Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
File: NGyrWUu9qbRA_afTl0y9RByY5ck.mft (raw, json)
Hash identifier: mESRxLbjIeGWjWPrMT+lgtlX7Ks6upv/X0ftrtGlclQ=
Subject key identifier: A4:95:8B:3E:BE:25:C2:1C:8F:27:55:B1:57:49:CC:A4:50:A5:B5:5A
Authority key identifier: 34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9
Certificate issuer: /CN=346cab594bbda9b440fda7d3974cbd441c98e5c9
Certificate serial: 0199FCC6E40ADBC7A510535A64170E0BF060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 14:01:56 +0000
Manifest this update: Sun 19 Oct 2025 14:01:56 +0000
Manifest next update: Mon 20 Oct 2025 14:01:56 +0000
Files and hashes: 1: NGyrWUu9qbRA_afTl0y9RByY5ck.crl (hash: Nvg9eL6f2I6CZOkN13QlO4hYH+F9ZCEmMjfg+yvpkMw=)
2: qWxHxzkwFGcxa5jSluitx-sE42Y.roa (hash: 3aDiNAN4onF/Cdaq+yTsD+jmRJ2OmMmFOaHRV5Fmhp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:e4:0a:db:c7:a5:10:53:5a:64:17:0e:0b:f0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=346cab594bbda9b440fda7d3974cbd441c98e5c9
Validity
Not Before: Oct 19 14:01:56 2025 GMT
Not After : Oct 20 14:01:56 2025 GMT
Subject: CN=a4958b3ebe25c21c8f2755b15749cca450a5b55a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ed:11:45:7f:b7:ab:66:a3:87:35:82:d5:7e:
d1:be:27:f2:43:7c:73:97:fa:ac:84:20:57:95:20:
f5:04:29:4c:b3:d7:ef:4e:16:95:60:13:be:bc:f8:
62:ad:a7:59:68:e0:3c:b4:23:f7:7b:11:14:c9:7e:
7a:fa:c2:ba:32:d2:75:18:e8:56:cc:62:a0:57:84:
3e:b3:f7:66:83:fe:86:72:ac:32:0d:53:91:60:db:
2b:9c:49:16:f4:ae:38:57:89:86:61:89:13:e2:d7:
6c:bd:e4:b7:9f:e6:39:74:8b:f6:db:65:53:6a:dd:
8c:80:df:50:98:dd:34:1a:26:13:c8:ca:e6:d7:09:
60:74:1a:71:bd:f3:fc:78:b9:f5:b1:35:f1:dd:e1:
0c:11:21:83:ce:58:21:bf:89:e6:c8:7e:7a:c3:6e:
c5:ad:93:a2:3d:a4:1a:21:d7:1e:7c:d5:86:74:93:
45:fc:67:68:34:27:93:dc:98:82:8f:26:10:f5:cd:
10:75:64:1f:eb:0d:95:cc:1a:a0:86:77:77:07:8a:
59:e3:f8:3d:15:82:c2:98:54:8d:5f:88:d7:88:e1:
14:04:73:cc:0d:93:6b:b3:98:61:dd:69:3f:2f:b8:
0b:94:96:8e:b9:c1:cb:7b:41:cb:30:8d:be:c2:f3:
db:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:95:8B:3E:BE:25:C2:1C:8F:27:55:B1:57:49:CC:A4:50:A5:B5:5A
X509v3 Authority Key Identifier:
keyid:34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:cb:87:42:54:2d:02:3f:dd:7e:c8:42:c1:b7:15:a5:ae:37:
a5:f7:b6:71:d9:b9:18:42:c1:17:c8:99:48:0a:0e:d4:00:07:
05:0d:46:4f:70:07:59:32:6b:88:9b:52:f8:9d:b7:31:50:55:
db:ef:17:78:f1:36:cd:1e:57:ae:f8:66:29:d9:f5:f1:03:45:
5a:52:57:ec:12:be:c5:92:d3:b2:0a:e8:ac:f0:2e:8f:e9:11:
c4:9b:32:6a:26:86:a6:99:be:84:a2:31:10:e7:18:eb:e6:98:
88:13:40:06:58:f8:2f:85:d6:16:b6:39:12:ed:6d:89:f8:c9:
c0:28:c4:98:8c:b7:f7:41:25:37:96:3c:01:24:38:82:5f:2a:
a4:f2:fd:73:d9:82:20:a0:4f:fe:bb:43:70:08:83:ca:62:2c:
2a:42:66:a8:bf:18:d6:97:93:ba:c0:96:5c:0d:c5:33:86:69:
4f:af:07:1e:4a:e9:43:a5:41:9d:38:b6:83:13:68:6e:10:05:
a6:f8:33:ec:41:da:c8:66:85:f0:5d:b3:73:72:b9:b9:6b:40:
1c:bf:70:24:41:c5:23:c5:1f:ba:c4:8a:21:0d:91:3d:48:ad:
06:91:31:bb:68:31:3d:dc:5e:e3:39:80:99:01:0d:76:1e:0d:
e9:c5:40:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:39 2025 by rpki-client