Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/9a8a3b-9b44-49ca-b674-d92c9380af33/1/NdfbqnXvNCDY2UWRMO0B3FNRNvs.mft
File: NdfbqnXvNCDY2UWRMO0B3FNRNvs.mft (raw, json)
Hash identifier: iMkfNgYnDAJBlLCUTVqYlJzJ2M1hCC8/0sSeIcYrWTA=
Subject key identifier: C2:64:D9:74:FD:36:D2:7F:C6:A4:E1:B3:8B:E6:FF:C0:57:06:27:DB
Authority key identifier: 35:D7:DB:AA:75:EF:34:20:D8:D9:45:91:30:ED:01:DC:53:51:36:FB
Certificate issuer: /CN=35d7dbaa75ef3420d8d9459130ed01dc535136fb
Certificate serial: 0199FB7C7BDED208BD96148066CD178DFE6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdfbqnXvNCDY2UWRMO0B3FNRNvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/9a8a3b-9b44-49ca-b674-d92c9380af33/1/NdfbqnXvNCDY2UWRMO0B3FNRNvs.mft
Manifest number: 04B3
Signing time: Sun 19 Oct 2025 08:01:03 +0000
Manifest this update: Sun 19 Oct 2025 08:01:03 +0000
Manifest next update: Mon 20 Oct 2025 08:01:03 +0000
Files and hashes: 1: NdfbqnXvNCDY2UWRMO0B3FNRNvs.crl (hash: nRrrQTZDl4gbfkzqZ4M8k2W45vIQVvGllTwn9UvxQA8=)
2: okivhnQi7w6GWYPlNEAmkXkmxpY.roa (hash: k4R8rWTOlMy3O5fk1lka5CmGZaX0JQEHHbZQX1i51u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/9a8a3b-9b44-49ca-b674-d92c9380af33/1/NdfbqnXvNCDY2UWRMO0B3FNRNvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/9a8a3b-9b44-49ca-b674-d92c9380af33/1/NdfbqnXvNCDY2UWRMO0B3FNRNvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdfbqnXvNCDY2UWRMO0B3FNRNvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:7b:de:d2:08:bd:96:14:80:66:cd:17:8d:fe:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d7dbaa75ef3420d8d9459130ed01dc535136fb
Validity
Not Before: Oct 19 08:01:03 2025 GMT
Not After : Oct 20 08:01:03 2025 GMT
Subject: CN=c264d974fd36d27fc6a4e1b38be6ffc0570627db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2c:f6:a4:2a:f2:e7:fc:25:61:66:cd:8d:4a:
2e:86:34:94:b2:4b:42:fb:c4:96:b6:bd:2a:ab:6f:
15:e4:7c:df:02:4a:8c:26:cf:9e:44:38:de:88:91:
f1:71:0c:18:18:5c:92:b5:a0:62:b8:02:e9:0b:33:
92:7d:c1:67:23:40:58:ca:45:08:9f:34:f5:8e:28:
d9:70:e7:9b:7a:ee:f8:73:52:de:91:7e:10:29:dc:
54:7f:f9:a6:2a:a4:8e:10:a3:9c:37:33:2b:74:2c:
a1:13:f2:e3:53:fc:a2:cf:13:21:cb:d2:d1:3f:43:
38:2c:02:18:05:20:0d:a4:e5:0a:85:b2:d0:86:08:
11:d5:a9:46:5d:74:8c:8a:ce:4d:80:eb:5f:ac:86:
ee:b3:72:99:a7:29:ca:3c:1b:72:e3:43:29:2f:cd:
d2:33:ed:bb:8f:75:95:17:24:41:bd:94:9f:ab:f1:
ea:a8:34:94:de:d8:a3:67:1d:69:3d:9c:b5:5c:a4:
9f:ae:30:6f:c1:b0:98:70:52:59:d3:5f:5b:35:92:
a6:d7:b5:ce:88:3e:c0:23:52:8d:97:bc:67:26:78:
9e:73:b0:4f:a8:89:9c:ca:5c:c5:be:2d:44:43:b1:
ec:a5:b2:39:fe:93:42:a7:2e:6e:05:ef:f0:55:ac:
fc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:64:D9:74:FD:36:D2:7F:C6:A4:E1:B3:8B:E6:FF:C0:57:06:27:DB
X509v3 Authority Key Identifier:
keyid:35:D7:DB:AA:75:EF:34:20:D8:D9:45:91:30:ED:01:DC:53:51:36:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdfbqnXvNCDY2UWRMO0B3FNRNvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/9a8a3b-9b44-49ca-b674-d92c9380af33/1/NdfbqnXvNCDY2UWRMO0B3FNRNvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/9a8a3b-9b44-49ca-b674-d92c9380af33/1/NdfbqnXvNCDY2UWRMO0B3FNRNvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:0d:2a:59:85:ab:8e:c2:4c:df:6e:be:f1:4b:75:3f:5f:4e:
0b:62:19:5c:a3:3f:df:11:b8:7f:e9:13:88:1c:f8:56:af:48:
a1:ae:bd:33:a1:eb:01:a6:87:2f:45:dc:88:5e:21:c6:56:22:
e6:10:a3:95:1d:70:72:c7:e1:45:17:09:75:84:41:f6:a9:54:
8a:1c:c4:58:47:3a:7a:bb:24:94:b4:4a:a3:45:cd:6f:2c:1b:
dd:a8:bb:f9:ab:d8:3e:ad:62:7a:00:15:e1:03:1c:ff:a6:84:
06:1c:bf:bf:07:c2:52:4c:d3:38:e4:d4:3a:c9:ab:33:c4:43:
ba:0e:83:14:8b:7d:f9:a7:11:a5:5e:11:69:45:e8:bd:54:50:
1d:40:75:5a:83:6b:9b:55:b7:59:86:ea:47:91:50:d1:77:91:
26:21:fa:04:01:43:82:2c:ab:ef:7e:23:68:1d:2b:44:20:c8:
ae:ab:b2:db:63:e9:7d:d3:ff:bf:91:c8:f2:07:8e:78:c2:63:
6f:d5:be:2a:23:ef:94:11:77:af:d4:51:2a:bc:74:6b:3b:10:
58:1d:95:ae:ca:a6:d4:d6:69:08:f0:c6:6e:df:73:5b:1e:2d:
41:2e:52:af:b6:ef:41:59:bf:a0:96:b0:99:98:32:ea:74:f6:
0c:2b:2a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:14 2025 by rpki-client