Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft
File: NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft (raw, json)
Hash identifier: Cbxc7dVgJYj+dQAlmCT71sX35uLjIVm1ssWJDWPc+v4=
Subject key identifier: DA:FC:BD:7B:D8:C4:CF:F5:C9:FA:B3:AF:CB:C4:68:95:94:C0:AF:B5
Authority key identifier: 35:D2:92:9F:16:52:F9:58:81:2D:09:9A:23:3F:33:AD:34:45:BB:FB
Certificate issuer: /CN=35d2929f1652f958812d099a233f33ad3445bbfb
Certificate serial: 019A72258FA013FB15C639A6401C79BCD5A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft
Manifest number: 16DE
Signing time: Tue 11 Nov 2025 09:00:55 +0000
Manifest this update: Tue 11 Nov 2025 09:00:55 +0000
Manifest next update: Wed 12 Nov 2025 09:00:55 +0000
Files and hashes: 1: NdKSnxZS-ViBLQmaIz8zrTRFu_s.crl (hash: bPcprDKjCLlyerTp1DdVQblpQPTZojs7zfkARVjAJbE=)
2: RvuQkZ_J-wvlyDc9DwQMRfdbRuc.roa (hash: ZwW8RhsC1c6THaCJDOUF+Lquzo4U71ipuOUtISL9Y48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:8f:a0:13:fb:15:c6:39:a6:40:1c:79:bc:d5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d2929f1652f958812d099a233f33ad3445bbfb
Validity
Not Before: Nov 11 09:00:55 2025 GMT
Not After : Nov 12 09:00:55 2025 GMT
Subject: CN=dafcbd7bd8c4cff5c9fab3afcbc4689594c0afb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:91:ba:eb:8a:60:c2:07:40:71:1d:77:e1:a2:
ca:b4:e7:08:de:6b:4f:96:72:48:63:78:5c:3a:b3:
d2:c3:d7:c0:3c:66:9a:9d:ae:44:f1:1a:d0:09:12:
0c:fe:25:7f:af:05:54:0d:85:4d:2a:30:87:34:01:
47:e1:44:5a:f5:5c:15:b2:75:76:88:57:a2:af:5d:
48:08:dd:4a:2a:97:37:b0:85:5d:f0:eb:19:a2:92:
02:e7:9d:64:7f:3f:65:26:9b:74:92:f7:f9:9d:b2:
bf:5f:fa:f5:2a:2e:af:1b:31:4b:83:a8:1e:49:3f:
e9:a6:18:36:43:2b:e9:34:29:9f:69:b3:33:58:ac:
73:da:50:c3:44:26:6f:6c:f2:98:f1:e1:ed:6c:ee:
07:c8:2a:f5:c3:52:3e:fc:31:9d:8f:44:e0:67:c2:
d5:77:02:a7:d4:1f:5f:4a:18:d6:12:6f:65:3c:59:
cf:8b:0a:f0:17:00:d4:aa:4c:cc:8b:4f:87:20:4a:
bc:ac:f2:64:5c:dd:80:27:33:13:88:71:65:82:ec:
72:a5:6a:b2:8e:02:3e:63:ff:2e:a0:28:dd:4d:2b:
69:c5:11:f8:97:1f:9f:0a:51:b4:b3:94:69:e5:79:
9d:d0:e7:db:b8:88:71:07:b1:27:2a:51:db:40:36:
9c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:FC:BD:7B:D8:C4:CF:F5:C9:FA:B3:AF:CB:C4:68:95:94:C0:AF:B5
X509v3 Authority Key Identifier:
keyid:35:D2:92:9F:16:52:F9:58:81:2D:09:9A:23:3F:33:AD:34:45:BB:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:3f:ff:dd:bc:b7:fc:e0:3b:4b:28:48:86:0f:88:91:82:7d:
1d:4f:8c:ee:24:79:9b:ee:ec:da:c6:d3:82:b3:2e:ae:62:e5:
fe:8b:72:24:5f:68:46:26:bc:21:61:57:36:93:ad:d2:d4:ff:
a8:5f:46:14:db:bd:a9:09:cf:54:76:67:23:d1:cd:9b:12:43:
98:21:43:3c:df:50:38:7b:29:a2:46:2a:af:1d:3a:91:f6:f3:
ef:27:06:84:d7:20:72:6b:f8:ee:ac:c7:d9:8f:2b:5d:aa:2b:
67:c1:b4:06:4b:ca:01:87:8e:01:e4:79:7d:89:e0:22:eb:21:
8d:76:93:dc:e6:b5:9f:a7:fc:7f:f4:1e:1d:df:92:3d:14:4f:
cd:40:9f:f4:03:2b:f0:d6:c4:29:d2:7e:1b:52:fc:80:6e:98:
9e:b4:81:f8:49:e3:e2:52:e1:b0:2b:1f:12:c5:08:9d:b9:d1:
13:e5:ce:85:95:aa:ea:70:fa:20:8b:92:3b:ea:9b:c3:4a:93:
1a:ec:0f:29:df:5b:60:6d:9f:f3:21:ca:8e:57:a6:60:fa:0e:
0e:89:5e:71:e7:a1:e7:37:a0:77:93:01:d4:30:14:d5:82:2d:
66:0d:af:cb:a5:54:e0:70:cf:92:a1:60:5d:b0:ce:40:8d:56:
a9:e1:0c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:09 2025 by rpki-client