Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft
File: NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft (raw, json)
Hash identifier: qf9oZbomwIi4ujgfa0gnN7EM9xJqIQxzzuRc9X9ntV4=
Subject key identifier: 9E:EF:76:81:38:F4:D5:F5:80:4C:D4:D1:EC:61:EE:57:74:45:3C:7C
Authority key identifier: 35:D2:92:9F:16:52:F9:58:81:2D:09:9A:23:3F:33:AD:34:45:BB:FB
Certificate issuer: /CN=35d2929f1652f958812d099a233f33ad3445bbfb
Certificate serial: 0198D6CDA3DFCC54FB6739E7658659BC92BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft
Manifest number: 1609
Signing time: Sat 23 Aug 2025 12:00:57 +0000
Manifest this update: Sat 23 Aug 2025 12:00:57 +0000
Manifest next update: Sun 24 Aug 2025 12:00:57 +0000
Files and hashes: 1: NdKSnxZS-ViBLQmaIz8zrTRFu_s.crl (hash: fafG29Eaoy5JUdseSHxXUGPsuBf6kGz6vXgIHDvRJVQ=)
2: RvuQkZ_J-wvlyDc9DwQMRfdbRuc.roa (hash: ZwW8RhsC1c6THaCJDOUF+Lquzo4U71ipuOUtISL9Y48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:a3:df:cc:54:fb:67:39:e7:65:86:59:bc:92:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d2929f1652f958812d099a233f33ad3445bbfb
Validity
Not Before: Aug 23 12:00:57 2025 GMT
Not After : Aug 24 12:00:57 2025 GMT
Subject: CN=9eef768138f4d5f5804cd4d1ec61ee5774453c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:30:6a:2f:00:94:0e:55:03:28:ec:25:f2:a3:
8d:9a:eb:3e:e3:3f:c6:3f:8e:48:0d:e6:91:77:e3:
66:5e:4b:b4:8b:51:27:f8:cf:be:d6:35:8b:ef:b7:
6a:27:bc:f5:9a:3f:34:d0:69:ec:a2:92:f3:dc:18:
8c:42:82:91:aa:d0:c7:fc:fb:1c:a7:07:7b:d0:19:
90:90:31:ab:45:99:34:f4:66:ea:ba:1f:68:42:d5:
b3:cc:73:52:ea:9b:47:47:f6:0d:63:48:a4:c3:cd:
44:ee:85:ab:da:c0:71:6e:dd:1e:90:9d:3a:b2:4a:
09:de:c1:a7:80:88:b9:22:5f:d0:06:e5:3d:ce:0c:
92:44:d7:7e:2c:60:42:d1:0c:1a:ad:6d:22:fe:16:
b7:e5:13:83:1e:3e:fb:d9:5c:ad:41:6e:3c:85:64:
8e:5d:09:33:b5:ce:05:02:7b:16:4b:99:6d:28:c6:
d5:bd:f5:7a:30:b4:c9:f1:cb:7b:57:a7:32:60:41:
60:3d:16:80:78:43:94:00:c4:00:da:77:17:25:28:
04:fa:62:4c:5a:44:ac:99:dc:d0:b6:18:f5:df:59:
99:ba:40:ab:24:58:49:f2:cf:8c:62:f8:c4:44:9f:
cf:50:db:03:d8:87:9f:19:9b:ed:97:33:cb:83:4f:
2a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:EF:76:81:38:F4:D5:F5:80:4C:D4:D1:EC:61:EE:57:74:45:3C:7C
X509v3 Authority Key Identifier:
keyid:35:D2:92:9F:16:52:F9:58:81:2D:09:9A:23:3F:33:AD:34:45:BB:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:34:0f:9b:67:0c:be:8c:fb:f4:53:28:49:aa:50:86:0d:d8:
60:25:51:a1:71:22:12:fd:22:9b:48:32:05:f4:10:0c:8a:66:
56:44:51:4e:03:b8:2b:88:fa:47:27:1c:b2:ba:3c:48:2b:09:
af:ab:eb:61:d4:ce:0e:1a:f7:85:74:76:18:81:b6:b9:e9:9a:
47:c0:4f:1d:26:8e:f6:5d:01:3f:5a:b0:c0:e4:dd:3f:a8:53:
3d:79:83:be:6c:80:17:73:fc:fc:79:43:e0:26:79:c5:8b:54:
41:41:96:74:60:64:ea:5b:9b:0b:41:20:70:32:0d:a8:ab:6b:
fc:64:4b:d2:63:b9:28:57:5d:97:65:6e:11:96:0c:15:3d:f8:
23:58:90:51:2e:fa:eb:9e:85:ec:57:d4:9a:3e:c3:28:8b:2e:
fc:01:3c:3d:20:8e:89:c4:87:d7:95:f8:c2:a1:55:7f:bf:68:
0e:1c:d4:f6:61:62:4c:0f:15:15:27:7e:e8:88:63:38:0e:d0:
8f:ed:9b:f7:57:ae:66:89:5d:72:92:5d:6e:1a:76:95:36:4f:
2a:a6:73:6e:e7:c2:93:26:67:c3:67:ee:88:79:73:cc:a0:c4:
c2:6e:fb:de:6d:54:9c:d2:5d:94:61:52:85:25:e9:ba:b1:19:
af:bd:4b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:29:08 2025 by rpki-client