Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
File: NR8cdaHchk37-YdDxQbuGGkk9kM.mft (raw, json)
Hash identifier: 4XGjCAidriIFispTrEWM8EAEXu4h7NTNkTFPsq+tWAE=
Subject key identifier: BD:6B:D3:62:69:B3:C1:F4:BA:15:06:66:1A:27:D3:7B:41:95:74:6E
Authority key identifier: 35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
Certificate issuer: /CN=351f1c75a1dc864dfbf98743c506ee186924f643
Certificate serial: 0199FAD8125870AF64CF6E54DB95A950EDC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
Manifest number: 024C
Signing time: Sun 19 Oct 2025 05:01:28 +0000
Manifest this update: Sun 19 Oct 2025 05:01:28 +0000
Manifest next update: Mon 20 Oct 2025 05:01:28 +0000
Files and hashes: 1: Cn6aTJ6E1_-gCpRxnelqtaB0lKU.roa (hash: VqTM+HURS8DC+WZMdKoSVyf3dPPj9el6+N1nRAL14WU=)
2: NR8cdaHchk37-YdDxQbuGGkk9kM.crl (hash: GvT1wIWt/g7Vc986DmztTvz6gZwQbVzXnB2W/NJOD5I=)
3: rT2NKGhh-IbqjO8Z7nYfbW1wOX8.roa (hash: iTv3B38u9yzbs8hr8RvbnohLnyRQDgptr0b4/9herOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:12:58:70:af:64:cf:6e:54:db:95:a9:50:ed:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351f1c75a1dc864dfbf98743c506ee186924f643
Validity
Not Before: Oct 19 05:01:28 2025 GMT
Not After : Oct 20 05:01:28 2025 GMT
Subject: CN=bd6bd36269b3c1f4ba1506661a27d37b4195746e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a8:bf:50:10:2b:6c:23:59:8a:50:03:80:c8:
63:4d:18:d5:3b:d0:07:4e:76:44:bc:89:c3:ed:18:
ee:cf:48:a6:f3:98:c4:b1:59:dc:44:f9:14:ba:09:
90:f8:02:c7:c1:a5:bb:c2:10:83:4d:c5:29:e6:50:
6b:73:48:64:72:7b:6f:53:02:9c:58:2a:a4:4b:18:
38:66:71:b8:d2:6e:49:17:4a:63:43:7c:61:13:11:
ca:a3:19:74:b8:60:15:b8:8e:19:86:96:5e:69:55:
89:d0:b7:29:9b:dc:33:63:dd:5c:a1:64:29:92:70:
b0:09:a2:17:88:50:3f:f6:4d:43:4f:8e:6a:b0:b2:
ea:14:2d:34:c0:d9:a6:8f:c8:67:9c:ac:38:91:81:
30:bd:3a:12:6c:94:9a:c0:f5:7c:ee:b4:d6:d8:38:
51:42:1d:e0:9d:c5:a0:fb:a0:09:6f:f9:9b:21:45:
38:a8:c2:24:16:b8:d0:72:fa:48:b3:be:51:29:c3:
84:7d:e8:fb:3a:42:82:0e:15:f1:f2:7b:5c:51:d7:
9b:de:06:81:df:c8:cf:9d:5a:62:88:89:7d:10:42:
7b:c2:b0:53:02:38:95:95:99:87:5f:c3:83:5d:e3:
37:91:0a:39:62:41:e5:ef:90:ed:0a:08:e1:44:b1:
2b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6B:D3:62:69:B3:C1:F4:BA:15:06:66:1A:27:D3:7B:41:95:74:6E
X509v3 Authority Key Identifier:
keyid:35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:e2:eb:3d:8c:b5:6e:8d:44:90:12:3e:d5:59:76:6d:1b:36:
2d:e1:14:46:05:ae:be:b4:36:1b:97:04:23:38:75:0c:5c:1b:
6a:71:b5:8d:98:e8:0f:d4:ed:11:d0:cb:7e:6f:6f:a1:52:de:
53:1c:65:d3:91:71:15:3e:a9:8a:9b:64:03:ed:53:a9:2f:e4:
02:dc:51:61:b8:47:19:4a:83:9c:d2:a8:45:23:e7:76:a9:77:
1b:94:76:5c:d5:b5:b6:89:49:03:78:d3:db:d2:9b:5a:c9:f0:
d1:42:91:c2:58:49:9c:71:e3:59:57:cf:46:79:40:d7:58:fa:
ea:45:0d:ce:b2:dc:ba:37:21:53:a1:7f:98:5e:95:9f:8b:03:
8a:ac:4b:04:14:dd:f0:c7:5e:11:eb:a5:c0:21:bd:02:de:ec:
94:5e:e4:df:78:92:79:01:2b:cb:cf:97:b5:c8:ea:b2:a4:2e:
f8:55:21:20:cc:d7:84:9d:9b:19:9c:6c:45:e6:a3:aa:49:2c:
ab:d0:3d:9f:b2:20:a6:5d:28:08:c6:17:f4:49:d1:6d:25:11:
f2:5b:81:0a:53:bf:07:dd:81:03:1d:44:79:cb:6a:6b:9a:78:
81:15:08:ed:0b:3f:72:27:28:83:af:2a:2e:92:40:60:e3:5f:
65:15:9c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:18 2025 by rpki-client