Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
File: Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft (raw, json)
Hash identifier: KPDMyd7kgp6gB2p3yABeKyhm9Hi+XfIv2nCur6OVISE=
Subject key identifier: 5A:CD:68:78:F2:69:65:E9:7D:F8:73:8E:F3:71:31:5C:FB:EA:88:5C
Authority key identifier: 35:DF:B4:A5:BC:5B:75:BD:94:AA:44:7B:A3:3F:55:57:19:71:CC:F6
Certificate issuer: /CN=35dfb4a5bc5b75bd94aa447ba33f55571971ccf6
Certificate serial: 019A4470AAA65562C272C20138B3ED2F1443
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
Manifest number: 0555
Signing time: Sun 02 Nov 2025 12:00:25 +0000
Manifest this update: Sun 02 Nov 2025 12:00:25 +0000
Manifest next update: Mon 03 Nov 2025 12:00:25 +0000
Files and hashes: 1: Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl (hash: eic0bHV4mMcHPgNBlHNb08fPhJU67hYIyaIxQaO+JCU=)
2: mlswz8Ncs32ae7C2It5n-o0yiHo.roa (hash: S5ligNAG6F0uIgpXYHQu/GqcrGyX5LZG4CQQfjCfuRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Nov 2025 06:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:44:70:aa:a6:55:62:c2:72:c2:01:38:b3:ed:2f:14:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35dfb4a5bc5b75bd94aa447ba33f55571971ccf6
Validity
Not Before: Nov 2 12:00:25 2025 GMT
Not After : Nov 3 12:00:25 2025 GMT
Subject: CN=5acd6878f26965e97df8738ef371315cfbea885c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:06:2a:64:e9:0a:d3:3c:3d:7d:6a:c8:93:f6:
e6:37:e6:f6:e8:75:f1:a4:48:95:26:1d:d0:c7:b6:
cc:29:6e:63:0a:92:23:cb:5a:1c:89:0d:a1:ba:b8:
de:56:2e:e7:6f:a1:dd:39:9e:17:47:da:6d:ce:27:
a2:f0:14:7e:5c:6b:85:0c:34:59:98:93:b6:f0:56:
e8:ca:57:23:60:52:9c:e2:1e:91:5e:cc:0c:fc:37:
d6:70:35:aa:65:a4:d0:f5:aa:d6:18:e5:1f:88:e0:
f9:e7:1b:f0:b0:ec:d6:01:f5:0a:6f:8c:8b:c2:22:
34:5a:a7:11:c0:4d:8f:97:e8:53:69:e8:79:17:fd:
7b:16:b0:1d:6a:32:73:d5:ef:bf:ae:db:58:fa:58:
eb:35:5e:e3:37:a3:b2:ea:1b:b9:05:13:68:a2:c0:
66:4f:a8:16:0b:d8:ab:7a:49:3e:f8:f8:72:7d:61:
4a:9d:89:8e:fa:fe:0b:74:38:16:c3:74:7d:c1:7d:
27:40:96:64:58:9f:a3:f7:52:3c:39:90:c8:2a:fc:
3a:3e:8d:08:46:72:55:35:f1:df:e6:12:1f:89:74:
f0:39:b8:42:c3:87:fb:a7:e6:dd:c3:0c:03:ee:83:
51:f0:a9:34:e9:6f:c7:3e:4c:2d:b8:e5:ff:4d:86:
86:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CD:68:78:F2:69:65:E9:7D:F8:73:8E:F3:71:31:5C:FB:EA:88:5C
X509v3 Authority Key Identifier:
keyid:35:DF:B4:A5:BC:5B:75:BD:94:AA:44:7B:A3:3F:55:57:19:71:CC:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a7:a0:f2:ac:52:e3:90:58:83:5f:cd:5f:e9:20:83:0f:f7:
48:0a:8b:7d:7f:b0:2d:ff:8e:0c:cb:e7:c8:c5:56:a9:04:3b:
7d:f7:66:62:12:27:41:d7:9d:d1:5b:2e:1e:f5:09:a3:e3:42:
7d:c6:ca:0f:22:10:f9:3a:94:1e:d1:71:b9:ae:da:27:18:79:
ce:89:a7:df:4c:98:52:6f:bd:d9:8b:0f:2f:bd:93:e2:09:fc:
6f:3f:1d:81:fa:99:4c:ac:0c:8d:42:b2:80:a8:3e:1e:1a:f1:
82:be:e6:2b:c3:2e:d7:f5:13:e5:82:e1:2c:c4:c8:e0:5a:8f:
45:c7:5e:a9:6d:27:9c:04:15:88:2f:29:26:86:1b:92:a2:4b:
45:05:6c:8b:c7:11:ef:a1:e1:99:7e:c0:93:3e:12:02:dc:dc:
6c:2b:26:41:3b:dd:68:2a:75:29:ff:06:1f:e3:dd:4e:e3:71:
8d:ec:94:4c:ba:03:0c:e2:b4:2c:41:54:59:b9:5b:e9:fb:26:
d0:b9:4a:d5:72:70:68:ef:28:d1:8a:b6:82:4c:e9:88:d9:06:
bb:c8:1d:bc:7f:b3:9e:f7:31:3e:51:b6:9e:25:0a:d0:42:97:
83:c7:b7:3e:24:f1:fe:ae:df:a2:8b:1a:4f:4f:cd:b5:a6:52:
98:97:5d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 14:54:52 2025 by rpki-client