Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
File: NdhRwRSj93nqgCV7HuGCas2uSk4.mft (raw, json)
Hash identifier: SlVOzIkbgtvNP2k38WTbRf3Me1IhdDT+h7twE5SV9sM=
Subject key identifier: B2:0B:92:1E:4E:5A:E8:A3:54:FE:36:41:6F:96:1A:5F:75:D9:65:41
Authority key identifier: 35:D8:51:C1:14:A3:F7:79:EA:80:25:7B:1E:E1:82:6A:CD:AE:4A:4E
Certificate issuer: /CN=35d851c114a3f779ea80257b1ee1826acdae4a4e
Certificate serial: 0198D88462DEC41D62D94C7E1BAB95F4E020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 20:00:11 +0000
Manifest this update: Sat 23 Aug 2025 20:00:11 +0000
Manifest next update: Sun 24 Aug 2025 20:00:11 +0000
Files and hashes: 1: NdhRwRSj93nqgCV7HuGCas2uSk4.crl (hash: irwezKxO9OPVMhMv5alVLDiHIEwUf6oKJji69bYvdeE=)
2: QIqKLnFZSvkIdztpTOrghmndfqs.roa (hash: wHBtvNsb06U7COg9JhFFEVNmIo0CSx+CQSOErCnUsO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:84:62:de:c4:1d:62:d9:4c:7e:1b:ab:95:f4:e0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d851c114a3f779ea80257b1ee1826acdae4a4e
Validity
Not Before: Aug 23 20:00:11 2025 GMT
Not After : Aug 24 20:00:11 2025 GMT
Subject: CN=b20b921e4e5ae8a354fe36416f961a5f75d96541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:45:cc:a5:fa:45:76:15:69:6d:de:03:a5:e5:
78:02:91:04:1a:82:4c:0b:13:f2:e9:71:5b:3a:d1:
be:6f:7d:84:26:43:ae:84:da:29:b0:c3:d4:4f:f5:
fc:7f:25:62:64:cd:93:c3:24:8a:aa:62:87:17:27:
dc:1e:97:16:c2:fe:bd:32:d5:b9:03:f4:4a:ff:2c:
11:f9:8d:6f:21:7c:24:fd:a1:d4:63:36:cb:67:60:
c8:9f:e9:79:8d:33:ec:13:1c:4a:5f:40:8f:52:33:
43:d9:a6:18:bd:42:ef:50:94:18:17:27:5b:6b:93:
f1:1c:5a:c4:60:10:fc:01:46:57:83:62:a4:7d:1c:
a1:f0:3d:3e:b3:18:48:2d:f8:9e:ba:11:5b:e8:c7:
79:22:eb:a0:20:67:6e:5e:7e:91:4c:46:fb:8a:a6:
f7:cf:46:f8:ae:d3:fe:6d:70:ae:a9:fd:a9:32:39:
9f:52:eb:61:a9:b6:17:7b:15:bc:0e:a8:0b:34:11:
a2:25:a8:fa:3a:85:55:66:c5:47:02:e6:e2:83:bd:
b5:86:5b:2b:bc:55:8f:e5:e1:30:27:74:54:dd:05:
62:d7:a5:a1:17:cf:7d:46:f2:1c:47:b3:4f:f8:72:
9c:f8:26:66:8a:22:d9:af:03:84:52:f5:09:9f:dc:
b4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0B:92:1E:4E:5A:E8:A3:54:FE:36:41:6F:96:1A:5F:75:D9:65:41
X509v3 Authority Key Identifier:
keyid:35:D8:51:C1:14:A3:F7:79:EA:80:25:7B:1E:E1:82:6A:CD:AE:4A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:bf:c0:ec:9e:58:e3:a2:8c:64:42:83:cf:93:7f:2d:b9:6f:
1b:0f:85:46:f9:55:7b:b2:6c:b5:0b:0e:a5:70:ae:02:ba:3a:
8c:cb:62:bf:88:05:f1:05:9c:1e:a5:fd:dc:c9:65:c0:95:53:
30:1a:c4:6b:03:36:d5:5e:48:87:34:0f:5a:7f:c2:87:b0:a6:
de:27:9b:8e:d7:52:03:94:08:a8:d9:89:47:e5:f7:6a:e0:24:
25:a1:f4:ca:51:9d:3c:a9:9b:b9:ac:01:bb:01:6b:ee:34:ef:
0f:2e:54:ca:60:82:99:18:b2:02:a2:34:9a:9b:b7:d6:b1:a5:
c4:c4:83:9a:72:c9:fb:a7:0f:d8:fa:f3:82:a1:da:9b:e7:c2:
f3:ca:d9:41:50:46:6f:08:db:c5:41:91:e7:18:99:d4:35:4f:
80:ce:07:1b:d0:0f:11:e6:88:b0:12:6e:0c:39:2c:a9:2b:98:
22:c0:88:d5:e1:fb:8d:b0:a1:97:11:03:1a:b3:5d:a7:bc:f9:
f2:2d:81:51:d5:9d:5e:91:13:33:f0:bc:a3:48:33:8a:b1:e2:
65:50:cd:7d:de:47:96:12:2d:3a:a0:03:02:7c:18:16:39:bf:
00:77:da:5a:6c:b5:8a:53:09:30:34:51:b7:de:a2:43:d9:c7:
b9:a7:ea:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:19:11 2025 by rpki-client