Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
File: NdhRwRSj93nqgCV7HuGCas2uSk4.mft (raw, json)
Hash identifier: X8S3792nl2ZukYQIIjPP3aoY2yZrmfq7qUCesq1LIdI=
Subject key identifier: 83:DF:C6:53:D9:90:A6:F3:B1:6A:9D:E1:92:03:9D:09:3C:13:B4:0A
Authority key identifier: 35:D8:51:C1:14:A3:F7:79:EA:80:25:7B:1E:E1:82:6A:CD:AE:4A:4E
Certificate issuer: /CN=35d851c114a3f779ea80257b1ee1826acdae4a4e
Certificate serial: 01976B861B686E8DBEF6BCDC48B471EBDAD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 23:00:40 +0000
Manifest this update: Fri 13 Jun 2025 23:00:40 +0000
Manifest next update: Sat 14 Jun 2025 23:00:40 +0000
Files and hashes: 1: NdhRwRSj93nqgCV7HuGCas2uSk4.crl (hash: mmokENF07yqannVhSygcNeP2+C84D3jREfRDxoadPiw=)
2: QIqKLnFZSvkIdztpTOrghmndfqs.roa (hash: wHBtvNsb06U7COg9JhFFEVNmIo0CSx+CQSOErCnUsO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 18:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:86:1b:68:6e:8d:be:f6:bc:dc:48:b4:71:eb:da:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d851c114a3f779ea80257b1ee1826acdae4a4e
Validity
Not Before: Jun 13 23:00:40 2025 GMT
Not After : Jun 14 23:00:40 2025 GMT
Subject: CN=83dfc653d990a6f3b16a9de192039d093c13b40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d8:e2:f1:90:d9:6c:8d:0d:13:52:47:cf:58:
2f:e9:df:93:93:e7:d3:48:41:1b:14:29:ef:58:da:
e4:26:af:64:7a:ee:ae:6f:27:df:fe:bc:09:bc:99:
d6:73:01:d9:ca:08:96:9d:82:6b:ba:b4:23:81:e7:
c4:5c:ec:97:0b:73:d6:88:2f:64:98:d7:b7:82:4d:
bb:00:94:9e:12:f8:fe:bc:19:66:84:0b:2d:03:f4:
4d:a2:d3:53:1b:c1:0c:1d:3c:db:5e:b2:dc:83:43:
40:f5:4a:86:b7:00:e4:64:5d:3f:cd:23:f3:63:58:
12:ce:61:35:5a:dd:4d:e6:4e:47:9d:6e:a7:01:ab:
57:49:0e:f2:76:b4:5c:5e:6f:8e:99:93:39:14:f5:
21:be:1f:96:d2:9b:62:10:42:0d:0d:e0:42:ee:fc:
71:bf:92:c5:c9:13:e9:90:79:9c:57:16:9f:15:7a:
09:2c:d5:84:32:44:00:0a:3d:3f:7f:fa:98:65:c1:
34:cc:06:7c:5f:81:8e:a1:87:0c:bc:ae:8e:37:e3:
15:7b:b2:98:a0:2e:a7:90:4c:f6:08:c8:9a:9d:7b:
ac:da:ac:56:28:f1:b7:58:ea:94:49:1f:a2:b1:a7:
02:f6:b7:bd:5b:b4:4a:21:34:49:24:a2:c9:7b:87:
f4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DF:C6:53:D9:90:A6:F3:B1:6A:9D:E1:92:03:9D:09:3C:13:B4:0A
X509v3 Authority Key Identifier:
keyid:35:D8:51:C1:14:A3:F7:79:EA:80:25:7B:1E:E1:82:6A:CD:AE:4A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:fc:fe:e2:e0:54:5b:5a:b3:6f:9d:73:04:d6:4f:64:f4:56:
