Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft
File: NNDsesTDkeTsup0KN0kZGxjr-TQ.mft (raw, json)
Hash identifier: DcSs8Ff7ri8oAmVeyfy3yEk3+KO1ZXKc+Xxxe7993e0=
Subject key identifier: B6:AE:3A:9B:C7:00:E6:17:BD:94:69:1B:B1:14:E0:A4:1E:98:E1:53
Authority key identifier: 34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34
Certificate issuer: /CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934
Certificate serial: 0199FFFE46F7C60587E028A752F320592484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft
Manifest number: 0F66
Signing time: Mon 20 Oct 2025 05:01:18 +0000
Manifest this update: Mon 20 Oct 2025 05:01:18 +0000
Manifest next update: Tue 21 Oct 2025 05:01:18 +0000
Files and hashes: 1: IhSZr0Z9WAryW3beq7rPy6X_4sU.roa (hash: 14IyrHQZmrwmRvkqbCvXFLBTUIcbof5P325HFm3nQa8=)
2: NNDsesTDkeTsup0KN0kZGxjr-TQ.crl (hash: Ht64qU1dwt2OugOD8cd6NBIEi8hP2CnS233DqzSKVAs=)
3: Yzl-TsBruLbp6clu7Q2IexOaQIA.roa (hash: h8cj0MpyodNclAF4X/OllC8+HNKuBQ3B2EFgEqM9+5A=)
4: Z_1dKKg5j_ZVIIzCoIHjWYwlm20.roa (hash: jvis9yjIVYHSkVBmx62d0kYrYZu0QAElVmLUpHW0GZM=)
5: fSqRfFQj3Q__dsTUhVMBI1HPSHg.roa (hash: Y+WWgHfgxkTIhIEndSO+xaSkFkDz1wgH6w0m5aWvWfU=)
6: pI3W8C1ZxuPusTptKHP1u0YPtbM.roa (hash: CThv60vq5lrTC7BFI5QFq4GFsEIpVjwpFNsuFKoLpYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:46:f7:c6:05:87:e0:28:a7:52:f3:20:59:24:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934
Validity
Not Before: Oct 20 05:01:18 2025 GMT
Not After : Oct 21 05:01:18 2025 GMT
Subject: CN=b6ae3a9bc700e617bd94691bb114e0a41e98e153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:29:4f:96:9c:78:5b:32:58:b6:7d:5c:95:e7:
51:23:69:19:e1:92:a9:aa:ec:5b:03:45:87:ae:f8:
34:c3:66:22:7f:fb:ef:23:e1:bf:eb:17:17:b8:fe:
25:fd:7e:0e:b8:d9:2d:b6:b4:ba:4b:1e:f2:44:dd:
b4:8c:16:38:26:d5:4f:48:d8:e8:a3:83:c6:49:2d:
d4:d8:6c:fa:60:be:97:a3:9d:dc:10:a5:1f:6b:0e:
f0:43:ec:95:b1:5c:fb:11:5a:a5:8b:26:b6:75:d1:
c0:64:20:1a:ad:b9:5c:e5:ab:9e:1f:ce:c0:9d:9a:
d4:3b:6d:a5:e7:37:4f:fe:e1:e5:dd:bb:ad:76:fe:
bd:d0:84:b2:87:0c:c5:07:fe:79:af:47:85:52:06:
76:1d:85:ae:98:f2:7a:0e:c8:66:50:de:59:eb:06:
ac:b9:bc:18:35:59:64:06:99:52:29:c7:a2:74:8b:
5f:a2:e4:bf:b3:25:75:2a:7e:68:72:6b:f7:d6:aa:
3f:ac:a1:fb:f6:ca:cc:84:91:4c:8b:3e:b0:2b:98:
3a:f3:67:85:5f:00:cc:08:4c:40:bd:c2:3a:47:d4:
96:60:af:d5:1d:2a:ac:48:e8:05:d1:7a:5b:77:4a:
5a:79:fc:d6:81:d8:f9:33:e7:93:40:ed:6f:8b:37:
c8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AE:3A:9B:C7:00:E6:17:BD:94:69:1B:B1:14:E0:A4:1E:98:E1:53
X509v3 Authority Key Identifier:
