Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft
File: NdHNq6MVWd4SqxnXnxri0hjDefc.mft (raw, json)
Hash identifier: iw2pV1NAzOIQSMaY+63MCnH3ltIdVRBomSqeNlxZbTI=
Subject key identifier: 41:F9:1D:C6:49:3B:4F:95:AC:06:F7:79:40:2F:C2:3A:52:AB:79:C8
Authority key identifier: 35:D1:CD:AB:A3:15:59:DE:12:AB:19:D7:9F:1A:E2:D2:18:C3:79:F7
Certificate issuer: /CN=35d1cdaba31559de12ab19d79f1ae2d218c379f7
Certificate serial: 0199FC591176B50BDA7EED701A69147F2984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdHNq6MVWd4SqxnXnxri0hjDefc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 12:01:59 +0000
Manifest this update: Sun 19 Oct 2025 12:01:59 +0000
Manifest next update: Mon 20 Oct 2025 12:01:59 +0000
Files and hashes: 1: HI5bhroHTAd2JOvu5YSZV3u06FM.roa (hash: Sccuti/fJ5690EYg+UXdl+hwT8LmoHMXCPxrbV1XvfA=)
2: NdHNq6MVWd4SqxnXnxri0hjDefc.crl (hash: Jf3Jf+nE1/LriD+GOANMiF16pBaOGGcBPH8WdH62iFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdHNq6MVWd4SqxnXnxri0hjDefc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:11:76:b5:0b:da:7e:ed:70:1a:69:14:7f:29:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d1cdaba31559de12ab19d79f1ae2d218c379f7
Validity
Not Before: Oct 19 12:01:59 2025 GMT
Not After : Oct 20 12:01:59 2025 GMT
Subject: CN=41f91dc6493b4f95ac06f779402fc23a52ab79c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b8:bb:2d:47:e8:e8:5c:1f:69:62:5a:d8:7c:
1e:c2:13:1e:fb:fb:01:91:b2:b8:62:90:c9:58:d9:
85:8d:3c:2c:36:7f:f4:a1:b6:0a:99:44:07:9c:a7:
d9:54:dc:e3:d0:84:9a:13:8d:b6:92:07:d0:e6:ba:
e0:ce:95:26:bc:8c:16:18:0f:9c:b7:8e:cd:af:ed:
45:7a:dd:62:4d:cc:d8:8b:e9:bf:ea:31:d8:fe:3c:
fa:90:c9:2a:68:2a:cc:31:e1:43:64:16:c7:f6:74:
ca:00:67:fe:79:94:ff:8b:2c:a5:b3:84:d0:77:01:
d5:29:0d:42:f6:ab:2e:b7:ee:77:3c:d4:6e:d4:ab:
e1:d3:5d:cc:11:59:57:4e:a7:74:89:2a:51:4a:bf:
5d:9f:46:26:b7:e9:53:7c:49:23:7a:21:e9:08:a5:
17:9f:54:25:0c:a6:3f:d6:cf:8e:a4:fb:19:89:04:
bf:a0:a8:62:da:43:bc:47:fb:c4:2d:dc:1f:a0:81:
ed:c8:b9:27:d3:11:01:39:eb:12:00:9f:e0:50:e4:
09:28:df:eb:96:23:2d:61:d0:04:8e:fa:bc:6e:84:
39:22:c3:83:27:ba:31:1f:e5:75:a1:61:ec:61:b3:
e4:f0:52:dd:c6:98:3e:24:1b:84:eb:8a:0f:2d:cf:
4d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F9:1D:C6:49:3B:4F:95:AC:06:F7:79:40:2F:C2:3A:52:AB:79:C8
X509v3 Authority Key Identifier:
keyid:35:D1:CD:AB:A3:15:59:DE:12:AB:19:D7:9F:1A:E2:D2:18:C3:79:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdHNq6MVWd4SqxnXnxri0hjDefc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:cf:d1:29:b2:39:8e:5d:be:85:44:9c:fa:15:8c:31:da:71:
16:94:8e:48:23:35:f7:65:d3:33:90:02:9f:e5:7f:75:ef:c1:
dd:6a:7c:66:43:1b:59:27:23:d7:9d:49:33:60:1d:bf:72:75:
50:6b:bd:ef:1b:6f:8a:c3:79:86:73:fc:4f:fb:19:26:f2:82:
76:e0:dd:ba:55:71:70:9d:bf:02:4b:bd:e4:4a:07:2f:bb:ce:
0b:17:bf:cc:8a:f0:41:03:28:58:c9:05:1f:63:a5:1a:fd:40:
fe:2d:74:1d:d6:82:85:5d:59:da:83:ae:2a:c5:90:30:71:45:
46:a8:df:d1:a2:e6:db:35:17:fd:a5:f7:62:ed:e8:46:90:2c:
d9:a5:8f:f1:04:5d:1e:00:d3:d3:36:55:5c:bb:9b:5f:b5:18:
cb:fe:ec:cb:eb:a1:3e:5b:2a:6b:07:19:8d:68:ba:b4:c3:9f:
74:fe:25:75:3a:08:c1:6f:63:ac:83:fa:d9:8c:cb:6d:7e:96:
ff:33:66:d2:3e:88:1a:92:d9:19:22:b7:33:1a:7e:75:4c:37:
d5:0d:35:e2:fe:f7:12:cd:0c:3c:48:ab:80:15:2f:fb:9f:62:
7c:81:e7:d9:0f:e5:97:a1:a5:51:fb:bd:aa:83:5c:89:8b:6f:
b3:94:d5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:45 2025 by rpki-client