Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
File: NdRfKsW84Vad9rKtgNFvG5L72Fw.mft (raw, json)
Hash identifier: VC+AoIe1VJx/mNOsnTqxlHJ3ybseXhThblZUVgjeiw0=
Subject key identifier: 13:E1:69:D9:3C:B9:5D:89:CF:2A:08:99:C7:21:21:C8:12:7C:9E:F6
Authority key identifier: 35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
Certificate issuer: /CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Certificate serial: 0198D5F171028033131A1E299B8A5E75E84D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 08:00:26 +0000
Manifest this update: Sat 23 Aug 2025 08:00:26 +0000
Manifest next update: Sun 24 Aug 2025 08:00:26 +0000
Files and hashes: 1: NdRfKsW84Vad9rKtgNFvG5L72Fw.crl (hash: 0zLfUgbQoGpa+j5lVYaQhLg2QmJkrrZvg54J/LzJQds=)
2: Pxn4Z0bdWmWck5jdH1FaueBsOf0.roa (hash: vg1TLVE75nnwqoL/egav334PmpcLAh17CAvdGO24png=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:71:02:80:33:13:1a:1e:29:9b:8a:5e:75:e8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Validity
Not Before: Aug 23 08:00:26 2025 GMT
Not After : Aug 24 08:00:26 2025 GMT
Subject: CN=13e169d93cb95d89cf2a0899c72121c8127c9ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a0:79:6d:8d:75:a3:ab:e7:1f:7b:0f:dc:8b:
57:54:e5:2a:e9:0e:47:2b:a6:92:ae:33:b9:33:27:
24:ca:e9:2b:2a:c7:5a:1c:1c:85:2e:23:a9:f5:aa:
15:e4:54:2d:57:e8:d1:81:49:b0:a7:b0:29:3b:88:
1b:e3:a1:c5:55:fe:65:71:1e:a1:88:0e:66:4d:ec:
8f:ab:52:6f:df:e3:f4:c4:99:18:75:f5:7b:9a:28:
15:e5:56:a6:80:ad:d6:96:2b:cb:55:2d:b6:f0:31:
bb:9e:9e:cd:f7:b8:bd:8b:64:b7:b5:44:73:7d:34:
2f:ec:15:be:70:fb:77:19:af:fd:b2:12:cf:24:94:
98:c9:ad:00:4d:fb:d5:4a:ab:e5:03:0f:a2:20:5c:
46:df:56:24:e6:22:c9:ab:3d:42:29:ba:d0:1f:ec:
ae:5b:ec:17:70:58:f8:21:24:fe:a1:0a:99:67:09:
40:98:47:76:2b:2f:da:9d:87:18:41:92:3f:6c:af:
aa:c8:85:14:7b:1d:b9:4b:51:1c:96:1d:be:c8:90:
64:b8:d0:1b:ae:b6:d9:e4:86:df:3c:9e:1f:55:05:
63:32:d4:63:76:94:05:33:bc:f6:43:a1:61:1c:d4:
17:14:cd:1c:9e:c5:9e:fe:23:8f:5b:05:a5:97:66:
21:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E1:69:D9:3C:B9:5D:89:CF:2A:08:99:C7:21:21:C8:12:7C:9E:F6
X509v3 Authority Key Identifier:
keyid:35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:7c:8e:b9:3b:c2:5c:1b:3a:a9:50:64:56:26:c0:9a:96:15:
c5:20:c2:1a:d5:26:6d:00:99:a5:3b:9d:6c:47:4d:6b:fd:b8:
e1:2c:cb:82:a7:15:de:6b:9a:41:de:20:b8:eb:fb:5e:d4:0f:
a1:6b:47:08:5a:03:c7:e2:7a:36:c1:bb:1b:af:7c:6c:80:58:
10:ff:e9:47:a6:a9:d8:cc:34:e7:68:9b:1a:31:1d:dc:98:f3:
f8:91:bc:e4:c7:3a:92:17:f8:56:13:35:80:38:cd:3d:69:68:
cf:58:be:d2:5e:d2:e6:c5:14:9b:b0:ee:6f:25:ef:40:8d:4b:
aa:46:73:ed:53:00:cc:66:b6:ef:87:0f:23:7b:8c:61:d8:ed:
d2:9c:b8:8b:aa:26:e9:fa:61:1c:54:df:27:a2:7b:ab:29:19:
53:85:78:f9:10:06:05:51:84:c9:04:15:09:d9:bc:9d:ed:f4:
21:13:d6:66:65:85:71:a7:69:80:76:29:bc:70:f3:df:22:66:
e8:95:e3:a3:2e:42:c0:bb:3e:78:9a:5c:d2:c3:06:7e:f9:0c:
0c:1e:6a:a4:12:e1:85:a6:c2:28:df:c3:e6:f9:d2:ae:69:ab:
88:fe:5f:04:cd:5d:63:61:0c:60:be:b4:44:09:51:d5:e4:6f:
13:f6:72:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:09:52 2025 by rpki-client