Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
File: NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft (raw, json)
Hash identifier: UrjaZG5y2t3Aom+IsYkcJZQ47TL+Wbkni8xgHKzXIb8=
Subject key identifier: 65:89:52:DE:C1:6E:EA:5C:4F:A6:E0:12:E4:21:EE:9B:F4:11:4A:88
Authority key identifier: 34:38:0C:FB:A3:4B:61:F5:DB:45:65:14:59:28:D9:E4:AD:D9:30:EB
Certificate issuer: /CN=34380cfba34b61f5db4565145928d9e4add930eb
Certificate serial: 019923A060B862A26D7C5E151500EEDABDFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
Manifest number: 0127
Signing time: Sun 07 Sep 2025 10:02:17 +0000
Manifest this update: Sun 07 Sep 2025 10:02:17 +0000
Manifest next update: Mon 08 Sep 2025 10:02:17 +0000
Files and hashes: 1: NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl (hash: b043XNhDXVdCRdsJ8HG/At1M6Ruyn8jhU15b66G7/wo=)
2: eNjKHdv8IHiSMT5DlWURZ12GtE8.roa (hash: 0PyZvOHXEJvjs+fUIrJG3NCT3v2ngertxaHruNIycnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:60:b8:62:a2:6d:7c:5e:15:15:00:ee:da:bd:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34380cfba34b61f5db4565145928d9e4add930eb
Validity
Not Before: Sep 7 10:02:17 2025 GMT
Not After : Sep 8 10:02:17 2025 GMT
Subject: CN=658952dec16eea5c4fa6e012e421ee9bf4114a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:73:67:71:9a:19:bf:a5:8b:ed:35:45:c0:1f:
de:06:93:98:18:e0:cd:c8:92:f3:ab:22:68:b3:33:
d9:cc:62:48:c1:b9:19:12:71:df:0e:f3:df:56:ab:
ae:6f:1f:db:7b:78:88:2e:1b:0d:f4:22:87:c9:43:
ad:6f:8f:8e:4c:3c:9f:b6:0d:8d:48:7a:34:b9:2a:
02:7b:31:57:d5:c3:ad:d7:64:cb:89:f7:79:f8:14:
05:bb:23:0e:88:39:3f:4e:a2:1d:ab:c0:c5:a6:bb:
58:61:70:93:06:af:a9:4d:bb:85:49:d1:40:b4:b8:
80:da:1c:88:47:2a:a7:03:b6:15:f9:60:94:3a:97:
8a:01:41:10:c0:2d:0e:f5:ac:ff:e2:7d:aa:e3:8b:
fb:6b:25:66:cb:85:e2:3f:e1:2d:a6:f7:a4:b2:cb:
49:9e:35:f2:3c:1b:cd:72:17:b2:14:a0:3f:6a:f0:
cd:ab:a5:b2:05:b1:2e:83:26:65:b8:37:17:41:68:
04:80:c6:57:a8:ea:96:13:57:06:29:88:08:b1:33:
12:86:d1:a1:65:ac:33:6f:d8:15:22:a0:bd:ee:e8:
8f:40:ba:ba:72:98:53:01:46:31:80:95:ee:82:09:
b9:ed:2f:28:70:7d:5e:d5:c8:25:69:bb:94:05:50:
95:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:89:52:DE:C1:6E:EA:5C:4F:A6:E0:12:E4:21:EE:9B:F4:11:4A:88
X509v3 Authority Key Identifier:
keyid:34:38:0C:FB:A3:4B:61:F5:DB:45:65:14:59:28:D9:E4:AD:D9:30:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:d1:06:cd:39:0f:77:b8:b4:c7:1d:48:ee:b1:a9:61:e7:47:
d0:ca:74:39:ce:1d:a4:9a:8f:c7:26:7a:4f:b8:2d:57:4e:33:
32:e0:29:9f:69:3b:5e:53:74:b1:1e:ef:96:25:82:a2:c2:26:
c3:db:d0:bb:bd:d0:04:94:c3:c9:9d:af:4b:d5:67:21:21:3c:
44:f2:fe:47:a6:ea:90:b5:33:72:92:3e:de:1a:9f:ac:68:7c:
a6:51:45:99:65:5a:3d:07:06:5b:71:cf:94:10:72:9f:7e:ab:
01:f1:9d:ce:6f:31:58:bb:60:6c:e9:e8:b0:bc:70:9e:b9:58:
00:15:50:52:2b:5f:39:f4:52:09:7f:19:8a:6a:51:f9:59:0c:
33:6c:25:37:da:d7:d8:a2:4a:58:98:8b:22:8e:62:06:88:81:
4b:2e:0f:e5:6b:cc:c9:84:0a:7e:64:9b:66:c2:ed:36:90:29:
ed:f9:ca:c6:73:3e:20:fc:54:67:17:9b:7c:a2:51:6d:7c:f4:
d0:ab:a0:54:1b:44:6e:75:43:90:bf:b1:29:b2:8f:e0:e6:18:
cd:fd:42:2b:c9:d5:94:5e:2a:d5:74:37:90:b6:4a:2f:51:55:
2c:b9:37:46:76:50:e8:c6:88:6d:25:c4:02:61:cf:9d:38:18:
be:e4:58:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:49 2025 by rpki-client