Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
File: NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft (raw, json)
Hash identifier: x/wS0fo/K2n4KcIwsxKvrUEEjELwHtR+OR+QxIlOnyY=
Subject key identifier: A1:1E:84:BF:E4:5F:36:DD:F9:52:4B:B3:5C:15:DC:8D:AF:FC:4A:77
Authority key identifier: 34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D
Certificate issuer: /CN=344fdad10ee55b3282a64246a41dc61a8922d25d
Certificate serial: 0199FBEAC4AA4D2EA906617C32613AFECB5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
Manifest number: 13E6
Signing time: Sun 19 Oct 2025 10:01:30 +0000
Manifest this update: Sun 19 Oct 2025 10:01:30 +0000
Manifest next update: Mon 20 Oct 2025 10:01:30 +0000
Files and hashes: 1: GHI5fKOLnVPTORGJ-8HvgMn5I8g.roa (hash: tTyvweQSG7PSV/1T7+CqEyju3wttfhrfn44tpkM7ENI=)
2: NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl (hash: a3npvWwGKtm4Jo86JUxsQsP4zvUdUOdtMMwWuAUr7sw=)
3: xHwvN6-vM3aYD0WFb7ooENGYbZk.roa (hash: iMOiUeIxNdKNrUiqdP5pHSRFVDIEoaVwDT8Frv9xIdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:c4:aa:4d:2e:a9:06:61:7c:32:61:3a:fe:cb:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344fdad10ee55b3282a64246a41dc61a8922d25d
Validity
Not Before: Oct 19 10:01:30 2025 GMT
Not After : Oct 20 10:01:30 2025 GMT
Subject: CN=a11e84bfe45f36ddf9524bb35c15dc8daffc4a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:38:50:65:02:66:69:80:c5:74:32:3d:e5:3f:
66:8b:28:b8:16:0f:5d:7e:78:5d:cf:5d:36:5d:42:
7c:cc:41:14:73:2d:ed:46:50:b5:e8:08:29:9a:4a:
12:21:10:4b:62:7e:7f:54:e4:a7:59:85:10:13:c8:
17:e4:dd:5f:b8:ae:f0:99:15:09:b6:77:7e:6f:40:
80:f8:b8:dc:fe:55:3b:35:ff:36:c4:4d:76:33:77:
ee:61:57:ef:0f:74:17:f5:a9:a7:38:c3:b4:4c:a3:
00:38:5a:be:43:30:6b:38:ac:d4:cd:28:08:15:6f:
f0:8d:c4:cd:ce:44:e8:ab:20:20:a2:30:76:0d:48:
5c:8e:3f:ce:15:bd:eb:f0:ee:9f:8c:6d:91:76:e3:
3e:05:01:de:27:5a:8b:07:ac:56:d9:8c:c9:a8:ef:
e5:2f:a1:3d:78:87:b1:5b:59:a1:ec:0d:7b:d9:29:
9a:40:4b:81:10:9f:d6:c2:fb:20:ac:28:c8:c6:16:
5d:f7:f8:b2:ee:30:0c:97:85:31:37:84:82:a3:a3:
3b:ff:86:10:6d:cf:71:47:b3:be:52:b9:4d:53:f3:
84:b2:51:f3:d3:3b:2c:36:71:f1:fd:81:4d:ce:b3:
2b:83:f5:04:1d:e8:72:50:20:e1:f1:9b:38:c4:9f:
dc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:1E:84:BF:E4:5F:36:DD:F9:52:4B:B3:5C:15:DC:8D:AF:FC:4A:77
X509v3 Authority Key Identifier:
keyid:34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c0:30:af:6a:fb:20:dd:4b:5d:fa:53:b9:19:25:bf:eb:27:
9b:89:e4:8d:3f:e1:c4:5e:92:ac:f1:0a:5a:b1:f5:dd:af:6c:
b7:86:e7:42:94:75:de:4e:5d:0a:f7:17:65:e9:cc:51:a2:b0:
27:15:a2:ed:81:67:24:6c:67:bc:e1:59:d6:40:60:d9:a4:28:
7c:5a:47:dd:be:08:51:d3:6c:19:04:3b:45:46:8b:02:76:6b:
49:6a:95:2f:5d:d9:4a:5f:bd:61:8e:b8:29:8f:e1:98:07:4e:
25:2e:0b:bb:5b:17:42:cd:e6:d0:ae:54:a0:77:a4:ee:d2:44:
de:25:4f:e9:52:58:45:64:56:09:a5:f1:54:57:86:1a:05:aa:
f4:4b:cc:91:6c:35:4d:6e:af:5a:d4:7b:ce:ee:e6:4c:2f:00:
80:07:de:fd:00:6d:79:49:9e:89:c6:68:f5:00:6f:da:15:06:
77:ac:a6:aa:a0:cb:e3:55:fc:0f:20:2e:96:f9:2b:07:0a:f5:
7f:2e:98:98:e6:4f:74:73:a7:25:ba:d7:83:62:39:14:d5:7c:
d5:0e:c6:0a:b2:09:4c:b2:73:96:40:8e:63:60:5a:01:b0:7e:
71:1b:7e:e3:3d:dc:b6:a9:46:d8:fd:75:56:b7:6b:fb:2f:26:
3a:f1:6c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:46 2025 by rpki-client