Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
File: NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft (raw, json)
Hash identifier: cPP21uKbW8Ds6fS9A5zQleXn3qfq8HJcIdLy97lC9AI=
Subject key identifier: 28:D6:A4:88:70:F2:C4:45:FC:DC:1A:DA:0D:67:01:B9:C0:43:6C:EE
Authority key identifier: 34:38:0C:FB:A3:4B:61:F5:DB:45:65:14:59:28:D9:E4:AD:D9:30:EB
Certificate issuer: /CN=34380cfba34b61f5db4565145928d9e4add930eb
Certificate serial: 0199FBEB6E32D850FC5D4EC3B4D935D720FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
Manifest number: 0197
Signing time: Sun 19 Oct 2025 10:02:14 +0000
Manifest this update: Sun 19 Oct 2025 10:02:14 +0000
Manifest next update: Mon 20 Oct 2025 10:02:14 +0000
Files and hashes: 1: NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl (hash: Xd/beHPsDg50SKeHf4Kx3WnMJJCPU4FxzfsRmGYKddo=)
2: eNjKHdv8IHiSMT5DlWURZ12GtE8.roa (hash: 0PyZvOHXEJvjs+fUIrJG3NCT3v2ngertxaHruNIycnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:6e:32:d8:50:fc:5d:4e:c3:b4:d9:35:d7:20:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34380cfba34b61f5db4565145928d9e4add930eb
Validity
Not Before: Oct 19 10:02:14 2025 GMT
Not After : Oct 20 10:02:14 2025 GMT
Subject: CN=28d6a48870f2c445fcdc1ada0d6701b9c0436cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:43:36:79:fc:6c:7a:d2:d4:36:aa:03:88:d1:
92:fa:de:d4:aa:b7:b0:2d:c2:3a:93:c5:ea:65:f5:
58:cc:ed:7d:de:28:f6:5f:ca:db:bd:87:17:8d:77:
a4:b7:bc:3b:07:df:86:cd:de:7e:07:c6:5e:29:bb:
6f:5b:77:34:72:22:9c:f5:b8:7c:9c:0f:9e:e4:ed:
3b:20:b7:9b:54:af:83:c6:a5:1a:4c:c3:32:68:eb:
a7:ee:0d:90:7a:95:1f:c5:44:70:b9:bc:d7:a4:7f:
23:34:bd:1c:85:69:75:c9:ca:e2:9d:dc:1a:a8:b5:
42:88:2f:59:92:a3:e0:0f:97:e5:70:eb:ca:76:87:
b8:29:67:cb:ec:f6:86:a2:42:67:92:43:b7:a7:d7:
87:8f:d9:e1:c9:7c:fc:9d:92:86:c9:b2:ba:89:74:
a5:d2:4d:34:ee:29:29:c3:27:eb:27:27:8a:53:55:
8e:9b:6e:f0:71:4e:c5:c8:f5:fb:c1:20:96:f8:ea:
08:38:de:41:61:19:45:f6:1c:5c:4b:16:93:78:49:
77:b6:9b:bf:b0:5d:a1:17:c3:d3:e6:6e:90:a7:cc:
08:e0:c6:f8:ca:d9:d8:8e:72:43:9a:47:93:b9:5c:
7c:71:19:c6:d4:77:dd:1c:ef:a9:61:db:ca:56:a5:
d0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D6:A4:88:70:F2:C4:45:FC:DC:1A:DA:0D:67:01:B9:C0:43:6C:EE
X509v3 Authority Key Identifier:
keyid:34:38:0C:FB:A3:4B:61:F5:DB:45:65:14:59:28:D9:E4:AD:D9:30:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:0c:47:2b:6f:97:c8:6f:aa:02:a6:8c:f7:02:61:7b:b3:c3:
