Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
File: NdRfKsW84Vad9rKtgNFvG5L72Fw.mft (raw, json)
Hash identifier: BdYr1avRnGAbErkujOpIvymrAsEmw15C9gLMsZdbqbE=
Subject key identifier: CD:31:F0:32:43:71:20:43:86:AE:CB:4E:26:7D:57:52:EE:28:AA:B1
Authority key identifier: 35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
Certificate issuer: /CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Certificate serial: 0199FB7CB24DA6E672F9401AB707C68728B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 08:01:17 +0000
Manifest this update: Sun 19 Oct 2025 08:01:17 +0000
Manifest next update: Mon 20 Oct 2025 08:01:17 +0000
Files and hashes: 1: NdRfKsW84Vad9rKtgNFvG5L72Fw.crl (hash: 1wiYitKdiZGwxYibaajUkdBKvcC0wMX5IhUTQb12oIg=)
2: Pxn4Z0bdWmWck5jdH1FaueBsOf0.roa (hash: vg1TLVE75nnwqoL/egav334PmpcLAh17CAvdGO24png=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:b2:4d:a6:e6:72:f9:40:1a:b7:07:c6:87:28:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Validity
Not Before: Oct 19 08:01:17 2025 GMT
Not After : Oct 20 08:01:17 2025 GMT
Subject: CN=cd31f0324371204386aecb4e267d5752ee28aab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:17:89:42:ca:e8:b7:e0:25:ca:ea:d4:0d:8b:
98:1b:0a:7e:24:ac:d1:d8:96:6c:c8:2f:c2:ba:42:
d3:e1:5c:8f:d7:cb:7c:18:75:7f:30:f1:a5:09:ed:
2f:9e:2d:84:b1:cd:3c:27:a4:06:db:55:4d:93:91:
54:e7:67:80:3d:d0:c7:f7:20:99:bd:1c:73:7e:53:
47:ef:25:e9:bf:41:9c:9c:49:4c:1f:13:23:42:80:
b8:1d:e6:e2:83:61:53:79:5e:05:ae:6c:75:4e:a0:
0e:94:4c:11:cb:19:0e:c5:4e:9f:9e:9a:89:dc:33:
d4:fe:24:94:ee:17:0d:f6:4a:46:e3:f5:b4:8f:48:
9e:e9:0d:6a:76:bb:9d:46:be:bf:eb:e6:ae:11:89:
5e:15:7b:74:2c:74:b8:66:4b:8c:f4:4d:b5:da:0e:
ba:26:b6:5c:55:a3:de:98:27:ce:12:5d:bd:83:61:
a6:f6:40:b0:32:f4:69:e6:f6:44:62:18:cf:33:f8:
08:25:5c:0f:7c:98:0c:6f:c5:98:03:85:6c:a1:7e:
b5:7f:5e:28:71:52:49:5b:44:1e:64:8b:4f:f9:de:
4d:35:08:ab:cd:27:84:7c:c9:25:f7:c9:1d:cb:03:
77:83:8d:0e:ad:1a:f3:97:84:07:7d:69:91:e7:9a:
23:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:31:F0:32:43:71:20:43:86:AE:CB:4E:26:7D:57:52:EE:28:AA:B1
X509v3 Authority Key Identifier:
keyid:35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:79:2c:19:e0:b6:16:2b:76:59:75:0a:68:0c:64:83:89:6e:
b1:80:3d:10:6f:a1:e6:db:d0:6a:b1:c5:f3:bb:46:70:f2:78:
55:c6:91:20:9a:a0:2b:06:2d:f6:9f:f3:0f:bd:f8:0c:d1:17:
eb:3c:d5:8f:ff:2b:bd:a4:7d:2f:77:ce:a3:26:83:7d:e4:59:
81:1e:0c:e7:f6:76:bf:b8:4e:b8:e4:56:75:95:4a:36:96:3b:
7c:aa:bf:b4:cf:3c:5a:6b:72:13:9b:c8:4a:36:a9:be:17:80:
6e:4a:a1:e2:48:1c:0e:8c:8a:38:36:f7:b5:35:2f:fe:b6:7b:
af:8f:fd:0f:81:ba:31:75:8f:55:72:fa:16:6f:85:1d:a5:19:
a1:71:99:b6:50:69:a4:19:8e:4b:01:d8:45:b3:7c:d3:f4:e4:
07:4d:1d:0a:d3:c5:7d:42:d0:c6:76:86:c9:f4:65:7c:16:c4:
90:ff:90:5a:73:00:fc:5b:d2:73:25:0e:c3:29:fd:27:af:b0:
8e:5f:ee:47:f8:37:c3:34:3d:aa:6f:12:e2:5f:df:36:43:b6:
1a:d6:40:3e:73:e9:18:4d:fa:fd:f0:ef:f6:94:15:af:2a:2c:
3d:47:f7:00:13:bc:db:fb:05:98:f9:7f:8a:b6:4f:57:7b:b7:
71:8e:a2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:59 2025 by rpki-client