Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
File: ndUEhgp8kk5yHL-upfSacsgpbDU.mft (raw, json)
Hash identifier: myFTriym8vgJQkmhmbn6meiJ5k98EKQ88SrqKj5Y3hg=
Subject key identifier: 76:A9:17:A5:5D:26:C6:D4:65:44:DD:7B:E7:43:B3:E9:C4:81:BF:67
Authority key identifier: 9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
Certificate issuer: /CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Certificate serial: 019A1128B4E1990E60D0C1854450978674F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
Manifest number: 142D
Signing time: Thu 23 Oct 2025 13:01:11 +0000
Manifest this update: Thu 23 Oct 2025 13:01:11 +0000
Manifest next update: Fri 24 Oct 2025 13:01:11 +0000
Files and hashes: 1: X5jYbn-h_3ZrymXeQcutqUSQLI0.roa (hash: m8dLiyB+f2bY0CN3q6gxqkEWD+kF5d7UEcU/fd6EB40=)
2: nO41lzHTLA0qnXGNSido0EKnbG8.roa (hash: p9hF7X8F0vCkUimBjAw1aM4Oym1MBxjaah21sqRzrUE=)
3: ndUEhgp8kk5yHL-upfSacsgpbDU.crl (hash: LQ/6m6bF6xKTp/wqxgWJLMWWPQrycdgFp04OZqqrGUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:11:28:b4:e1:99:0e:60:d0:c1:85:44:50:97:86:74:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Validity
Not Before: Oct 23 13:01:11 2025 GMT
Not After : Oct 24 13:01:11 2025 GMT
Subject: CN=76a917a55d26c6d46544dd7be743b3e9c481bf67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bf:cc:2b:9d:5c:52:6b:2d:ee:21:fb:53:0a:
fe:05:2f:e4:70:32:ff:2c:3e:e4:2b:1e:8e:61:80:
ca:20:af:e9:83:00:79:76:e9:a4:69:90:40:fb:cb:
4a:ad:7f:25:72:11:22:a2:e0:18:05:9a:49:61:fa:
96:e0:f3:3b:82:85:0c:32:eb:a1:c0:ef:d3:40:92:
d2:cd:cd:78:a4:08:42:24:e1:d8:8f:67:6e:15:a2:
3b:49:83:ef:78:d1:6d:f3:84:f9:0a:61:fe:80:d5:
01:21:9b:6c:3a:c9:06:c7:d1:63:d7:3c:7c:2d:55:
93:99:5c:c6:aa:2b:1b:9a:12:92:73:c7:c0:fc:42:
ed:11:ea:f6:f2:07:77:1f:b2:44:c4:c0:69:66:42:
13:4f:fd:e4:1f:aa:c7:03:04:1f:ac:97:7d:68:fc:
dd:bf:87:f5:f9:79:69:3c:8c:33:9e:36:da:e4:8e:
b3:86:18:6f:0d:84:1b:96:fe:a3:b5:92:a1:0b:d1:
95:f8:aa:77:1c:fa:e2:07:f7:64:44:98:e2:3b:9c:
b6:24:1b:3a:d2:76:6c:a4:f1:ea:4f:a9:63:a6:69:
10:c5:84:d6:91:19:88:33:11:96:78:cc:7b:30:72:
1d:d2:ad:11:38:f4:99:23:3b:dc:9c:b9:38:33:8a:
ed:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A9:17:A5:5D:26:C6:D4:65:44:DD:7B:E7:43:B3:E9:C4:81:BF:67
X509v3 Authority Key Identifier:
keyid:9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:aa:65:0c:c6:07:fc:e0:fd:1d:2d:ec:b6:d3:dd:00:9d:09:
e5:58:85:f2:c4:c2:11:b3:df:c2:61:f1:37:7e:29:5a:b6:47:
28:11:35:86:99:47:2f:2a:24:c6:d7:39:0d:4e:6c:e4:78:0d:
f3:8c:84:6e:fa:4a:f4:2b:b3:a4:4c:b2:14:6a:0b:da:34:77:
f7:27:1f:e1:b0:21:c8:de:98:c4:32:8a:62:0d:ee:c8:df:55:
10:62:fc:65:da:f3:8d:06:9d:f6:92:25:90:1e:de:fd:36:1d:
49:e3:fa:e1:66:db:75:9a:b2:c5:d3:5e:b1:9c:b2:60:b6:89:
eb:a3:46:27:49:65:7a:36:25:dc:31:2f:57:50:bb:ce:18:2c:
ce:7d:55:de:28:1c:07:67:87:08:b5:00:9e:24:11:e8:c1:69:
8a:83:e2:23:fd:dc:8f:ea:20:47:b6:be:68:93:15:c9:98:96:
c9:55:cd:37:aa:24:94:ff:2f:3c:cf:bf:19:26:a6:e7:50:c4:
88:52:ec:94:ac:d6:f2:cb:ef:86:8e:bc:a4:45:5b:04:48:78:
9b:14:b6:c3:94:4e:2a:a8:c4:89:9b:74:bb:f2:52:2a:b2:77:
c6:57:8a:fc:4a:cb:39:4c:23:a9:b7:77:0f:c0:b2:6b:0e:ab:
03:34:7e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 21:07:46 2025 by rpki-client