Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft
File: NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft (raw, json)
Hash identifier: tOnAGIDJxlLsRQA7YmyHeWnINxqYIaB4mSfk843EdJU=
Subject key identifier: 0C:8C:92:51:01:68:4E:3C:AE:1D:08:C8:D4:02:65:FE:8B:CC:AF:30
Authority key identifier: 35:D2:92:9F:16:52:F9:58:81:2D:09:9A:23:3F:33:AD:34:45:BB:FB
Certificate issuer: /CN=35d2929f1652f958812d099a233f33ad3445bbfb
Certificate serial: 0199FC5827A7499DF2FC5ECABBCEB4040B40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft
Manifest number: 16A1
Signing time: Sun 19 Oct 2025 12:00:59 +0000
Manifest this update: Sun 19 Oct 2025 12:00:59 +0000
Manifest next update: Mon 20 Oct 2025 12:00:59 +0000
Files and hashes: 1: NdKSnxZS-ViBLQmaIz8zrTRFu_s.crl (hash: Sj6mB6YYjZ6CFwnsMrdMJbejV7DL8q39YTNX2VORsYY=)
2: RvuQkZ_J-wvlyDc9DwQMRfdbRuc.roa (hash: ZwW8RhsC1c6THaCJDOUF+Lquzo4U71ipuOUtISL9Y48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:27:a7:49:9d:f2:fc:5e:ca:bb:ce:b4:04:0b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d2929f1652f958812d099a233f33ad3445bbfb
Validity
Not Before: Oct 19 12:00:59 2025 GMT
Not After : Oct 20 12:00:59 2025 GMT
Subject: CN=0c8c925101684e3cae1d08c8d40265fe8bccaf30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b9:e9:ca:ff:f4:b5:48:5e:9e:0a:2b:51:fd:
fa:59:55:c7:22:c2:0c:6d:70:fb:b4:53:c7:d0:3c:
fc:32:c6:1e:70:ed:b7:87:2d:07:26:a1:2c:52:9c:
1b:46:d1:b9:71:32:ba:4e:0f:5e:e0:d5:99:ef:6d:
5c:ae:b3:7b:37:73:4d:ae:78:fb:74:1e:c0:1f:27:
6f:79:7f:f9:40:c9:a8:99:f0:2c:fa:b7:cb:3a:ab:
3e:60:3e:58:33:7e:14:92:49:96:e8:9b:06:9b:85:
e6:75:e8:0e:ac:a3:98:a3:00:36:58:b7:fd:88:e1:
5f:06:9c:40:b2:59:a6:82:6d:8f:ba:28:0a:dd:28:
3e:37:fc:93:60:97:e6:a0:86:55:65:67:41:8f:a3:
c8:5c:9e:a5:ff:45:c7:d4:03:4a:76:d8:de:16:f5:
5a:0d:98:2e:74:63:21:44:f3:b7:9e:7c:d9:bc:2e:
fe:3c:15:af:f0:6b:eb:2e:7d:85:12:99:f7:66:08:
97:3b:d8:5a:2f:a3:e4:62:01:e9:08:dd:3e:0c:ad:
30:ba:92:05:94:3f:84:e7:94:79:77:39:cc:09:77:
57:66:df:26:95:9c:42:84:68:2e:1f:38:f8:90:61:
db:a6:07:31:5a:b9:37:4e:93:46:b3:b0:b3:46:f4:
74:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8C:92:51:01:68:4E:3C:AE:1D:08:C8:D4:02:65:FE:8B:CC:AF:30
X509v3 Authority Key Identifier:
keyid:35:D2:92:9F:16:52:F9:58:81:2D:09:9A:23:3F:33:AD:34:45:BB:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdKSnxZS-ViBLQmaIz8zrTRFu_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c49ca0-952e-495a-8eb1-b280d4c62745/1/NdKSnxZS-ViBLQmaIz8zrTRFu_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a8:04:0b:47:d7:b9:34:aa:12:b5:33:3b:55:dd:4f:4a:78:
d3:9d:73:28:d8:f9:3a:1a:03:3b:58:ff:e8:2b:26:f7:27:ed:
06:2e:b4:e6:37:00:fb:6a:8b:ea:7f:dc:f7:46:51:d3:54:f2:
12:2a:aa:86:78:3f:4f:01:06:ae:f4:49:61:55:76:be:63:73:
4e:95:41:46:de:d7:d3:49:5b:2a:de:d8:bb:6e:ee:0b:c9:05:
ef:49:e5:78:96:5f:c6:7c:3d:eb:d6:bf:90:1c:10:fe:bc:e4:
7e:39:db:75:43:4d:fc:0e:54:17:6c:e2:73:f0:bb:a7:68:6e:
a8:86:1d:80:30:25:e6:7a:70:be:b2:89:67:c5:ef:96:a2:b5:
e2:82:5a:00:4d:b3:7c:f5:e9:7b:97:5b:a0:1e:d5:66:51:a9:
69:15:37:60:11:c2:4e:50:4a:84:28:f9:79:f2:49:0a:9b:64:
1f:e3:0f:37:16:88:13:30:c4:47:67:b3:2f:85:ec:48:7e:7f:
6a:d9:68:86:de:14:5e:4e:f6:ba:7e:31:2a:64:bf:a2:84:b7:
32:15:68:34:8c:64:07:2d:3b:ad:d3:d9:3c:50:a6:88:11:38:
24:da:b9:5b:7d:c2:ad:5b:02:37:79:73:aa:44:d5:84:ba:df:
44:c7:60:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:28 2025 by rpki-client