Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
File: NEcY0TWgm7UkcGtCWcq8xiblFO8.mft (raw, json)
Hash identifier: TBXbXYz6I1b1/Ecvo2fiirAceIA5D9nm17SFojFJwwY=
Subject key identifier: 62:25:8E:63:11:FF:1D:D5:DE:CB:F0:14:29:98:D6:5C:F0:58:F3:DB
Authority key identifier: 34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF
Certificate issuer: /CN=344718d135a09bb524706b4259cabcc626e514ef
Certificate serial: 0199FC58D4FF143848362472FB0C33BCBF18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
Manifest number: 1675
Signing time: Sun 19 Oct 2025 12:01:44 +0000
Manifest this update: Sun 19 Oct 2025 12:01:44 +0000
Manifest next update: Mon 20 Oct 2025 12:01:44 +0000
Files and hashes: 1: NEcY0TWgm7UkcGtCWcq8xiblFO8.crl (hash: QQqSWKGawRKAfOGJmFlzSu0tqx8xDwIPfHzGf9aSWM4=)
2: sO-QyC1vz5w60dvkaCQsXtLi8YA.roa (hash: wtWXsxxZV53+P/qICncBE0LIXN7QWpyRCdTXr4pbwmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:d4:ff:14:38:48:36:24:72:fb:0c:33:bc:bf:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344718d135a09bb524706b4259cabcc626e514ef
Validity
Not Before: Oct 19 12:01:44 2025 GMT
Not After : Oct 20 12:01:44 2025 GMT
Subject: CN=62258e6311ff1dd5decbf0142998d65cf058f3db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f8:b7:8c:00:66:27:2d:6f:ec:52:01:d9:87:
f0:f9:9a:cd:36:59:6a:a3:1e:51:21:b0:4d:ca:2a:
d1:20:c3:92:00:f6:fc:23:e8:67:78:b1:c6:2e:14:
ca:5e:32:18:7c:59:17:20:83:1f:10:95:82:19:10:
3a:e0:23:11:ac:86:bb:82:a3:24:2c:5d:1e:e5:86:
93:ce:24:6f:d7:ac:68:19:22:06:b6:f6:4a:42:87:
18:ca:29:8b:28:a9:b8:a7:19:85:45:54:b7:d2:96:
61:40:f4:10:cd:75:97:9d:85:3e:86:2b:aa:fe:da:
1d:c3:f0:99:37:dd:21:83:0c:32:61:a1:7b:63:8f:
64:21:54:8d:e1:d5:1d:a8:44:25:50:ce:41:fd:9c:
bf:c1:b7:c7:c9:99:cc:9f:d8:2a:50:7b:4f:ca:3a:
dd:01:9d:f7:09:c0:54:e8:34:75:4e:ed:23:f5:be:
bb:ee:90:37:b4:b6:d0:f7:7d:57:7f:56:aa:46:96:
40:9c:68:00:84:48:b4:0b:1f:b9:47:e1:00:f6:02:
29:93:e3:35:60:15:c4:f3:eb:63:63:7c:cf:d4:91:
7e:1d:a8:e7:47:87:52:42:84:be:80:f2:a2:17:eb:
48:0c:cc:5b:ba:eb:84:4e:5c:d5:2d:6f:50:f0:59:
0a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:25:8E:63:11:FF:1D:D5:DE:CB:F0:14:29:98:D6:5C:F0:58:F3:DB
X509v3 Authority Key Identifier:
keyid:34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:8a:c0:00:07:1f:74:01:25:88:20:3d:99:f6:b9:66:0f:47:
7e:a1:e5:e3:1f:e2:71:cf:ff:f2:21:64:45:d2:05:e0:00:4f:
