Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
File: NdrPcDZ9CsMFpawau68jmLJtk1U.mft (raw, json)
Hash identifier: Zs8r/lJMfgVanF4ZIaiqrqEkeyXDQtT5JxZEx5Z/sMI=
Subject key identifier: 5D:24:58:B0:D1:C2:1A:40:FB:34:A0:26:2D:01:A8:0C:70:86:78:21
Authority key identifier: 35:DA:CF:70:36:7D:0A:C3:05:A5:AC:1A:BB:AF:23:98:B2:6D:93:55
Certificate issuer: /CN=35dacf70367d0ac305a5ac1abbaf2398b26d9355
Certificate serial: 019A70DC13659135C1653EC8DE76CE2DA0A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
Manifest number: 04B8
Signing time: Tue 11 Nov 2025 03:01:02 +0000
Manifest this update: Tue 11 Nov 2025 03:01:02 +0000
Manifest next update: Wed 12 Nov 2025 03:01:02 +0000
Files and hashes: 1: NV-I2foKzHLj-RMxKytozaQe67g.roa (hash: PhlDXyOiHHSXRcXTISte8ar8TbgSTtrPQqIchH8glHs=)
2: NdrPcDZ9CsMFpawau68jmLJtk1U.crl (hash: mSZKK+hMoZCCUKceJGwY0f0c4h7RIvQ0eVa/GxIcCRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:13:65:91:35:c1:65:3e:c8:de:76:ce:2d:a0:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35dacf70367d0ac305a5ac1abbaf2398b26d9355
Validity
Not Before: Nov 11 03:01:02 2025 GMT
Not After : Nov 12 03:01:02 2025 GMT
Subject: CN=5d2458b0d1c21a40fb34a0262d01a80c70867821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:80:b5:b0:d1:44:8c:ef:2e:00:37:2f:a7:d4:
49:89:79:f7:91:e4:36:6a:68:d7:8f:11:f0:75:f3:
2c:27:c4:e9:d1:bb:bc:e6:5d:ed:53:46:e8:f0:49:
98:eb:d8:d5:9d:3e:56:f9:24:c7:d4:74:13:5a:40:
73:f4:71:41:b2:f4:b5:27:03:de:b1:43:75:b0:dc:
cd:f2:cf:e1:73:fd:4b:c0:48:3d:03:8a:8f:1e:16:
a5:29:fb:d6:ae:e9:47:1b:58:53:e4:5e:11:1f:f1:
75:57:43:49:89:df:f3:76:6d:3d:b6:d6:9e:18:30:
81:77:ad:a0:e1:28:ee:38:b4:a2:b9:60:55:39:30:
f8:b5:6d:fe:88:e3:79:b6:68:10:7f:15:0c:26:49:
ba:08:c1:4b:2a:09:70:ad:7e:2e:6f:b7:52:e6:25:
87:ab:ae:f3:8a:65:48:69:f1:76:ce:5e:c2:c0:28:
6d:e9:53:da:5c:01:c5:db:1d:75:86:0b:3e:b6:2e:
3a:a0:d2:e9:c1:03:54:fa:fe:29:07:8f:1e:a1:81:
4d:76:03:37:4a:27:f9:e9:ee:9c:d9:50:60:8a:26:
c4:eb:f3:44:bd:a7:53:fb:4d:01:57:02:34:69:85:
ea:13:1b:ac:cc:73:68:93:48:f2:71:ce:f1:26:52:
a1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:24:58:B0:D1:C2:1A:40:FB:34:A0:26:2D:01:A8:0C:70:86:78:21
X509v3 Authority Key Identifier:
keyid:35:DA:CF:70:36:7D:0A:C3:05:A5:AC:1A:BB:AF:23:98:B2:6D:93:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:19:6d:d1:99:a0:0d:5b:8e:e8:2b:60:8c:11:90:a1:b4:39:
d8:b7:81:d6:4f:7b:a3:27:6d:a6:ef:f0:5e:5a:49:8e:fc:f2:
f9:52:36:18:42:1e:63:4c:c6:72:09:e6:48:27:a8:a2:c0:93:
0a:5c:1c:cd:57:23:6e:59:35:95:bf:81:b9:80:52:de:f9:d8:
c9:bc:56:a7:cf:8c:3d:f3:19:29:76:c3:72:1c:d6:7f:f4:1a:
54:ca:f0:70:25:5a:da:66:c4:1a:18:08:c5:70:03:94:12:75:
b8:95:75:92:65:30:16:b5:b9:db:48:9f:5f:48:5d:d1:e8:93:
3c:f6:f5:8e:6f:44:20:f4:23:4d:3b:3b:09:3d:06:fb:a2:1e:
c1:61:f0:be:b7:7c:3e:c3:29:dc:a1:e9:ce:ab:9f:7d:2f:10:
72:e0:7b:50:95:d9:ec:56:9e:ee:f3:3a:ae:41:30:d1:39:4d:
58:0c:aa:d8:73:10:77:af:6c:72:ac:9e:59:d8:f5:a4:3e:ec:
84:44:d4:a6:98:65:29:61:10:43:26:80:fc:f1:c6:e7:aa:54:
66:49:f0:89:6e:35:03:eb:8a:e6:da:72:0e:58:fa:f2:0e:1c:
02:36:6a:7a:cd:f8:6c:a6:f7:0a:93:2d:6f:6a:6f:db:2d:3e:
22:85:a2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:40 2025 by rpki-client