Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
File: NoBlGroGa0CEp-0g1_UgGyKWwZc.mft (raw, json)
Hash identifier: 15C+oDU28Z9zoh1Cl8kMYkEDNwzrwlWzUiBHqdqy36Y=
Subject key identifier: 2E:3E:B2:F4:DA:68:05:80:95:AC:65:E2:87:45:17:BB:F7:89:B1:0D
Authority key identifier: 36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
Certificate issuer: /CN=3680651aba066b4084a7ed20d7f5201b2296c197
Certificate serial: 0199FCC630FE707DFBAD9CDCD865F13CB4EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
Manifest number: 0703
Signing time: Sun 19 Oct 2025 14:01:11 +0000
Manifest this update: Sun 19 Oct 2025 14:01:11 +0000
Manifest next update: Mon 20 Oct 2025 14:01:11 +0000
Files and hashes: 1: 4WEE6M8dthgW-fAXTbXKabGLlL0.roa (hash: Vz/LsTTjIy8GCO6P/Fc6vDeS0OdzaRulpb9xjUaoVO0=)
2: NoBlGroGa0CEp-0g1_UgGyKWwZc.crl (hash: lpZAxbbQh5VpIm17hMZyt8FboWG/jPealUNfIZLUQCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:30:fe:70:7d:fb:ad:9c:dc:d8:65:f1:3c:b4:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3680651aba066b4084a7ed20d7f5201b2296c197
Validity
Not Before: Oct 19 14:01:11 2025 GMT
Not After : Oct 20 14:01:11 2025 GMT
Subject: CN=2e3eb2f4da68058095ac65e2874517bbf789b10d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:66:ee:1f:3f:74:9c:10:73:68:b3:4c:73:b1:
25:9e:f5:5c:3b:54:44:25:50:5a:89:65:25:f4:13:
f8:58:36:b3:3d:0f:ad:00:6a:32:99:19:71:57:df:
ed:85:74:88:ba:51:d1:29:55:80:5a:cf:10:c6:16:
e6:0e:bc:63:66:6c:90:f8:80:0b:b6:c0:b2:e6:7c:
de:42:cd:c7:83:70:d1:ac:3b:d6:5c:42:6f:28:ee:
35:9a:f7:fe:4a:05:d3:7f:4a:83:c4:7f:11:d5:54:
d0:1f:0e:a2:5d:16:6f:ae:e2:6d:b2:0c:8b:eb:56:
12:29:3d:48:ea:ef:fb:09:cf:3c:bd:0f:83:49:16:
79:9a:be:bf:e0:ae:d4:77:1a:50:3b:49:01:40:1e:
49:05:f3:21:42:ca:a9:b7:0e:0d:2e:f6:79:14:88:
4d:9f:6e:cd:dc:0c:1f:c3:d9:cc:6b:f4:3c:76:ee:
2a:f8:c0:f6:6f:b7:00:97:31:3b:a1:6a:93:60:5d:
0d:ec:b6:8e:9b:17:1f:6d:92:7a:bb:67:e1:5c:d9:
c5:21:f7:d7:79:00:be:dc:c9:fe:d1:df:a9:12:73:
2e:f9:b8:19:39:99:50:69:25:e9:d8:9f:a1:67:c8:
3a:55:cc:59:8c:63:0c:61:f8:c1:67:88:41:ee:ee:
11:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3E:B2:F4:DA:68:05:80:95:AC:65:E2:87:45:17:BB:F7:89:B1:0D
X509v3 Authority Key Identifier:
keyid:36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:d5:08:fd:66:26:0c:d0:a8:0e:55:7f:fb:11:87:0b:3f:b0:
23:43:62:10:d9:67:53:bc:5a:b4:8a:c4:56:cc:fc:55:86:78:
fa:61:38:de:3e:f7:ed:0c:e9:9a:08:eb:6d:8f:6c:84:1e:75:
2b:a6:78:c5:a1:d1:7b:0d:4b:59:42:8d:55:b5:06:2f:8c:30:
d5:54:78:4e:06:dc:05:96:bb:be:78:95:d8:e0:25:38:8e:bd:
77:98:03:78:38:be:a6:ca:6a:3c:4a:1a:29:38:d9:d8:94:1a:
4e:52:ad:eb:3d:46:f3:5a:61:f0:5e:12:00:80:93:17:cb:73:
ea:05:18:22:2e:74:df:29:a3:20:e9:a4:47:37:10:90:21:35:
54:14:08:4b:f1:f4:26:bc:e7:19:82:53:b4:ca:b6:e1:53:ed:
4d:58:64:60:a3:f4:c1:84:60:27:a8:29:49:2d:90:32:e5:9b:
7e:5b:45:47:09:a8:44:6c:6b:9c:b8:b3:e7:67:db:0a:87:7d:
dd:fa:5c:7c:36:c2:c2:c5:0e:43:b6:bc:78:ff:22:b2:bb:50:
48:a6:8b:c5:d1:93:2c:b5:3a:d8:7d:1d:f3:96:ca:70:34:5d:
25:da:f0:e0:73:ee:af:c8:80:f3:cb:0b:21:8e:70:a4:03:27:
69:12:67:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:40 2025 by rpki-client