f0:0b:bd:66:3a:49:36:88:49:44:6f:fc:c0:e4:38:65:b4:e4:
62:bd:14:cf:99:7d:05:47:6f:d0:0a:71:45:e3:30:d0:16:db:
9e:39:5e:df:d9:95:1a:62:3e:97:eb:19:b4:d7:3d:ec:07:99:
18:33:90:b6:f6:50:29:26:8f:2b:08:49:7f:35:06:5c:b6:c9:
7c:f1:1e:43:c6:d9:47:e0:ad:9e:3f:19:2f:fa:5e:ed:0c:b0:
51:11:09:2d:58:51:54:5e:15:7c:83:8a:bf:bd:0e:8f:77:ad:
4e:66:a9:32:70:da:7b:a6:fd:1e:87:37:cc:46:d2:67:9d:19:
32:1f:83:1b:58:9e:f7:00:fa:7a:58:59:aa:58:1c:5a:b8:f5:
9b:e9:de:67:14:e2:ca:00:ea:cd:17:86:55:ec:a4:fd:55:d9:
f8:eb:5c:bd:1b:6b:47:47:67:eb:09:50:0b:d6:e2:82:07:eb:
73:fd:54:5b:b7:91:c8:95:34:5e:d6:b5:b9:8e:b4:19:e1:a6:
e6:4b:e1:0e:59:dd:4c:a3:f0:14:2c:62:b5:45:75:80:21:c0:
f4:e0:2a:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WNT/FDhINiRy+wwzvL8YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NDcxOGQxMzVhMDliYjUyNDcwNmI0MjU5Y2FiY2M2MjZl
NTE0ZWYwHhcNMjUxMDE5MTIwMTQ0WhcNMjUxMDIwMTIwMTQ0WjAzMTEwLwYDVQQD
Eyg2MjI1OGU2MzExZmYxZGQ1ZGVjYmYwMTQyOTk4ZDY1Y2YwNThmM2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfi3jABmJy1v7FIB2Yfw+ZrNNllq
ox5RIbBNyirRIMOSAPb8I+hneLHGLhTKXjIYfFkXIIMfEJWCGRA64CMRrIa7gqMk
LF0e5YaTziRv16xoGSIGtvZKQocYyimLKKm4pxmFRVS30pZhQPQQzXWXnYU+hiuq
/todw/CZN90hgwwyYaF7Y49kIVSN4dUdqEQlUM5B/Zy/wbfHyZnMn9gqUHtPyjrd
AZ33CcBU6DR1Tu0j9b677pA3tLbQ931Xf1aqRpZAnGgAhEi0Cx+5R+EA9gIpk+M1
YBXE8+tjY3zP1JF+HajnR4dSQoS+gPKiF+tIDMxbuuuETlzVLW9Q8FkKdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIljmMR/x3V3svwFCmY1lzwWPPbMB8GA1UdIwQY
MBaAFDRHGNE1oJu1JHBrQlnKvMYm5RTvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkVjWTBUV2dtN1VrY0d0Q1djcTh4aWJsRk84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9iZGQyYmEtYTQ4NC00YjBkLWFlOWEt
NWQzM2UxOGE2OWEwLzEvTkVjWTBUV2dtN1VrY0d0Q1djcTh4aWJsRk84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9iZGQyYmEtYTQ4NC00YjBkLWFlOWEtNWQzM2UxOGE2OWEw
LzEvTkVjWTBUV2dtN1VrY0d0Q1djcTh4aWJsRk84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACIrAAAcf
dAEliCA9mfa5Zg9HfqHl4x/icc//8iFkRdIF4ABP8Au9ZjpJNohJRG/8wOQ4ZbTk
Yr0Uz5l9BUdv0ApxReMw0Bbbnjle39mVGmI+l+sZtNc97AeZGDOQtvZQKSaPKwhJ
fzUGXLbJfPEeQ8bZR+Ctnj8ZL/pe7QywUREJLVhRVF4VfIOKv70Oj3etTmapMnDa
e6b9Hoc3zEbSZ50ZMh+DG1ie9wD6elhZqlgcWrj1m+neZxTiygDqzReGVeyk/VXZ
+OtcvRtrR0dn6wlQC9biggfrc/1UW7eRyJU0Xta1uY60GeGm5kvhDlndTKPwFCxi
tUV1gCHA9OAqaQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:53 2025 by rpki-client