0b:06:1c:fc:70:be:29:a8:cd:c3:d0:c2:e4:3f:64:4b:d2:39:
b9:ce:63:0a:97:f5:44:37:a5:30:87:d9:e1:d2:79:ee:2a:32:
6f:b2:9a:eb:ab:42:19:9c:0a:6f:dd:85:b0:b9:0a:47:cd:23:
2f:d4:8f:c2:4f:7f:c0:ec:22:f7:54:0c:39:5c:0b:ed:c8:fe:
69:65:e7:c4:01:e4:bc:16:fe:e3:7f:45:b1:00:9f:d2:e9:aa:
95:91:cc:e2:8c:bb:cb:ef:88:ed:ed:35:1d:b6:79:81:ef:d6:
53:7f:26:22:ae:29:3c:50:c1:e1:1f:f7:dc:69:b5:09:6b:36:
36:6c:26:db:5f:c2:d2:f8:d2:86:1e:6d:87:d5:11:ec:1c:2a:
fd:98:83:07:b8:7a:53:4f:39:80:0b:a0:78:91:40:ab:fd:d6:
f5:84:cc:29:d7:86:54:c4:36:91:9c:b9:8a:ec:eb:b6:57:09:
9f:76:cf:a6:5b:be:f4:9f:29:da:d0:45:7e:d5:99:7c:91:3a:
f7:b3:d3:7e:a9:e4:38:0e:1f:e8:4e:9f:96:ce:ad:ef:2a:3f:
e0:5a:d1:65:22:29:c7:6f:0d:44:32:9f:e0:69:d0:07:c5:ce:
c2:42:5e:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdrhhtobo2+9rzcSLRx69rRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZDg1MWMxMTRhM2Y3NzllYTgwMjU3YjFlZTE4MjZhY2Rh
ZTRhNGUwHhcNMjUwNjEzMjMwMDQwWhcNMjUwNjE0MjMwMDQwWjAzMTEwLwYDVQQD
Eyg4M2RmYzY1M2Q5OTBhNmYzYjE2YTlkZTE5MjAzOWQwOTNjMTNiNDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dji8ZDZbI0NE1JHz1gv6d+Tk+fT
SEEbFCnvWNrkJq9keu6ubyff/rwJvJnWcwHZygiWnYJrurQjgefEXOyXC3PWiC9k
mNe3gk27AJSeEvj+vBlmhAstA/RNotNTG8EMHTzbXrLcg0NA9UqGtwDkZF0/zSPz
Y1gSzmE1Wt1N5k5HnW6nAatXSQ7ydrRcXm+OmZM5FPUhvh+W0ptiEEINDeBC7vxx
v5LFyRPpkHmcVxafFXoJLNWEMkQACj0/f/qYZcE0zAZ8X4GOoYcMvK6ON+MVe7KY
oC6nkEz2CMianXus2qxWKPG3WOqUSR+isacC9re9W7RKITRJJKLJe4f0HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPfxlPZkKbzsWqd4ZIDnQk8E7QKMB8GA1UdIwQY
MBaAFDXYUcEUo/d56oAlex7hgmrNrkpOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmRoUndSU2o5M25xZ0NWN0h1R0NhczJ1U2s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9mZmZlZTEtYmQ0Ni00NTIzLTllY2Et
NzA1NTYzMTM3ZDdhLzEvTmRoUndSU2o5M25xZ0NWN0h1R0NhczJ1U2s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9mZmZlZTEtYmQ0Ni00NTIzLTllY2EtNzA1NTYzMTM3ZDdh
LzEvTmRoUndSU2o5M25xZ0NWN0h1R0NhczJ1U2s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGvz+4uBU
W1qzb51zBNZPZPRWCwYc/HC+KajNw9DC5D9kS9I5uc5jCpf1RDelMIfZ4dJ57ioy
b7Ka66tCGZwKb92FsLkKR80jL9SPwk9/wOwi91QMOVwL7cj+aWXnxAHkvBb+439F
sQCf0umqlZHM4oy7y++I7e01HbZ5ge/WU38mIq4pPFDB4R/33Gm1CWs2Nmwm21/C
0vjShh5th9UR7Bwq/ZiDB7h6U085gAugeJFAq/3W9YTMKdeGVMQ2kZy5iuzrtlcJ
n3bPplu+9J8p2tBFftWZfJE697PTfqnkOA4f6E6fls6t7yo/4FrRZSIpx28NRDKf
4GnQB8XOwkJejg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 04:08:00 2025 by rpki-client