Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft
File: NdHNq6MVWd4SqxnXnxri0hjDefc.mft (raw, json)
Hash identifier: Sr8kBXixOV9tu1/hAhifF3uHhNQe45kP0cbqsavloEE=
Subject key identifier: 5B:98:1C:7F:15:47:76:FB:E4:DF:67:1A:12:D4:81:1A:1F:D0:B8:D1
Authority key identifier: 35:D1:CD:AB:A3:15:59:DE:12:AB:19:D7:9F:1A:E2:D2:18:C3:79:F7
Certificate issuer: /CN=35d1cdaba31559de12ab19d79f1ae2d218c379f7
Certificate serial: 0198D4E035BF9CFC5ECCA75CCDCB4F792BE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdHNq6MVWd4SqxnXnxri0hjDefc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 03:02:00 +0000
Manifest this update: Sat 23 Aug 2025 03:02:00 +0000
Manifest next update: Sun 24 Aug 2025 03:02:00 +0000
Files and hashes: 1: HI5bhroHTAd2JOvu5YSZV3u06FM.roa (hash: Sccuti/fJ5690EYg+UXdl+hwT8LmoHMXCPxrbV1XvfA=)
2: NdHNq6MVWd4SqxnXnxri0hjDefc.crl (hash: J16YEZmEWTt2joSZqhhEy9Flj0j1YCk62rfu9nAl8ZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdHNq6MVWd4SqxnXnxri0hjDefc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:35:bf:9c:fc:5e:cc:a7:5c:cd:cb:4f:79:2b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d1cdaba31559de12ab19d79f1ae2d218c379f7
Validity
Not Before: Aug 23 03:02:00 2025 GMT
Not After : Aug 24 03:02:00 2025 GMT
Subject: CN=5b981c7f154776fbe4df671a12d4811a1fd0b8d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1f:20:39:23:be:5c:14:17:65:94:a7:3c:a9:
5d:3f:ae:7d:de:b2:8e:fa:74:92:67:14:50:dd:ed:
9f:b0:fe:88:8a:ce:0f:3b:1f:59:c9:27:a0:e4:46:
88:a9:4d:89:34:c4:2b:b3:5b:c1:89:8c:6e:31:3a:
95:7a:86:d8:9d:9d:58:5b:ab:60:d8:73:b0:0c:53:
fa:fb:57:49:38:ed:36:37:3c:79:3c:78:b2:53:50:
a4:31:89:29:e3:fc:b0:38:dc:d6:ad:62:ff:af:96:
b6:bb:67:f6:8a:4b:e2:ad:1b:1b:95:10:2c:75:2c:
21:b5:45:4e:38:d3:5f:9f:8d:6c:1d:c9:60:bf:ab:
3d:ea:cc:33:2d:11:3c:f3:90:b3:1d:4d:e1:6a:c9:
da:41:dd:de:ee:ac:45:16:48:9a:d4:85:d0:aa:dc:
05:1e:fb:3f:9d:c3:68:13:9c:15:a7:97:78:b1:7d:
b1:ee:9d:f9:89:80:ce:9e:8d:52:3a:2d:24:f6:6b:
7b:12:ec:7a:b9:2a:b5:13:5d:d7:cc:05:6b:6b:99:
d7:e8:1a:6c:6a:55:af:76:21:6e:e7:2d:2b:8e:b0:
71:64:c9:84:a5:ed:36:68:60:f9:33:70:30:9e:b3:
64:99:be:87:f4:94:d4:cd:6a:a7:2c:96:d6:ef:b8:
44:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:98:1C:7F:15:47:76:FB:E4:DF:67:1A:12:D4:81:1A:1F:D0:B8:D1
X509v3 Authority Key Identifier:
keyid:35:D1:CD:AB:A3:15:59:DE:12:AB:19:D7:9F:1A:E2:D2:18:C3:79:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdHNq6MVWd4SqxnXnxri0hjDefc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:fb:96:f2:26:1b:e1:6e:7b:e0:9d:92:15:af:79:ce:6b:4d:
62:00:ac:66:57:80:b0:a4:c9:16:e1:fd:e1:fa:20:91:c6:f0:
07:4a:2f:ec:ea:44:8c:f5:79:bc:e9:e6:09:68:d1:05:85:69:
4d:30:8b:ff:2a:e0:da:6e:3a:e4:b7:27:65:cf:69:56:51:03:
10:1e:96:a9:34:01:2d:5d:dc:43:50:16:14:40:1e:ca:db:6c:
bf:88:6f:30:00:20:17:33:56:35:1d:e6:6e:a7:a4:dd:7c:f1:
46:88:23:16:4e:f0:03:ec:bd:ef:11:54:1c:03:81:cf:29:f3:
6a:8e:cc:e8:b2:b5:49:fb:cd:b1:60:4a:98:80:4b:0a:3e:85:
f2:3c:23:2f:72:c8:c8:db:b3:e5:9a:ab:17:26:0c:b1:61:ed:
58:c8:24:a3:35:6f:61:fd:c8:db:1c:bd:7b:38:23:51:a4:62:
dd:1f:0b:40:73:5f:10:c8:94:45:70:e7:78:f3:c4:43:74:13:
13:09:c5:89:51:6c:48:79:0f:6f:19:35:17:d0:00:52:c7:89:
17:f3:ed:28:af:d2:12:86:1a:1b:d3:a2:3a:8e:a9:15:65:7b:
80:7a:c7:b9:46:28:e0:65:c0:a7:52:17:74:d8:cc:e3:6b:cd:
26:18:82:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:51 2025 by rpki-client