Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft
File: NdHNq6MVWd4SqxnXnxri0hjDefc.mft (raw, json)
Hash identifier: V1sr4odEtwJt817IFaWhlTNl0hReW0RG+GcDvZ5+euU=
Subject key identifier: 9E:5C:B4:23:D4:61:13:38:06:76:C0:62:16:10:D5:E0:C5:8B:B9:F5
Authority key identifier: 35:D1:CD:AB:A3:15:59:DE:12:AB:19:D7:9F:1A:E2:D2:18:C3:79:F7
Certificate issuer: /CN=35d1cdaba31559de12ab19d79f1ae2d218c379f7
Certificate serial: 019A72265A99AA05AC05F96C14BF3D253D2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdHNq6MVWd4SqxnXnxri0hjDefc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 09:01:47 +0000
Manifest this update: Tue 11 Nov 2025 09:01:47 +0000
Manifest next update: Wed 12 Nov 2025 09:01:47 +0000
Files and hashes: 1: HI5bhroHTAd2JOvu5YSZV3u06FM.roa (hash: Sccuti/fJ5690EYg+UXdl+hwT8LmoHMXCPxrbV1XvfA=)
2: NdHNq6MVWd4SqxnXnxri0hjDefc.crl (hash: r34cp3tHjZlnp+U9dBfwiwCsvChhfiODbQUTxzqdtpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdHNq6MVWd4SqxnXnxri0hjDefc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:5a:99:aa:05:ac:05:f9:6c:14:bf:3d:25:3d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d1cdaba31559de12ab19d79f1ae2d218c379f7
Validity
Not Before: Nov 11 09:01:47 2025 GMT
Not After : Nov 12 09:01:47 2025 GMT
Subject: CN=9e5cb423d46113380676c0621610d5e0c58bb9f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:58:df:a3:90:24:43:43:d7:eb:d7:1f:69:6a:
20:fa:46:f5:6a:f8:16:94:51:64:95:f8:ef:b6:a9:
20:11:8a:b0:b4:ce:07:7c:27:47:1d:72:c4:4a:f8:
f5:61:89:84:08:8b:a9:6b:19:d3:f0:e8:b9:bf:31:
0e:f0:ad:dc:28:e0:df:6a:3a:c4:11:2b:e0:a4:7c:
c1:a0:da:bf:a8:70:b0:1e:55:43:4b:75:d2:b2:ca:
0b:93:bb:b7:aa:84:c1:d0:4f:9b:59:4b:85:e1:9a:
6b:da:4e:80:c4:86:f7:e3:87:e3:83:71:39:0b:a6:
a9:7e:b9:98:86:36:aa:4f:82:d6:d9:e9:35:91:5f:
bb:e0:c2:88:44:17:87:09:7b:55:17:1f:cd:ac:ba:
13:c8:93:5f:53:81:37:cf:2f:b7:04:a5:99:4a:f5:
88:47:71:49:0d:d7:ab:ef:79:68:57:32:9a:34:3c:
2d:04:5f:3a:6d:90:78:4d:22:01:24:99:0a:cb:79:
ab:c6:3b:03:69:7e:13:60:26:df:af:c1:6a:db:82:
41:39:e3:ec:44:fc:82:c0:65:90:8e:4c:5a:fb:60:
cd:52:6f:5a:64:ae:a5:50:d8:bc:a8:70:4a:ae:29:
61:3c:a2:33:29:67:c6:29:63:f9:15:b8:d0:9b:7e:
0c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5C:B4:23:D4:61:13:38:06:76:C0:62:16:10:D5:E0:C5:8B:B9:F5
X509v3 Authority Key Identifier:
keyid:35:D1:CD:AB:A3:15:59:DE:12:AB:19:D7:9F:1A:E2:D2:18:C3:79:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdHNq6MVWd4SqxnXnxri0hjDefc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:3a:56:d9:f9:0c:b7:cc:ab:15:09:30:35:26:3d:12:3c:a6:
e4:1b:e0:4a:b6:fe:85:4a:0e:8b:3e:fe:7e:28:64:a3:cf:a3:
f9:d1:67:7f:39:39:9c:1e:d7:59:34:9a:85:7b:a8:2a:38:25:
74:1d:72:9d:a2:b7:78:4a:ce:39:3c:03:89:13:b5:3a:15:df:
93:a7:73:07:dd:7d:79:c3:09:69:03:ca:7b:bc:24:5a:9e:99:
8b:70:bd:90:55:80:e9:44:98:3f:18:44:04:d3:7f:b3:9a:9a:
1c:9f:bd:e5:5e:f7:a1:90:44:6a:47:9e:50:a8:49:2f:20:d2:
a0:ba:57:c6:b5:66:c6:e2:9b:ae:0a:1b:31:5c:28:b0:12:6b:
3b:d5:f2:3a:09:78:56:17:84:cc:24:b9:2f:ef:2b:c8:3e:60:
51:cb:24:25:50:47:65:4f:cf:58:1d:de:05:6f:03:ff:dc:52:
1b:ae:33:c2:99:ae:fd:45:29:db:b9:1d:ab:29:78:94:cc:93:
71:d6:a8:f5:4c:5f:4b:a0:b3:c3:76:bc:ff:5f:6d:72:e8:6b:
8d:9d:35:da:98:7b:c6:03:3d:46:86:b5:6d:81:c1:f2:d1:af:
22:bf:75:3a:0e:02:a6:f0:2b:92:6c:22:a2:59:1c:05:5f:db:
30:7a:e9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:25:07 2025 by rpki-client