18:a2:3d:56:c2:1b:59:88:d2:f3:06:b5:9b:9e:71:9f:b2:8f:
cb:97:cd:d9:31:f7:16:a3:56:5c:c8:0d:f3:5e:16:50:84:4d:
05:37:d4:0b:e4:d1:b8:e5:89:28:3a:49:bd:9d:2c:cd:3e:b2:
f6:4b:95:30:8c:68:63:e1:c1:8f:ff:68:c9:c1:07:a9:aa:f9:
00:bb:c8:c9:f1:61:5a:49:74:7b:7f:b3:9b:3b:b3:15:a7:78:
5a:ef:ee:e7:dc:7f:a5:fb:c4:35:7a:66:b9:ae:d9:87:1d:fb:
aa:60:c0:15:8a:a7:ab:a4:c7:d2:c4:d8:1e:a9:96:b0:a8:e8:
0a:01:73:29:e8:c1:0d:cf:cd:f2:84:96:80:bc:46:d6:93:df:
2a:f2:32:05:5f:8f:b1:a7:1c:b9:77:e6:dd:e9:60:df:ba:27:
aa:cd:67:5e:70:21:f4:21:3a:e9:9e:d1:c0:f1:74:da:c0:6c:
76:2d:11:8f:1f:12:c3:84:ba:1b:35:46:d6:1b:ca:32:79:8c:
68:00:ac:7a:0f:49:01:50:ae:2f:47:65:15:2f:b7:4a:47:de:
c0:c0:35:92:de:98:62:3b:19:98:07:73:89:a0:ab:bf:d5:ac:
28:45:ce:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7624y2FD8XU7DtNk11yD9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MzgwY2ZiYTM0YjYxZjVkYjQ1NjUxNDU5MjhkOWU0YWRk
OTMwZWIwHhcNMjUxMDE5MTAwMjE0WhcNMjUxMDIwMTAwMjE0WjAzMTEwLwYDVQQD
EygyOGQ2YTQ4ODcwZjJjNDQ1ZmNkYzFhZGEwZDY3MDFiOWMwNDM2Y2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEM2efxsetLUNqoDiNGS+t7Uqrew
LcI6k8XqZfVYzO193ij2X8rbvYcXjXekt7w7B9+Gzd5+B8ZeKbtvW3c0ciKc9bh8
nA+e5O07ILebVK+DxqUaTMMyaOun7g2QepUfxURwubzXpH8jNL0chWl1ycrindwa
qLVCiC9ZkqPgD5flcOvKdoe4KWfL7PaGokJnkkO3p9eHj9nhyXz8nZKGybK6iXSl
0k007ikpwyfrJyeKU1WOm27wcU7FyPX7wSCW+OoION5BYRlF9hxcSxaTeEl3tpu/
sF2hF8PT5m6Qp8wI4Mb4ytnYjnJDmkeTuVx8cRnG1HfdHO+pYdvKVqXQIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjWpIhw8sRF/Nwa2g1nAbnAQ2zuMB8GA1UdIwQY
MBaAFDQ4DPujS2H120VlFFko2eSt2TDrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkRnTS02TkxZZlhiUldVVVdTalo1SzNaTU9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8yOWM4ZWItNjFlMi00YWFkLTlhYTQt
MzI3OTEzN2ZkZTQ0LzEvTkRnTS02TkxZZlhiUldVVVdTalo1SzNaTU9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8yOWM4ZWItNjFlMi00YWFkLTlhYTQtMzI3OTEzN2ZkZTQ0
LzEvTkRnTS02TkxZZlhiUldVVVdTalo1SzNaTU9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEQxHK2+X
yG+qAqaM9wJhe7PDGKI9VsIbWYjS8wa1m55xn7KPy5fN2TH3FqNWXMgN814WUIRN
BTfUC+TRuOWJKDpJvZ0szT6y9kuVMIxoY+HBj/9oycEHqar5ALvIyfFhWkl0e3+z
mzuzFad4Wu/u59x/pfvENXpmua7Zhx37qmDAFYqnq6TH0sTYHqmWsKjoCgFzKejB
Dc/N8oSWgLxG1pPfKvIyBV+PsaccuXfm3elg37onqs1nXnAh9CE66Z7RwPF02sBs
di0Rjx8Sw4S6GzVG1hvKMnmMaACseg9JAVCuL0dlFS+3SkfewMA1kt6YYjsZmAdz
iaCrv9WsKEXOIA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:29:39 2025 by rpki-client