Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.mft
File: nd5F6TZ4AdGO8PsKn-UTvrDkpUo.mft (raw, json)
Hash identifier: j9Xdh/YgoEhkb0l8mBjaC8qyOduvon9wOc111zUT3Os=
Subject key identifier: 24:91:09:40:9D:9D:BE:39:1C:B1:AA:D7:CD:5F:2B:D2:2E:C2:62:EC
Authority key identifier: 9D:DE:45:E9:36:78:01:D1:8E:F0:FB:0A:9F:E5:13:BE:B0:E4:A5:4A
Certificate issuer: /CN=9dde45e9367801d18ef0fb0a9fe513beb0e4a54a
Certificate serial: 0199FD34920515C5D97BBDEBEA2BB9FD477E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.mft
Manifest number: 14D7
Signing time: Sun 19 Oct 2025 16:01:44 +0000
Manifest this update: Sun 19 Oct 2025 16:01:44 +0000
Manifest next update: Mon 20 Oct 2025 16:01:44 +0000
Files and hashes: 1: mB80WkYR6rBTCDx0gQ2chGJdLnE.roa (hash: qRYzeQ2/WDuNAMTY5dvhhEeLgdI0eFd+WpvXt01kHZI=)
2: nd5F6TZ4AdGO8PsKn-UTvrDkpUo.crl (hash: a5mw5TOBkwGRRhUdL1zHvRZ4CzKyA420QM6zKpUIo5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:92:05:15:c5:d9:7b:bd:eb:ea:2b:b9:fd:47:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dde45e9367801d18ef0fb0a9fe513beb0e4a54a
Validity
Not Before: Oct 19 16:01:44 2025 GMT
Not After : Oct 20 16:01:44 2025 GMT
Subject: CN=249109409d9dbe391cb1aad7cd5f2bd22ec262ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3b:f8:f7:04:55:cd:1d:bc:68:d6:50:5b:b7:
e0:63:58:b6:10:2a:36:bb:1a:21:5e:ae:fc:32:24:
a4:d0:11:ac:08:17:be:66:8f:3e:3e:6d:f1:bd:62:
6a:8c:22:21:76:9c:88:cb:79:c0:3e:7d:40:d6:32:
93:d6:0e:ad:d1:ef:4b:52:3d:df:5a:bd:b2:ff:2a:
22:ec:4d:01:1e:8a:39:5c:83:cf:c5:48:b8:b2:5c:
5b:bf:fd:90:79:0d:0f:9f:f4:22:47:99:90:52:71:
2c:d8:dd:0e:9e:64:1d:52:13:67:69:94:5a:d4:17:
bf:f5:a7:af:57:85:93:1e:2e:af:d4:52:e3:3d:42:
c6:69:b5:db:77:26:a0:c5:a0:a9:53:b9:23:be:9d:
55:99:90:4a:88:9f:04:f1:dc:31:fe:1c:3c:90:28:
b3:63:2e:ca:f0:d2:28:64:85:c5:13:29:c6:17:22:
07:69:9f:a7:83:86:fd:e1:40:be:df:2f:f9:11:09:
83:08:ab:21:3f:35:22:57:f5:3a:95:89:b5:87:e6:
4b:d4:95:c4:de:b3:56:32:91:77:aa:f2:61:ee:94:
5f:38:a7:df:74:d9:e6:bd:5c:36:c0:6e:24:08:6a:
80:b0:e1:e2:3b:9e:0c:6d:16:33:e6:e0:6d:e2:96:
ea:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:91:09:40:9D:9D:BE:39:1C:B1:AA:D7:CD:5F:2B:D2:2E:C2:62:EC
X509v3 Authority Key Identifier:
keyid:9D:DE:45:E9:36:78:01:D1:8E:F0:FB:0A:9F:E5:13:BE:B0:E4:A5:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:04:6e:13:1f:fc:72:2c:27:76:10:64:63:26:6f:a6:e6:6c:
4a:b3:57:11:5e:4c:0c:45:ee:54:fd:a5:7d:64:98:cf:d7:c5:
8d:f3:3f:73:9a:9d:cb:a1:0d:1c:44:b1:34:43:5c:a2:6b:b5:
b2:65:5f:5e:65:67:50:29:54:96:e5:b0:f5:d3:5b:73:c4:c8:
12:0f:cd:cc:61:07:0f:1b:d5:50:3b:04:93:00:ac:43:ac:a2:
73:ce:37:2f:43:4d:15:3a:06:c2:ae:08:67:d2:98:88:d9:67:
44:5f:8f:f3:94:83:b6:2c:40:9a:71:fc:2f:14:60:74:3c:c5:
58:6c:ec:0c:0a:f6:c3:a2:74:37:e1:9f:c9:e9:56:57:90:03:
09:81:04:91:63:66:ad:ac:d4:42:ca:92:1f:b3:bc:c1:8b:5c:
68:82:52:50:a6:3b:8e:09:f0:c1:c9:d9:25:26:d7:5f:52:d3:
b3:85:79:39:07:41:a0:85:12:f8:13:91:44:30:1d:8a:a8:71:
39:95:4b:1b:e9:7c:86:4b:e1:22:77:3b:57:ed:e2:42:07:cd:
fa:47:bd:fe:21:25:53:f3:03:cc:99:ce:87:90:21:9f:e3:17:
12:fa:bb:b0:5e:7b:1d:21:6f:e0:29:5a:8b:22:1f:b2:b9:5c:
a3:4b:b7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:29:55 2025 by rpki-client