Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
File: Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft (raw, json)
Hash identifier: GRb7D6QHMBUxtWv89c6HTXeSoEt1lE58uxu6cVuL/xQ=
Subject key identifier: 29:74:12:EC:5C:D7:78:90:1F:54:05:04:CE:A2:5F:BB:9C:51:02:4E
Authority key identifier: 35:DF:B4:A5:BC:5B:75:BD:94:AA:44:7B:A3:3F:55:57:19:71:CC:F6
Certificate issuer: /CN=35dfb4a5bc5b75bd94aa447ba33f55571971ccf6
Certificate serial: 01985DC8786812571ACF9F8078D571DBE7BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
Manifest number: 0459
Signing time: Thu 31 Jul 2025 00:01:15 +0000
Manifest this update: Thu 31 Jul 2025 00:01:15 +0000
Manifest next update: Fri 01 Aug 2025 00:01:15 +0000
Files and hashes: 1: Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl (hash: 5F5ci46pXc08mdraI92x6hcAbRPttbQIsKXM6HlXAq8=)
2: mlswz8Ncs32ae7C2It5n-o0yiHo.roa (hash: S5ligNAG6F0uIgpXYHQu/GqcrGyX5LZG4CQQfjCfuRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 Aug 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5d:c8:78:68:12:57:1a:cf:9f:80:78:d5:71:db:e7:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35dfb4a5bc5b75bd94aa447ba33f55571971ccf6
Validity
Not Before: Jul 31 00:01:15 2025 GMT
Not After : Aug 1 00:01:15 2025 GMT
Subject: CN=297412ec5cd778901f540504cea25fbb9c51024e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d7:b5:93:8b:e9:30:91:ed:88:9a:b2:c6:72:
cf:82:77:38:26:a3:31:30:87:31:35:ca:5a:4f:3d:
48:9c:23:f4:df:71:27:43:25:24:63:c6:89:c7:92:
f2:2c:ab:84:8c:e4:a2:b8:f6:6f:e5:cb:22:eb:64:
75:bb:d7:0a:d2:3d:f8:50:3e:1a:c4:be:ec:79:13:
dd:50:70:40:8d:a9:ee:46:32:60:0c:ee:13:a9:dc:
7b:70:db:ab:5f:2f:da:07:6e:0e:a2:15:8d:02:ec:
fe:37:c4:44:52:2e:04:5b:88:04:39:f1:2a:9d:4f:
c9:12:91:ad:41:15:fc:5d:a4:62:64:0d:c9:0b:ce:
82:16:6f:d9:1b:b1:5f:bf:1c:5d:44:47:d0:ec:13:
d2:7e:b3:b6:59:3d:6f:41:dd:47:2b:b3:b6:b9:b3:
8f:2a:27:f5:cc:59:7d:e4:b8:64:bd:9f:a3:ea:7b:
49:5d:dd:0a:27:cf:b5:0a:b3:45:be:d4:58:a6:1d:
49:6e:c0:ef:96:47:a5:aa:bc:19:4f:ea:d1:86:5e:
3a:c6:e4:5e:ec:04:b0:fc:b1:45:6c:ce:01:63:10:
2f:09:57:cf:c9:e6:bb:14:f5:59:f9:94:a8:9c:7e:
4f:8d:95:c0:e9:d7:69:86:f9:5b:a0:ad:95:0d:65:
b7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:74:12:EC:5C:D7:78:90:1F:54:05:04:CE:A2:5F:BB:9C:51:02:4E
X509v3 Authority Key Identifier:
keyid:35:DF:B4:A5:BC:5B:75:BD:94:AA:44:7B:A3:3F:55:57:19:71:CC:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d3:8d:e5:8d:ef:e0:b9:c4:fe:21:fd:dd:41:1b:f5:64:47:
93:94:7d:e2:c4:22:48:79:7d:f7:b7:e6:4b:a2:16:20:70:9e:
06:3f:fe:08:a7:24:0c:60:a9:ca:f3:c0:e5:92:75:d9:fb:52:
3c:c0:52:ca:f3:31:13:2f:49:b9:4c:f0:30:60:57:a1:e8:4c:
d1:f5:a3:8a:db:07:45:59:54:13:91:96:a6:4a:1d:97:2f:d3:
16:08:00:a0:63:c3:88:dd:ec:18:e6:d6:df:41:69:1e:93:cb:
90:b2:2b:bf:51:0c:39:4f:53:0a:c8:25:20:a4:cf:39:71:56:
69:5b:e0:9e:e5:2a:4e:4e:5f:b3:76:ea:26:7e:69:47:c8:db:
b3:d9:23:40:c2:3d:79:23:b8:aa:10:6e:f7:b4:c6:0d:7b:78:
0f:af:6b:16:e4:b7:ed:4a:64:b5:c2:f3:81:3f:50:e5:d0:89:
60:7b:48:be:99:b8:7e:3e:2a:ed:d0:fe:a9:73:1b:31:66:cf:
3d:af:b0:16:90:ec:d0:c4:2a:4e:4f:d5:a0:17:00:55:c2:00:
bb:ee:a3:15:93:34:1f:9c:72:96:fd:e4:22:6e:c2:e2:f0:ff:
4d:9a:ba:a2:10:e7:13:ee:87:12:49:be:1e:79:13:97:79:7c:
1a:b9:56:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 04:02:56 2025 by rpki-client