keyid:34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e3:23:15:34:f6:01:6e:4f:9a:79:38:de:d3:1f:d1:03:b5:
d7:f2:9c:08:17:da:7b:58:a5:06:a5:cf:79:73:79:46:18:85:
35:cb:49:52:18:ea:fb:e5:8c:1d:6d:78:1d:34:2d:e3:f1:fd:
e1:59:c8:3c:8f:44:a5:48:5a:2f:d0:93:eb:36:1c:23:89:01:
8d:8a:ec:24:be:4c:e1:04:f9:6e:e3:f4:3f:a1:06:0b:f1:15:
fd:42:ba:22:af:76:0f:c5:d2:4c:59:48:e2:29:d6:17:91:ba:
ff:43:13:2a:c0:ff:d1:d7:c9:9e:35:d7:ab:39:49:35:fb:36:
85:e5:c8:bf:85:32:b9:24:5b:35:18:9a:a2:84:e5:b3:b8:5c:
c4:84:81:49:bd:88:b5:b0:da:27:fe:13:f7:be:f7:2b:86:b0:
18:39:d9:52:eb:c3:43:4a:75:82:54:40:d3:93:2f:c2:26:09:
6d:3a:32:43:78:71:7d:d5:c4:5c:03:66:02:a0:03:3f:48:8b:
49:2e:55:74:88:1b:bb:95:19:39:01:d8:4b:fa:6d:16:0a:32:
4b:51:08:50:cd:83:61:d3:24:6a:43:c3:0f:80:7d:57:4d:d6:
de:35:0b:27:74:4a:af:6a:1c:5a:e7:9b:aa:06:61:94:10:2d:
bd:55:c3:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn//kb3xgWH4CinUvMgWSSEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZDBlYzdhYzRjMzkxZTRlY2JhOWQwYTM3NDkxOTFiMThl
YmY5MzQwHhcNMjUxMDIwMDUwMTE4WhcNMjUxMDIxMDUwMTE4WjAzMTEwLwYDVQQD
EyhiNmFlM2E5YmM3MDBlNjE3YmQ5NDY5MWJiMTE0ZTBhNDFlOThlMTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuilPlpx4WzJYtn1cledRI2kZ4ZKp
quxbA0WHrvg0w2Yif/vvI+G/6xcXuP4l/X4OuNkttrS6Sx7yRN20jBY4JtVPSNjo
o4PGSS3U2Gz6YL6Xo53cEKUfaw7wQ+yVsVz7EVqliya2ddHAZCAarblc5aueH87A
nZrUO22l5zdP/uHl3butdv690ISyhwzFB/55r0eFUgZ2HYWumPJ6DshmUN5Z6was
ubwYNVlkBplSKceidItfouS/syV1Kn5ocmv31qo/rKH79srMhJFMiz6wK5g682eF
XwDMCExAvcI6R9SWYK/VHSqsSOgF0Xpbd0paefzWgdj5M+eTQO1vizfIzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLauOpvHAOYXvZRpG7EU4KQemOFTMB8GA1UdIwQY
MBaAFDTQ7HrEw5Hk7LqdCjdJGRsY6/k0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk5Ec2VzVERrZVRzdXAwS04wa1pHeGpyLVRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9mN2Y1M2QtMDY4Yy00NDRlLWFkMWUt
YjdjMjY5NmJhZTUwLzEvTk5Ec2VzVERrZVRzdXAwS04wa1pHeGpyLVRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9mN2Y1M2QtMDY4Yy00NDRlLWFkMWUtYjdjMjY5NmJhZTUw
LzEvTk5Ec2VzVERrZVRzdXAwS04wa1pHeGpyLVRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ+MjFTT2
AW5Pmnk43tMf0QO11/KcCBfae1ilBqXPeXN5RhiFNctJUhjq++WMHW14HTQt4/H9
4VnIPI9EpUhaL9CT6zYcI4kBjYrsJL5M4QT5buP0P6EGC/EV/UK6Iq92D8XSTFlI
4inWF5G6/0MTKsD/0dfJnjXXqzlJNfs2heXIv4UyuSRbNRiaooTls7hcxISBSb2I
tbDaJ/4T9773K4awGDnZUuvDQ0p1glRA05MvwiYJbToyQ3hxfdXEXANmAqADP0iL
SS5VdIgbu5UZOQHYS/ptFgoyS1EIUM2DYdMkakPDD4B9V03W3jULJ3RKr2ocWueb
qgZhlBAtvVXDHA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:36:46 2025 by rpki-client