Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
File: NdhRwRSj93nqgCV7HuGCas2uSk4.mft (raw, json)
Hash identifier: op0piQdSLrfTVNSjud12vwnZ5s2GkivFYo8sCYG5hiM=
Subject key identifier: D0:38:82:9D:5E:35:12:C1:9F:23:4C:BC:65:6C:BC:1D:D0:21:E9:54
Authority key identifier: 35:D8:51:C1:14:A3:F7:79:EA:80:25:7B:1E:E1:82:6A:CD:AE:4A:4E
Certificate issuer: /CN=35d851c114a3f779ea80257b1ee1826acdae4a4e
Certificate serial: 019921E77A07610CD57BA6C8BEA431347945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 02:00:42 +0000
Manifest this update: Sun 07 Sep 2025 02:00:42 +0000
Manifest next update: Mon 08 Sep 2025 02:00:42 +0000
Files and hashes: 1: NdhRwRSj93nqgCV7HuGCas2uSk4.crl (hash: WwZU+McUzA8VCA4rL7hkoj6UyaOZxC+48ZuKWh3FOhg=)
2: QIqKLnFZSvkIdztpTOrghmndfqs.roa (hash: wHBtvNsb06U7COg9JhFFEVNmIo0CSx+CQSOErCnUsO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:7a:07:61:0c:d5:7b:a6:c8:be:a4:31:34:79:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d851c114a3f779ea80257b1ee1826acdae4a4e
Validity
Not Before: Sep 7 02:00:42 2025 GMT
Not After : Sep 8 02:00:42 2025 GMT
Subject: CN=d038829d5e3512c19f234cbc656cbc1dd021e954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:72:87:89:97:07:15:ef:fe:59:e0:68:0a:67:
57:0a:52:4c:ca:19:e5:f8:00:6c:73:9f:a3:c8:aa:
79:b6:30:73:2b:97:d0:49:16:4c:21:c7:64:e0:c2:
c1:09:1b:3c:84:18:d5:4e:b8:e2:6c:1b:f9:31:a7:
38:fa:ae:28:51:72:4b:a6:00:a2:f5:8b:d3:fb:5b:
cb:ae:ae:bf:42:08:7a:b4:99:b1:7c:c1:2a:a8:60:
fc:85:74:f5:c8:a9:bf:ed:be:81:c0:80:a0:56:d9:
02:ff:37:97:6b:b3:b2:c7:36:34:d7:ec:12:3b:5e:
05:7f:43:45:ce:c9:dc:71:90:62:f0:50:30:eb:82:
60:d6:fc:39:26:c4:ed:79:44:da:70:38:c3:cd:a5:
d5:49:0b:d2:e3:92:a0:0b:bb:bf:07:5c:50:46:c4:
aa:50:93:d3:c2:92:bc:89:45:eb:07:9a:a8:3e:27:
4a:4b:b4:a5:30:10:ce:7f:94:51:bd:49:e2:50:5f:
f7:2f:fd:31:53:12:23:6a:da:64:2a:6f:0a:04:c9:
ec:76:f4:28:8c:38:24:42:a1:25:5e:c6:a7:b6:22:
8b:9e:cf:9b:cc:50:82:85:e1:c8:f2:a1:17:1d:82:
19:3e:ed:77:ac:aa:87:df:07:ed:16:46:38:35:29:
a6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:38:82:9D:5E:35:12:C1:9F:23:4C:BC:65:6C:BC:1D:D0:21:E9:54
X509v3 Authority Key Identifier:
keyid:35:D8:51:C1:14:A3:F7:79:EA:80:25:7B:1E:E1:82:6A:CD:AE:4A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a4:2b:40:f5:37:a6:f5:80:18:61:41:04:82:8c:b8:ad:a2:
a9:75:9d:ce:fe:5a:8a:78:f7:ec:31:17:bf:1c:58:9f:84:e5:
de:d0:3e:37:ff:c7:81:be:d2:d3:af:fe:b1:55:1d:96:bf:92:
98:21:f4:5d:e7:3d:c6:66:31:9c:38:f0:e0:f4:05:3e:72:83:
15:4b:c6:66:9a:4d:28:70:c1:f2:e2:4c:8e:1d:f7:14:79:cc:
5b:6e:d6:09:11:8e:af:e6:a3:09:6d:84:4f:4f:3a:a7:16:b6:
5b:35:10:86:c4:a6:8e:60:91:96:a7:3f:8f:36:3e:62:eb:ea:
1e:98:95:ef:73:f0:86:08:67:7f:e2:c5:b2:61:72:be:14:cd:
b9:83:a0:1f:44:56:4a:43:6f:35:ea:90:a2:e0:17:c4:a0:45:
97:47:70:f1:55:8c:08:b9:74:a3:b6:94:c5:49:9f:69:9c:db:
74:87:5a:cf:71:0b:09:a8:63:e9:0e:5d:96:ec:ac:39:ce:4e:
c5:1f:40:c1:58:af:b2:52:3d:b0:ee:bf:92:8b:9b:40:47:44:
ac:88:ca:2e:f9:3b:a5:55:9c:e8:1a:df:4e:28:d3:7d:05:ca:
85:f8:35:24:b4:2f:b8:86:fb:c7:c4:0f:d4:72:8e:31:a0:23:
f4:63:b2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:23:11 2025 by rpki-client