Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
File: NdRfKsW84Vad9rKtgNFvG5L72Fw.mft (raw, json)
Hash identifier: gOMT3qbq1ymYB06/srWcvlroGZ3C7YB9t8Xas04wues=
Subject key identifier: 76:94:E1:5C:1F:FD:29:57:E6:94:56:DE:6A:5D:4A:0D:44:80:65:0C
Authority key identifier: 35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
Certificate issuer: /CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Certificate serial: 019A2FA08EC661194B0AED23395A706B6698
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
Manifest number: 16FC
Signing time: Wed 29 Oct 2025 11:00:42 +0000
Manifest this update: Wed 29 Oct 2025 11:00:42 +0000
Manifest next update: Thu 30 Oct 2025 11:00:42 +0000
Files and hashes: 1: NdRfKsW84Vad9rKtgNFvG5L72Fw.crl (hash: s4xd5xA7o/iWymWlzvAb0tJAjWmOa9cQpEe7VCFEFes=)
2: Pxn4Z0bdWmWck5jdH1FaueBsOf0.roa (hash: vg1TLVE75nnwqoL/egav334PmpcLAh17CAvdGO24png=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2f:a0:8e:c6:61:19:4b:0a:ed:23:39:5a:70:6b:66:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Validity
Not Before: Oct 29 11:00:42 2025 GMT
Not After : Oct 30 11:00:42 2025 GMT
Subject: CN=7694e15c1ffd2957e69456de6a5d4a0d4480650c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a6:da:e0:10:bf:ce:96:3e:28:35:96:0a:a8:
7e:6f:f2:34:18:ce:02:1f:e8:24:9f:27:65:29:9a:
e2:54:46:af:34:60:a6:a3:ac:db:23:0f:0a:32:c5:
ea:16:03:83:5b:b4:cc:6e:3e:2c:15:4c:09:5c:13:
dd:c3:78:9d:7a:37:7d:9b:32:99:22:ec:32:29:91:
e8:fc:fb:b2:e6:d3:58:26:a3:e1:05:96:c0:25:75:
79:b9:4b:6b:d4:a0:c1:69:97:50:ca:d1:21:d6:eb:
3e:d7:91:d0:9a:99:64:b7:cc:c4:75:40:83:f8:1f:
ef:03:95:ef:2e:26:e1:b7:31:c3:29:5f:22:1d:28:
9c:cc:f4:d8:d6:8c:d3:ad:aa:cd:60:e7:19:67:eb:
3f:21:88:55:c3:0f:31:5c:1c:b5:94:2b:3e:40:2f:
44:be:07:6b:cd:71:cb:fd:40:1d:74:b9:fb:4f:39:
de:55:4b:f7:54:9a:15:26:95:37:23:b6:c4:1e:9a:
e5:6c:a6:78:ce:b6:3e:4e:aa:4c:59:9e:6b:fa:88:
0d:b5:e8:c2:d4:56:56:3b:5a:1e:05:d7:8d:56:b1:
a7:5c:a3:84:03:92:c5:d2:c6:79:b4:bf:2d:42:34:
44:33:54:aa:25:30:d4:ca:58:22:23:0f:94:8e:56:
84:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:94:E1:5C:1F:FD:29:57:E6:94:56:DE:6A:5D:4A:0D:44:80:65:0C
X509v3 Authority Key Identifier:
keyid:35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:bf:e2:58:1e:71:61:23:e7:0f:f5:31:9d:98:19:92:48:6d:
e3:a2:58:a6:60:01:7c:67:20:fc:95:7f:34:ae:18:16:87:8f:
8a:63:31:aa:16:f1:28:90:0b:35:d2:07:ce:8a:50:70:17:61:
38:84:83:af:de:4c:ea:b4:7a:95:63:5b:42:79:ae:99:cb:71:
c8:b8:17:0b:9e:25:c0:09:ed:0b:86:65:ef:6b:7d:0a:9c:c9:
67:98:71:f2:b4:06:1f:68:3e:dc:a6:07:1c:d8:15:4a:39:58:
bc:f5:83:26:5d:a6:0c:46:97:65:c7:81:b9:71:8e:b1:50:9f:
86:28:63:8a:98:58:e3:4d:f8:33:2e:ea:3a:51:cc:b3:00:8c:
c1:1c:96:bf:e8:0b:ce:85:fb:74:99:82:1c:f5:7a:47:6d:27:
91:2b:29:d4:fa:1c:f2:a4:b1:56:85:01:98:ff:52:49:e7:cd:
29:c4:9d:f1:ac:db:00:8d:2f:e4:5b:df:eb:32:0d:cc:d5:c4:
cb:cf:83:18:f1:bd:91:8f:c8:d4:77:fd:2d:c4:69:09:38:2e:
fe:09:62:11:9a:19:c6:92:bc:5b:17:5b:25:66:04:22:15:f8:
84:2a:89:d4:97:3d:ca:39:f9:77:b4:64:09:f0:b6:34:b3:0d:
bd:e0:16:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 17:54:51 2025 by rpki-client