Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
File: NDOuHGBnLHWRqPl9aPefsqXujac.mft (raw, json)
Hash identifier: i2B2UQ98X/3G/dXwIJUlcdowMLtYba0eZ04avqD/9xE=
Subject key identifier: D2:8D:3F:68:52:5B:6A:E0:C9:AF:6F:5D:46:6D:D9:7C:D4:28:75:4A
Authority key identifier: 34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
Certificate issuer: /CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Certificate serial: 01992C34E8F3CA200C37647938078EAF266F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
Manifest number: 1688
Signing time: Tue 09 Sep 2025 02:01:28 +0000
Manifest this update: Tue 09 Sep 2025 02:01:28 +0000
Manifest next update: Wed 10 Sep 2025 02:01:28 +0000
Files and hashes: 1: 50YGB-iroCpOpfGPSSu1Hpntzf4.roa (hash: 5lvnT6co7VzA/8N8iu7cBVjZRHM9ciTul33FqxkRdLg=)
2: 6JSS-KrBs6Yqw6gX0_excaV8mik.roa (hash: DX4Jt/llE5ZgoLSzlo+jbWwMMSWiYxeZw76o/uT/uPY=)
3: JcWTldbQOIZGPvSNpxUs4o4GK0w.roa (hash: Dx0/U8f+E3+2gBwNiiT/bEtL46Po4YuFRMtF5c7r41s=)
4: NDOuHGBnLHWRqPl9aPefsqXujac.crl (hash: 8wG5BpK8sGDfwtjsc9ecSkKYF1PtQN4QCkCvxIf9w0M=)
5: lueOGsmRqtrrI8WrcoKHoZ1cytA.roa (hash: qxTTmNr1wg9Q8H+R7DTVE3uMIjhi2C5reWu9yD0lXnA=)
6: rDXQIV_fU3zuPiVY7wVNU5XfnEY.roa (hash: 28GznyJvIwudik/8fUuc6bNx01Y6R3bFn9/NBv6jU90=)
7: yIXDpYWYaCwEFGgii0w8mAe6aKE.roa (hash: kpPsmD1/gHbiuZR5vWf8YWncSE2HiZ9uJEAXpqQD68g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:34:e8:f3:ca:20:0c:37:64:79:38:07:8e:af:26:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Validity
Not Before: Sep 9 02:01:28 2025 GMT
Not After : Sep 10 02:01:28 2025 GMT
Subject: CN=d28d3f68525b6ae0c9af6f5d466dd97cd428754a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5b:e8:3c:ee:ae:ed:96:d6:e9:8e:80:8f:ea:
5a:92:99:4a:ae:db:89:b3:dd:0c:88:72:9f:2a:36:
f8:c5:c9:ed:28:9d:e8:f6:57:a0:c5:3d:ca:57:82:
4d:ff:66:7e:0f:f6:cd:41:60:81:59:26:4b:ee:48:
7b:3e:ba:a8:ec:12:8b:fc:58:5d:13:67:87:01:eb:
73:dc:da:90:f7:5e:49:c1:87:7a:6b:11:c9:3c:33:
b0:20:7d:c9:6e:2c:05:67:ff:96:55:9e:5d:ca:6c:
0a:2c:e7:b3:18:a4:bf:b7:29:5a:45:d2:46:e7:1f:
9e:f7:08:74:15:f5:c8:1e:17:44:fd:a1:76:30:02:
97:0c:d2:98:e0:d2:a3:82:14:c6:39:2e:0f:2b:19:
5c:6a:52:f7:cb:e7:c8:d1:7d:05:b8:f7:ec:21:ca:
ab:9e:b2:44:fd:e7:d1:b4:5f:e4:0c:c5:fd:ed:c6:
68:4c:ca:34:47:d5:1b:75:8a:e3:9d:c7:34:61:43:
f6:60:77:72:57:d6:f6:b0:1f:54:4c:7f:23:f1:0c:
6b:1c:65:fd:ae:48:00:f2:93:94:86:22:86:68:4e:
a5:cd:db:84:4a:c3:ed:07:15:b3:cf:54:25:d3:5f:
56:a7:49:1a:a4:36:9b:42:41:2b:fd:08:aa:f6:8b:
49:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:8D:3F:68:52:5B:6A:E0:C9:AF:6F:5D:46:6D:D9:7C:D4:28:75:4A
X509v3 Authority Key Identifier:
keyid:34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:39:91:d9:d4:ba:51:a6:f0:b0:e5:67:07:16:33:7c:56:1d:
e7:33:d9:b5:a4:85:70:2b:95:d0:42:6e:26:08:48:fd:5d:00:
57:79:2c:16:13:f1:89:db:55:01:75:bc:ae:db:10:b2:a2:c0:
ff:ed:30:c6:4b:e5:17:bb:7c:41:67:b8:49:27:48:a2:da:a2:
22:4b:e1:b8:fd:09:21:6b:57:3e:05:f1:19:6c:d3:e0:62:88:
ad:0c:29:f1:4c:8c:b0:a3:8a:9f:52:9e:b6:cb:7d:92:31:fb:
49:8e:38:0f:93:1d:5f:fa:f3:cb:f9:f0:6d:d5:f4:fe:fc:cb:
f4:e0:95:10:8b:b7:08:f1:c0:ee:02:91:d1:54:61:f5:47:5a:
52:56:60:f6:24:02:7b:f8:17:c2:61:d5:85:c9:77:26:3d:82:
10:29:6f:79:4d:0f:c8:3b:6f:ce:a2:86:25:c8:10:dc:ce:a4:
9b:22:68:29:16:eb:2b:31:db:1d:8a:ab:94:0c:a9:d9:ee:9f:
29:1e:5e:c1:6e:a5:0a:f4:07:12:a2:63:44:cb:37:61:1b:e2:
93:98:99:1f:ce:d9:9b:c9:63:82:eb:da:4e:8e:b5:a6:df:a8:
43:f5:a5:af:0d:1f:a6:0b:1c:bf:1d:68:33:7e:42:3c:92:42:
d3:1a:26:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:00:48 2025 by rpki-client