client