Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
File: NdhRwRSj93nqgCV7HuGCas2uSk4.mft (raw, json)
Hash identifier: 03m7tNNX/i/lOefJZMx6DscXaeog2vxAUlXq6hcx3PA=
Subject key identifier: B0:41:FD:82:EE:49:5D:B2:A4:E3:FC:90:A4:53:17:92:35:E1:E5:E9
Authority key identifier: 35:D8:51:C1:14:A3:F7:79:EA:80:25:7B:1E:E1:82:6A:CD:AE:4A:4E
Certificate issuer: /CN=35d851c114a3f779ea80257b1ee1826acdae4a4e
Certificate serial: 019A71EE729F8EC7094359A2210DB150D430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 08:00:43 +0000
Manifest this update: Tue 11 Nov 2025 08:00:43 +0000
Manifest next update: Wed 12 Nov 2025 08:00:43 +0000
Files and hashes: 1: NdhRwRSj93nqgCV7HuGCas2uSk4.crl (hash: TDm64v5h1Nu2yDKrw/gULBvgISHbWyaUVbX+SrPxanA=)
2: QIqKLnFZSvkIdztpTOrghmndfqs.roa (hash: wHBtvNsb06U7COg9JhFFEVNmIo0CSx+CQSOErCnUsO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:72:9f:8e:c7:09:43:59:a2:21:0d:b1:50:d4:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d851c114a3f779ea80257b1ee1826acdae4a4e
Validity
Not Before: Nov 11 08:00:43 2025 GMT
Not After : Nov 12 08:00:43 2025 GMT
Subject: CN=b041fd82ee495db2a4e3fc90a453179235e1e5e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:88:91:cd:e1:ad:8b:51:d2:c4:c0:f0:86:02:
a8:64:0c:3b:72:02:3a:1b:1c:47:08:43:02:8c:ca:
89:41:6f:f1:e4:10:4a:cf:4f:93:b2:da:34:97:19:
ef:7b:75:5e:55:8d:22:f4:d7:94:ba:2a:56:e2:15:
47:af:a6:b9:bd:bb:23:f9:4a:98:42:44:95:43:13:
c1:5f:7b:62:98:d8:8e:aa:24:56:95:8e:7a:57:65:
4f:26:be:dc:0c:31:e1:e3:0d:2d:46:99:a8:21:99:
fa:cd:f9:d6:14:7c:ad:88:8f:6b:59:eb:95:be:0a:
8f:f2:77:ef:31:66:73:0a:69:fd:81:6f:05:c2:ef:
a0:7c:fb:f7:b4:08:5a:fa:a8:6f:ae:50:fa:40:35:
78:1c:12:fc:76:c4:26:9b:b3:d6:b4:cf:16:46:2d:
f1:c2:29:14:17:89:4b:5c:41:b5:75:35:a5:54:3c:
52:2a:cb:f8:bb:46:b0:16:0f:74:e9:4a:55:07:11:
8a:af:95:ae:9b:26:6f:60:72:75:ff:bc:70:67:ed:
4e:f7:86:2d:d3:7d:be:be:19:ab:d4:2c:08:77:1b:
58:a7:77:e4:c4:ca:e2:22:c7:8f:10:f7:93:da:b3:
b8:ba:b8:de:0e:a2:04:cd:27:84:9a:60:a4:d5:52:
78:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:41:FD:82:EE:49:5D:B2:A4:E3:FC:90:A4:53:17:92:35:E1:E5:E9
X509v3 Authority Key Identifier:
keyid:35:D8:51:C1:14:A3:F7:79:EA:80:25:7B:1E:E1:82:6A:CD:AE:4A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:c5:e4:a2:91:50:dc:7c:27:ff:1d:fa:02:90:0a:7f:da:3b:
b5:6d:a3:3e:9f:6b:19:55:bc:bf:37:17:db:d2:0e:77:18:53:
95:fb:d1:a1:ea:2b:ca:19:2f:38:78:1f:48:ef:a7:9a:6a:d6:
36:4f:3c:fb:5b:ad:c9:e2:44:76:0f:9c:51:32:37:72:a9:32:
09:44:f4:43:6d:29:0b:3b:1b:c4:9b:8f:a3:34:f5:b9:31:ec:
dd:4a:71:6a:e7:48:e6:90:08:89:59:d7:d0:ef:19:6f:c6:05:
97:6d:91:af:b0:bb:5f:d2:91:65:4e:4c:4c:d4:d1:fd:6b:97:
60:32:88:b7:d4:7b:0e:76:77:f3:e9:ee:e8:1e:07:aa:10:b7:
e9:e7:6e:86:1a:68:d2:52:cc:b7:47:55:0e:3b:45:c8:a8:fa:
9a:92:5f:10:83:6c:dd:3b:b2:14:70:ce:d4:81:61:44:cc:2e:
ad:b3:ae:ee:f5:a6:77:4a:3f:18:95:59:50:d5:ae:69:90:2c:
f4:7c:9c:cf:a2:c9:db:47:b6:8d:c6:07:cf:00:0c:d4:55:67:
c8:7a:ff:42:35:71:ff:94:ed:53:f7:c0:a4:81:14:48:98:1e:
48:90:de:4e:e5:80:25:c6:a1:0b:b7:c1:d9:e3:74:d7:c3:50:
71:c8:d3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:57:26 2025 by rpki-client