Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
File: NDOuHGBnLHWRqPl9aPefsqXujac.mft (raw, json)
Hash identifier: nsvCaOntoTdA04tswfGokrRzDxcIaGlf+phKHQm8JyU=
Subject key identifier: 21:92:15:BF:0D:10:CB:C4:CB:F1:95:E0:04:FF:BD:E6:AD:F6:47:DE
Authority key identifier: 34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
Certificate issuer: /CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Certificate serial: 019A21771870D18202C1C33F2D43A5838EE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
Manifest number: 1707
Signing time: Sun 26 Oct 2025 17:00:44 +0000
Manifest this update: Sun 26 Oct 2025 17:00:44 +0000
Manifest next update: Mon 27 Oct 2025 17:00:44 +0000
Files and hashes: 1: 50YGB-iroCpOpfGPSSu1Hpntzf4.roa (hash: 5lvnT6co7VzA/8N8iu7cBVjZRHM9ciTul33FqxkRdLg=)
2: 6JSS-KrBs6Yqw6gX0_excaV8mik.roa (hash: DX4Jt/llE5ZgoLSzlo+jbWwMMSWiYxeZw76o/uT/uPY=)
3: JcWTldbQOIZGPvSNpxUs4o4GK0w.roa (hash: Dx0/U8f+E3+2gBwNiiT/bEtL46Po4YuFRMtF5c7r41s=)
4: NDOuHGBnLHWRqPl9aPefsqXujac.crl (hash: IpMr9YdwO+sJtHXlzO8tLZPJ+yrI1t6Sjei+FHYcl6I=)
5: lueOGsmRqtrrI8WrcoKHoZ1cytA.roa (hash: qxTTmNr1wg9Q8H+R7DTVE3uMIjhi2C5reWu9yD0lXnA=)
6: rDXQIV_fU3zuPiVY7wVNU5XfnEY.roa (hash: 28GznyJvIwudik/8fUuc6bNx01Y6R3bFn9/NBv6jU90=)
7: yIXDpYWYaCwEFGgii0w8mAe6aKE.roa (hash: kpPsmD1/gHbiuZR5vWf8YWncSE2HiZ9uJEAXpqQD68g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 17:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:77:18:70:d1:82:02:c1:c3:3f:2d:43:a5:83:8e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Validity
Not Before: Oct 26 17:00:44 2025 GMT
Not After : Oct 27 17:00:44 2025 GMT
Subject: CN=219215bf0d10cbc4cbf195e004ffbde6adf647de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:18:a5:88:89:38:2d:a4:6d:21:47:4a:ab:d1:
b7:02:61:58:97:fb:b4:00:d3:76:54:70:80:6c:0b:
e0:b9:67:ef:6d:57:3a:1e:f0:df:ce:cb:e0:3c:59:
b2:39:cd:ae:04:4d:4b:b8:83:b6:5e:76:64:34:fc:
52:68:a8:f5:95:26:ad:f8:66:6e:44:48:fc:9b:9d:
66:92:b5:90:b3:bd:ee:9e:a6:38:76:7d:82:0a:18:
f8:a5:2e:e5:a0:07:b4:4d:2d:96:95:f4:8a:9c:24:
64:c2:f3:c1:9d:f8:35:47:c8:ec:bd:17:f1:39:9a:
5d:92:35:53:29:77:ad:94:9c:b5:ec:2e:08:f4:54:
0c:fe:ad:b6:31:82:89:c5:11:d9:b6:8c:54:21:82:
03:a9:23:05:45:4a:e8:f6:7b:2b:77:3c:ad:30:05:
91:7a:bb:26:b1:5d:86:32:22:22:cd:b5:09:8a:32:
c5:ae:64:ad:8a:bc:20:07:34:99:c6:f1:38:43:25:
da:65:b0:a9:32:9e:f5:c0:2d:ae:0d:a1:9f:2b:dc:
26:5d:76:3c:35:ee:ee:37:86:fc:c7:ae:c7:ce:84:
a3:a2:ec:d7:23:99:f6:b9:8f:14:91:96:5d:86:5d:
b8:cf:f3:65:48:8b:13:15:32:0b:e9:79:e5:54:8e:
ed:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:92:15:BF:0D:10:CB:C4:CB:F1:95:E0:04:FF:BD:E6:AD:F6:47:DE
X509v3 Authority Key Identifier:
keyid:34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ea:8e:87:b9:c0:6a:0e:75:d4:5b:ad:2c:87:a6:21:64:af:
58:f4:04:38:2f:24:90:21:ca:7c:fa:fd:d9:47:90:bd:6e:3d:
cc:f9:0a:23:22:09:1e:df:05:b9:14:44:7b:e7:2a:40:cc:ab:
d3:5d:df:ff:35:d8:7c:7a:94:aa:50:e5:c3:05:fc:2e:ab:a5:
2d:6d:44:87:75:36:c1:2a:ae:2e:2a:ee:79:a2:bd:2c:f1:1d:
9f:49:0f:db:05:a9:4e:4a:a5:f8:0d:93:e2:00:ed:fc:f1:4c:
9b:20:ab:23:8b:1d:7a:9d:71:87:dd:94:10:c0:c1:dc:5d:21:
b3:29:85:40:63:b8:b9:5f:04:2f:a0:14:3d:e5:7b:19:5c:d0:
cd:97:b5:50:86:36:64:31:3b:68:83:d7:76:f6:86:09:f9:17:
01:ba:e5:6f:2d:6e:af:06:73:7a:be:04:93:f4:44:cb:7d:47:
1b:f5:ce:77:fb:e9:74:22:95:ac:20:6d:0a:cc:82:c5:98:f6:
c5:7f:ba:13:b4:54:24:1b:fc:49:0d:8a:82:ba:e3:20:bb:07:
6f:6e:7b:10:95:78:e1:bc:8c:f4:0b:55:dd:41:0c:1c:04:97:
df:68:97:6d:45:c7:5b:85:b0:45:59:8a:99:e0:83:d8:0b:be:
e8:48:a2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:43:06 2025 by rpki-client