Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
File: ndZC_U41WVtf1FikOjrKyLkTlc4.mft (raw, json)
Hash identifier: cM797gaZPcX7vvl7MbcIUIdhVKeLgGFjVX3d+fn7OqE=
Subject key identifier: 20:A1:CA:67:DB:1E:F3:C4:80:DE:09:A6:9C:F9:F4:05:90:D4:13:9A
Authority key identifier: 9D:D6:42:FD:4E:35:59:5B:5F:D4:58:A4:3A:3A:CA:C8:B9:13:95:CE
Certificate issuer: /CN=9dd642fd4e35595b5fd458a43a3acac8b91395ce
Certificate serial: 019A7112CD5EB26AE1DF7D569D6505228233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
Manifest number: 0CC9
Signing time: Tue 11 Nov 2025 04:00:48 +0000
Manifest this update: Tue 11 Nov 2025 04:00:48 +0000
Manifest next update: Wed 12 Nov 2025 04:00:48 +0000
Files and hashes: 1: ECvfm0gD15erbdYEbJ2O8AxuCuo.roa (hash: GjjofPn0BcYPE+NfKTzkDKX8EBfUwYH0FkVVr77Ou74=)
2: ndZC_U41WVtf1FikOjrKyLkTlc4.crl (hash: ZXD3qNxuSs+QJWh1uNtf/yAFwwbsdDqWCwQGITdj/qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:cd:5e:b2:6a:e1:df:7d:56:9d:65:05:22:82:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd642fd4e35595b5fd458a43a3acac8b91395ce
Validity
Not Before: Nov 11 04:00:48 2025 GMT
Not After : Nov 12 04:00:48 2025 GMT
Subject: CN=20a1ca67db1ef3c480de09a69cf9f40590d4139a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:64:06:42:d7:46:d7:f9:4e:66:51:4f:02:b5:
0c:fc:57:4b:f7:97:48:4d:21:2f:36:bf:2b:9f:ea:
4d:de:c3:02:44:a1:b8:b9:0f:fa:73:1f:6d:d9:b0:
e9:5a:61:03:a8:3b:b0:c8:fd:59:e4:da:db:74:49:
dc:1f:bf:18:16:90:f1:64:09:ef:d5:c5:81:39:7e:
33:96:bc:48:47:e9:3c:0a:41:22:12:77:f5:a4:a7:
af:c2:20:19:75:f4:e0:08:49:36:1e:fe:e8:46:bc:
aa:54:62:41:b2:8f:ee:10:0d:41:62:b4:f8:26:78:
1c:b2:2c:07:24:63:56:b8:20:8e:c5:07:b6:13:c9:
11:69:5a:a1:f1:d1:e5:69:69:e2:13:b7:52:df:ef:
e1:b9:11:88:69:9e:13:31:f4:e4:98:e8:ed:14:0a:
02:09:64:71:0b:00:6e:1f:cd:17:a6:f8:e8:f4:75:
58:bd:55:46:39:4d:0c:28:ab:c8:5d:9a:5f:b0:03:
cf:9f:c9:46:ac:e9:70:7b:96:2c:07:20:db:38:5d:
e7:59:f5:52:1f:fc:e8:59:de:72:18:d3:cc:4f:d9:
d5:48:c2:a6:9d:48:01:de:2d:8b:fa:61:5a:77:67:
ea:b4:96:1c:fa:6f:0a:df:09:53:fb:d9:30:ab:a4:
39:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A1:CA:67:DB:1E:F3:C4:80:DE:09:A6:9C:F9:F4:05:90:D4:13:9A
X509v3 Authority Key Identifier:
keyid:9D:D6:42:FD:4E:35:59:5B:5F:D4:58:A4:3A:3A:CA:C8:B9:13:95:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:4c:c5:6b:a3:f7:10:f3:55:96:36:71:0f:33:4d:5c:44:64:
76:30:d4:72:bf:ae:cc:58:ff:b8:24:7f:43:c9:c6:05:7f:1e:
57:a2:5e:55:f0:8e:df:d8:7f:94:45:10:07:ab:a8:dc:ea:27:
5a:b0:d7:82:d8:e1:df:36:15:c4:87:e9:1d:b2:44:01:18:50:
db:c8:6f:0f:60:d3:30:d8:b8:d4:32:7e:bf:a7:5a:7b:32:ed:
1b:34:5f:1c:a2:75:bb:1b:e2:29:b8:8d:18:b0:69:ca:dc:5f:
37:8f:ef:5b:03:b9:0a:dd:b3:ba:02:67:5f:d7:da:78:19:5e:
31:ad:f7:18:44:32:ec:04:ff:21:08:24:2e:7a:d7:af:ce:cc:
1a:24:8e:9f:ee:a8:fc:de:20:40:08:da:30:fc:03:e9:44:84:
82:1a:78:01:88:b5:ff:4e:02:83:d8:27:8b:2c:83:2c:c2:5e:
48:5b:b0:d8:cc:be:5b:bc:d7:4e:63:13:ee:f6:78:4d:7f:db:
48:a1:f6:f9:41:2e:4f:ca:86:aa:fe:12:d7:7f:bb:ce:f8:56:
3a:98:a1:99:e3:e6:ee:58:85:77:cb:9e:e3:e4:26:d2:e9:0a:
dc:b3:fe:67:8b:b8:22:1e:24:9b:07:7f:01:11:b7:08:18:89:
0f:ec:70:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:09 2025 by rpki-client