Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
File: NdRfKsW84Vad9rKtgNFvG5L72Fw.mft (raw, json)
Hash identifier: IXXBPRM+1paIijbj3nL7Cm5xBBT8nDb9zCp7VhSTLhY=
Subject key identifier: D0:9E:A9:11:0E:2C:E6:B4:F8:91:C6:C9:D9:40:38:47:5F:A9:EC:EA
Authority key identifier: 35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
Certificate issuer: /CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Certificate serial: 01992330DA35D995DE2D9DEAD19876530E08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 08:00:28 +0000
Manifest this update: Sun 07 Sep 2025 08:00:28 +0000
Manifest next update: Mon 08 Sep 2025 08:00:28 +0000
Files and hashes: 1: NdRfKsW84Vad9rKtgNFvG5L72Fw.crl (hash: VjXIpc4XKOxqf3hCx2HfZyFVnriNjBpL7C256n8iW8s=)
2: Pxn4Z0bdWmWck5jdH1FaueBsOf0.roa (hash: vg1TLVE75nnwqoL/egav334PmpcLAh17CAvdGO24png=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:da:35:d9:95:de:2d:9d:ea:d1:98:76:53:0e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Validity
Not Before: Sep 7 08:00:28 2025 GMT
Not After : Sep 8 08:00:28 2025 GMT
Subject: CN=d09ea9110e2ce6b4f891c6c9d94038475fa9ecea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:34:58:98:51:23:5a:b7:a5:43:2a:d4:fb:e2:
aa:f2:21:8f:04:19:c9:43:96:36:a3:fc:df:51:9b:
75:98:93:ab:af:94:9c:9d:32:aa:43:a5:63:a2:7e:
b5:ea:81:3c:9b:0f:a2:7d:90:11:26:0a:78:19:51:
f4:23:9c:f9:92:ee:9d:ca:30:54:5e:ae:b9:b0:0b:
72:98:31:49:1a:68:8c:42:24:d9:76:81:71:a8:15:
65:e3:9d:ae:72:b6:8d:87:88:44:82:52:41:9b:c2:
98:eb:00:2c:6d:e2:fc:5b:81:69:60:10:43:96:01:
0d:9c:33:51:20:bb:7c:ee:89:f2:92:35:12:66:ca:
5e:ed:25:6e:55:f3:49:f2:98:a8:18:6e:ef:5e:48:
95:31:24:5b:f2:04:37:ea:25:eb:68:d9:35:41:07:
df:2d:c2:e2:61:ff:3e:9d:40:e2:b0:9e:9e:0d:8e:
24:45:30:9b:2f:6a:2e:e8:98:b0:31:0c:c9:6f:92:
b2:6d:3c:45:d2:80:67:f7:46:94:5d:50:7c:05:8c:
78:6c:6c:39:66:ee:17:59:49:04:7a:eb:21:68:69:
2a:69:b5:d0:48:6a:2b:81:7c:a5:fe:09:e3:30:ca:
c8:4a:ce:fb:85:f1:3c:0c:59:e9:b5:62:9f:e4:63:
99:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9E:A9:11:0E:2C:E6:B4:F8:91:C6:C9:D9:40:38:47:5F:A9:EC:EA
X509v3 Authority Key Identifier:
keyid:35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d1:d2:f7:d2:01:df:e1:46:19:62:96:29:27:5c:73:3e:21:
44:d2:26:2e:74:58:d3:64:8d:45:b2:cd:de:4d:37:45:7a:30:
8b:41:c6:05:21:24:0c:40:58:5d:98:a6:0d:4e:52:bb:4b:81:
42:20:b2:94:59:bf:7e:92:44:2c:85:fc:94:88:fd:8f:93:e1:
ca:d9:bd:1e:27:67:5e:3a:67:64:1a:29:0a:68:3a:d0:c6:81:
80:05:d5:73:a4:e2:2c:64:3a:15:21:ce:4f:7a:01:83:ee:32:
06:29:7e:c1:dc:33:28:f6:98:f8:20:89:d8:cb:e0:c7:99:0b:
71:7f:1d:51:c4:d3:db:d0:54:00:9c:20:d3:db:aa:0b:28:03:
6f:8a:22:94:f8:39:87:18:37:70:3f:62:e0:1c:f1:a6:e9:1a:
96:4e:17:c3:38:65:37:e4:5d:ef:4f:89:a0:fd:7c:5c:f6:b8:
46:ae:91:5d:7f:0f:d2:5a:2a:97:49:94:2b:c0:2b:9f:05:9e:
35:d4:13:81:af:71:00:58:77:44:61:c8:90:89:81:2d:23:05:
7e:fb:63:6b:1c:79:d2:ca:18:21:ec:c5:57:cf:35:22:1c:f1:
09:9b:64:62:4d:4c:8a:3f:67:0f:f5:b7:65:3d:75:35:3b:7f:
e8:27:2e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:23 2025 by rpki-client