Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
File: NdhRwRSj93nqgCV7HuGCas2uSk4.mft (raw, json)
Hash identifier: rDui5FcUOIveNTgjAViR2bhu7OlVIrOjdla2EhjQPfY=
Subject key identifier: A6:A9:F6:43:10:B6:95:6C:FF:89:4C:24:63:2F:CF:19:9C:50:54:BF
Authority key identifier: 35:D8:51:C1:14:A3:F7:79:EA:80:25:7B:1E:E1:82:6A:CD:AE:4A:4E
Certificate issuer: /CN=35d851c114a3f779ea80257b1ee1826acdae4a4e
Certificate serial: 0199FFFE447427D221E0371EA391D104FE16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 05:01:17 +0000
Manifest this update: Mon 20 Oct 2025 05:01:17 +0000
Manifest next update: Tue 21 Oct 2025 05:01:17 +0000
Files and hashes: 1: NdhRwRSj93nqgCV7HuGCas2uSk4.crl (hash: x2QIjhviMqfI2/ngNW7VE8HkHKkYAvMUAKZuLV7+vn4=)
2: QIqKLnFZSvkIdztpTOrghmndfqs.roa (hash: wHBtvNsb06U7COg9JhFFEVNmIo0CSx+CQSOErCnUsO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:44:74:27:d2:21:e0:37:1e:a3:91:d1:04:fe:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d851c114a3f779ea80257b1ee1826acdae4a4e
Validity
Not Before: Oct 20 05:01:17 2025 GMT
Not After : Oct 21 05:01:17 2025 GMT
Subject: CN=a6a9f64310b6956cff894c24632fcf199c5054bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9a:95:d2:79:f4:93:7b:f6:37:ef:af:6f:c2:
75:d8:e2:71:b8:f7:db:14:16:98:c1:5b:a4:fd:08:
5e:a4:af:33:6a:27:04:47:cd:f2:3f:ee:83:a7:86:
14:ac:46:53:d3:95:da:35:a0:21:7a:42:18:e7:17:
b7:8b:c3:30:4d:df:da:ba:27:45:44:ee:00:9b:fb:
44:d4:9b:a4:d6:75:08:3f:b3:0c:75:ab:ee:41:90:
bf:8c:15:1f:f3:8c:65:89:e7:97:0f:54:7c:65:8f:
0c:b4:52:05:6d:17:e6:32:73:fd:f8:40:32:3b:f4:
93:14:e3:2e:44:b4:bf:b3:63:07:b6:df:b3:2e:9f:
ff:9b:c1:27:29:f9:04:58:8e:b2:48:12:f8:44:42:
be:47:03:82:df:e8:37:7f:58:de:ba:08:4f:62:b5:
aa:d1:3e:b9:60:e7:45:ce:d1:5d:2d:52:eb:a6:4a:
1a:8a:ac:ed:ec:1d:d6:f8:0d:53:9b:8e:69:4b:01:
56:a4:af:8a:6a:fc:91:b0:37:f4:ea:c7:0b:16:ae:
4b:60:79:3f:d1:80:82:a8:c9:bd:3e:79:92:14:37:
66:05:1a:ac:d8:ae:88:29:f6:1f:b2:f3:2e:f7:ef:
33:60:39:07:1b:52:1a:c1:c4:da:cf:f6:5f:96:62:
1c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A9:F6:43:10:B6:95:6C:FF:89:4C:24:63:2F:CF:19:9C:50:54:BF
X509v3 Authority Key Identifier:
keyid:35:D8:51:C1:14:A3:F7:79:EA:80:25:7B:1E:E1:82:6A:CD:AE:4A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:75:87:11:6a:87:da:c8:97:de:c5:8f:ab:b2:fd:d9:24:bc:
92:ba:6c:2a:8c:20:f9:5a:33:94:61:75:55:89:1d:b5:21:65:
ab:56:67:26:45:b7:ed:1a:a6:c8:fa:b4:bf:4c:48:6a:f3:56:
64:bb:d4:af:20:90:80:c1:92:05:41:02:bd:b3:58:38:4e:ae:
0d:c0:ad:24:b4:aa:8d:08:e5:59:24:d5:09:ea:71:b9:bd:b2:
e3:00:9c:10:c7:e4:8d:4f:29:f9:2e:5c:c8:99:76:b0:15:f5:
77:0b:b7:20:0b:d3:10:1f:d4:62:2a:2d:12:64:b6:97:be:11:
82:06:7a:23:06:77:2b:a9:5a:38:a1:ed:52:00:62:8c:3e:a3:
00:9c:01:1a:c1:04:dd:1d:e1:c4:f5:c4:ec:1f:a8:2e:0a:ef:
e0:a4:c4:af:49:56:ab:aa:18:af:87:41:b1:0f:72:83:ce:01:
0a:0e:12:52:5e:7f:8c:e2:7a:4c:33:63:84:a4:0c:e2:be:77:
25:47:a4:ba:92:ce:46:36:16:b4:9c:0e:f0:48:51:20:6a:55:
18:8c:90:c2:ee:32:8e:fc:ed:94:74:9e:79:1b:9f:8a:c5:13:
1b:5e:db:11:24:ed:87:20:de:34:6a:b3:79:6e:81:22:da:69:
4f:cc:50:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:51:49 2025 by rpki-client