Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
File: NePUvxvA-BcoIF5R3gl884Ogzck.mft (raw, json)
Hash identifier: YNKMulf3wQg31VPhkm/BxsdYlq6QuL3CI2gLkBbFJIc=
Subject key identifier: C4:C9:F4:72:52:AA:26:38:80:17:0D:2E:72:53:74:F4:4F:88:A4:37
Authority key identifier: 35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
Certificate issuer: /CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Certificate serial: 0199FFC77AA1EDA1F74645885591194207DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
Manifest number: 1623
Signing time: Mon 20 Oct 2025 04:01:27 +0000
Manifest this update: Mon 20 Oct 2025 04:01:27 +0000
Manifest next update: Tue 21 Oct 2025 04:01:27 +0000
Files and hashes: 1: 0RltyGXYqOw5Hx9cC0hpgbUGn1M.roa (hash: mg2bYRQawjXXkuGc/ehoyx4cItI7XGim10ZVkynzOuM=)
2: NePUvxvA-BcoIF5R3gl884Ogzck.crl (hash: o7FlxmMlDy+iEZNjzwIdAn/GFpCpiufO1smY1TZJBWQ=)
3: cC3qEyLwvQCoEx0E8fa6hCQIIMk.roa (hash: t6q5YnGG2tDRloa96C40IAzp6BUV/ndP0HTUzMGh9cA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:7a:a1:ed:a1:f7:46:45:88:55:91:19:42:07:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Validity
Not Before: Oct 20 04:01:27 2025 GMT
Not After : Oct 21 04:01:27 2025 GMT
Subject: CN=c4c9f47252aa263880170d2e725374f44f88a437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:22:93:99:9d:1b:16:25:86:54:31:f7:bf:1a:
d5:52:b4:4c:cf:84:43:9b:67:04:7c:b4:ed:8e:61:
d6:5a:6e:1c:06:d3:35:c4:66:1b:6d:f2:27:57:1d:
da:b9:a8:5d:26:7a:2d:72:b4:a9:98:8f:1a:00:a8:
5f:c1:bd:de:be:54:96:99:33:60:ab:a2:4e:a1:c4:
95:af:fe:a3:9f:69:7d:e3:00:2a:f7:04:e8:44:1d:
12:7a:fb:81:ff:a3:67:f8:66:6d:bf:a4:fe:82:50:
cc:f0:31:88:f7:43:b0:82:f4:74:3f:57:71:71:47:
d4:63:1a:85:00:83:e8:27:21:75:df:b9:02:fc:8f:
65:e6:a0:49:a9:f3:bd:d5:98:b8:ca:3e:2e:7f:5f:
d5:e2:47:60:5a:53:09:3c:24:0d:e3:99:83:b7:d7:
5c:a8:4f:b9:8b:ae:f5:8b:84:ef:6d:77:3b:cb:af:
88:23:bf:26:f6:b3:70:72:a8:e1:ff:ec:a7:4a:10:
17:83:70:d2:84:92:c2:75:46:0b:44:96:4b:90:06:
8e:2b:ab:79:e4:7c:28:4c:37:36:e0:21:25:57:ad:
3b:5f:0b:e3:95:c2:ba:a4:c1:80:f3:e4:ce:a6:29:
97:ee:b6:33:03:02:18:22:03:bf:4f:02:6b:d0:b4:
8a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C9:F4:72:52:AA:26:38:80:17:0D:2E:72:53:74:F4:4F:88:A4:37
X509v3 Authority Key Identifier:
keyid:35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:be:69:69:77:68:74:67:09:32:46:96:24:e0:28:1b:6d:39:
15:8a:9c:85:17:40:96:11:82:8b:1f:e2:c1:5b:c6:e9:db:1e:
a0:37:38:69:ea:56:bf:bd:34:01:5e:00:84:55:3e:0a:4f:2a:
42:3a:e7:d1:ca:f4:43:96:d9:41:64:1f:38:60:56:30:3c:e1:
24:35:96:b8:76:e7:64:8b:fb:24:52:68:f9:65:4d:57:2c:a3:
3f:67:58:fa:a4:1e:69:3f:1f:43:01:15:1e:e3:77:5b:41:87:
d8:fd:65:31:1e:ae:03:5f:d7:47:39:42:76:86:2c:c3:f0:5f:
6a:bf:36:a0:74:aa:40:c7:11:2f:c0:7e:1b:02:5a:8d:64:fb:
3e:3d:88:9e:25:d4:9f:3c:f1:dd:03:e4:67:8f:96:23:b2:09:
f6:a3:58:a3:2c:b0:ac:76:e6:30:75:e0:b7:e6:17:33:d3:19:
bd:0c:50:00:61:72:b6:c2:49:3a:cd:ac:a7:6d:73:c8:79:f3:
e9:c8:7c:02:46:9e:7e:6b:e8:6d:ec:7b:7a:b4:74:da:dd:39:
57:c1:8b:4f:5f:57:fc:ce:fc:9b:18:b6:65:28:62:32:47:b9:
29:79:b1:fd:b3:62:b8:1b:53:57:62:0d:57:04:bc:02:20:75:
8a:65:ca:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/x3qh7aH3RkWIVZEZQgfbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZTNkNGJmMWJjMGY4MTcyODIwNWU1MWRlMDk3Y2YzODNh
MGNkYzkwHhcNMjUxMDIwMDQwMTI3WhcNMjUxMDIxMDQwMTI3WjAzMTEwLwYDVQQD
EyhjNGM5ZjQ3MjUyYWEyNjM4ODAxNzBkMmU3MjUzNzRmNDRmODhhNDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliKTmZ0bFiWGVDH3vxrVUrRMz4RD
m2cEfLTtjmHWWm4cBtM1xGYbbfInVx3auahdJnotcrSpmI8aAKhfwb3evlSWmTNg
q6JOocSVr/6jn2l94wAq9wToRB0SevuB/6Nn+GZtv6T+glDM8DGI90OwgvR0P1dx
cUfUYxqFAIPoJyF137kC/I9l5qBJqfO91Zi4yj4uf1/V4kdgWlMJPCQN45mDt9dc
qE+5i671i4TvbXc7y6+II78m9rNwcqjh/+ynShAXg3DShJLCdUYLRJZLkAaOK6t5
5HwoTDc24CElV607XwvjlcK6pMGA8+TOpimX7rYzAwIYIgO/TwJr0LSKSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMTJ9HJSqiY4gBcNLnJTdPRPiKQ3MB8GA1UdIwQY
MBaAFDXj1L8bwPgXKCBeUd4JfPODoM3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmVQVXZ4dkEtQmNvSUY1UjNnbDg4NE9nemNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9jM2NkYTUtOGE2NC00MjkwLWEyM2Qt
YTYzNDc5MTQ0MGNhLzEvTmVQVXZ4dkEtQmNvSUY1UjNnbDg4NE9nemNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9jM2NkYTUtOGE2NC00MjkwLWEyM2QtYTYzNDc5MTQ0MGNh
LzEvTmVQVXZ4dkEtQmNvSUY1UjNnbDg4NE9nemNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAib5paXdo
dGcJMkaWJOAoG205FYqchRdAlhGCix/iwVvG6dseoDc4aepWv700AV4AhFU+Ck8q
Qjrn0cr0Q5bZQWQfOGBWMDzhJDWWuHbnZIv7JFJo+WVNVyyjP2dY+qQeaT8fQwEV
HuN3W0GH2P1lMR6uA1/XRzlCdoYsw/Bfar82oHSqQMcRL8B+GwJajWT7Pj2IniXU
nzzx3QPkZ4+WI7IJ9qNYoyywrHbmMHXgt+YXM9MZvQxQAGFytsJJOs2sp21zyHnz
6ch8Akaefmvobex7erR02t05V8GLT19X/M78mxi2ZShiMke5KXmx/bNiuBtTV2IN
VwS8AiB1imXKyA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:02:53 2025 by rpki-client