Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
File: Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft (raw, json)
Hash identifier: F8E+vv1RUOI4q+Q24sfJfzeq+/Sp/1yo7tM2Aeu3ccE=
Subject key identifier: DD:6D:76:C8:D0:9F:9C:38:3D:41:00:95:9A:C7:4C:43:3F:F5:E4:DA
Authority key identifier: 35:DF:B4:A5:BC:5B:75:BD:94:AA:44:7B:A3:3F:55:57:19:71:CC:F6
Certificate issuer: /CN=35dfb4a5bc5b75bd94aa447ba33f55571971ccf6
Certificate serial: 0198D58353CD533E5D9DF8EFA3D1F4FA9A5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
Manifest number: 0497
Signing time: Sat 23 Aug 2025 06:00:10 +0000
Manifest this update: Sat 23 Aug 2025 06:00:10 +0000
Manifest next update: Sun 24 Aug 2025 06:00:10 +0000
Files and hashes: 1: Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl (hash: PTrW8+JGLdxMA7O7sJw4dFWPiIGCAc81aIoWCwyot3U=)
2: mlswz8Ncs32ae7C2It5n-o0yiHo.roa (hash: S5ligNAG6F0uIgpXYHQu/GqcrGyX5LZG4CQQfjCfuRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:53:cd:53:3e:5d:9d:f8:ef:a3:d1:f4:fa:9a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35dfb4a5bc5b75bd94aa447ba33f55571971ccf6
Validity
Not Before: Aug 23 06:00:10 2025 GMT
Not After : Aug 24 06:00:10 2025 GMT
Subject: CN=dd6d76c8d09f9c383d4100959ac74c433ff5e4da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:31:15:ac:d1:57:1a:c8:6d:64:65:0a:ac:c9:
d6:11:76:9e:77:7b:c3:41:cf:66:66:24:41:66:6f:
4e:b9:13:7b:0b:22:b7:14:64:7a:ab:ff:a2:48:6a:
7e:7a:fe:bc:62:89:c0:47:65:73:df:64:20:69:ad:
5a:0e:d5:20:04:46:e3:f7:1e:cb:b9:97:94:67:d5:
a0:bb:ed:05:2a:62:7c:ff:e8:e0:aa:d9:19:b1:f0:
2a:ef:e7:28:93:97:68:66:12:9b:bf:22:ae:84:21:
93:42:72:54:e7:2d:8e:c7:8c:54:0a:56:97:9f:1f:
97:dc:e2:0c:b7:0a:0c:81:e4:77:b5:9f:e5:c6:1e:
4a:c6:4f:fe:f7:06:00:c5:01:f7:64:7b:1b:bc:12:
24:3d:f7:ea:d3:6f:3a:ac:c3:6d:25:ef:f3:c2:1f:
7a:86:55:bf:82:14:cb:01:65:2a:f1:c6:b7:0b:2c:
68:3e:13:33:30:d2:80:0b:95:39:71:3f:d9:66:81:
42:16:65:ce:f1:e8:bf:f4:5d:78:e8:56:45:a6:01:
f0:8c:26:3d:cd:92:e5:36:49:ab:84:03:c0:b2:b3:
a7:b2:a2:37:3d:e3:1f:a3:65:85:22:dc:65:6c:cc:
39:5d:40:8c:65:44:bb:05:1e:ab:d7:66:5b:10:8f:
53:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6D:76:C8:D0:9F:9C:38:3D:41:00:95:9A:C7:4C:43:3F:F5:E4:DA
X509v3 Authority Key Identifier:
keyid:35:DF:B4:A5:BC:5B:75:BD:94:AA:44:7B:A3:3F:55:57:19:71:CC:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/01c31f-ee3c-435a-bfed-ef88b2cfe872/1/Nd-0pbxbdb2UqkR7oz9VVxlxzPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:3d:70:5b:3b:86:65:7e:79:e9:2a:b2:c3:8e:3a:ad:76:68:
95:72:18:bc:c9:bb:68:23:19:bf:46:ab:7c:8a:b8:82:b2:64:
fb:03:c4:a7:b8:59:ed:11:a9:fb:30:63:95:5e:0e:b3:40:3e:
ce:bb:4f:0e:c7:5a:32:48:72:cc:6f:c4:be:f3:c1:1d:0b:7d:
96:88:ef:19:ca:a4:3c:69:1d:ac:78:af:7f:5b:04:08:3f:aa:
18:ba:5d:6d:73:18:6d:e8:24:89:54:db:0d:7f:3b:53:a1:82:
14:af:c1:a5:c8:ce:eb:b2:bf:61:45:73:a7:32:3b:81:30:04:
91:7c:65:fa:7f:27:22:86:a7:df:f4:3e:ff:ca:d7:ab:53:38:
eb:fc:9f:99:a9:f5:79:f9:4f:ae:56:72:6c:7c:ce:84:f4:de:
de:24:e4:c4:07:7c:06:9c:c6:b3:6b:48:fc:ea:52:e5:30:81:
4e:02:4a:72:dc:37:3a:b2:14:42:f0:47:80:1c:90:83:cf:1f:
c2:05:4e:d6:5a:a2:be:b6:61:26:47:6f:72:d5:c6:81:fc:06:
a2:de:3b:9b:53:d2:bc:8c:a7:9d:13:88:35:21:15:73:77:1e:
54:06:fb:15:10:7c:82:8e:26:33:14:4f:2e:af:6f:25:19:ef:
5a:5f:2d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:13 2025 by rpki-client