Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
File: ndZC_U41WVtf1FikOjrKyLkTlc4.mft (raw, json)
Hash identifier: UBlnUSlGHIACoyTkyYltCrGpAu9o487MXG8swldcmKM=
Subject key identifier: 29:7F:2D:D5:2A:A4:6D:2F:9C:58:28:13:F9:3F:A9:CD:D2:2F:8B:46
Authority key identifier: 9D:D6:42:FD:4E:35:59:5B:5F:D4:58:A4:3A:3A:CA:C8:B9:13:95:CE
Certificate issuer: /CN=9dd642fd4e35595b5fd458a43a3acac8b91395ce
Certificate serial: 0198D7A907E6BE1F6F3E2AD9AB9E945C065E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
Manifest number: 0BF5
Signing time: Sat 23 Aug 2025 16:00:35 +0000
Manifest this update: Sat 23 Aug 2025 16:00:35 +0000
Manifest next update: Sun 24 Aug 2025 16:00:35 +0000
Files and hashes: 1: ECvfm0gD15erbdYEbJ2O8AxuCuo.roa (hash: GjjofPn0BcYPE+NfKTzkDKX8EBfUwYH0FkVVr77Ou74=)
2: ndZC_U41WVtf1FikOjrKyLkTlc4.crl (hash: zCJ20/KX1sJ4re4v6m+gH6d9e6JZGO8qx+LsyjPco9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:07:e6:be:1f:6f:3e:2a:d9:ab:9e:94:5c:06:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd642fd4e35595b5fd458a43a3acac8b91395ce
Validity
Not Before: Aug 23 16:00:35 2025 GMT
Not After : Aug 24 16:00:35 2025 GMT
Subject: CN=297f2dd52aa46d2f9c582813f93fa9cdd22f8b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bd:5e:9c:ce:47:07:d6:dd:54:31:b4:fe:c1:
d6:9f:c9:c0:03:38:56:bb:b9:11:fd:85:e5:98:3d:
ee:9e:cd:5d:fe:fe:cd:cf:04:50:9c:e0:2a:80:72:
fb:08:55:cb:98:33:42:66:f3:e0:5f:10:4d:c8:3f:
7f:49:4d:e5:fd:83:b4:6b:f4:06:44:a6:21:b8:7d:
2b:af:b0:07:ec:20:2a:71:cb:8a:68:45:bb:0f:8f:
5c:f6:df:5a:38:70:c9:67:5e:76:9a:51:43:62:ab:
f5:ed:e7:69:44:ca:c8:97:40:37:64:e2:b8:26:5c:
a4:15:5c:f4:a1:87:7e:51:7c:dc:6a:b7:73:79:76:
37:98:f1:da:1e:05:64:37:fc:0e:b2:1e:5f:1e:66:
27:26:6b:ea:bf:89:04:37:93:32:fc:89:5a:50:4d:
9d:32:8b:e6:96:ce:c1:7a:71:38:f4:0b:92:e2:15:
70:c3:b0:f7:be:74:ce:21:fd:60:72:4e:18:55:be:
f1:aa:93:db:c2:2c:f2:25:e1:a7:eb:fc:a6:d5:6f:
db:bd:7b:11:ba:b9:40:be:67:d3:3b:5e:73:70:f9:
2b:81:21:c3:4f:29:ca:ae:e0:ea:3f:d9:c1:ff:d0:
02:98:f0:df:6a:33:69:8f:56:1d:be:60:ae:62:53:
43:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7F:2D:D5:2A:A4:6D:2F:9C:58:28:13:F9:3F:A9:CD:D2:2F:8B:46
X509v3 Authority Key Identifier:
keyid:9D:D6:42:FD:4E:35:59:5B:5F:D4:58:A4:3A:3A:CA:C8:B9:13:95:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:22:1c:3b:45:6e:eb:85:0e:ce:47:7f:35:e4:18:3a:eb:aa:
67:88:63:0d:a0:e8:05:fe:ff:62:6d:54:2b:1c:d9:2b:3b:16:
a3:32:28:ab:e5:26:86:6e:b2:01:e8:43:49:d8:77:36:8b:eb:
67:b8:ca:f7:03:fe:92:2a:3a:6c:d7:06:a4:ca:a5:4a:23:78:
0e:fb:17:57:18:fc:ea:15:d8:7a:98:3d:9f:a6:f0:13:24:06:
99:f7:cc:62:63:78:6f:17:df:6c:81:c0:95:62:51:b4:db:b1:
8b:f2:22:2b:c1:e2:3b:d1:d1:51:68:e6:fd:97:10:08:1a:5d:
e6:5d:f5:86:e3:5e:2a:ff:a8:96:36:f6:4b:9c:31:d0:e6:95:
df:ca:d0:64:bc:58:55:b5:f5:aa:ca:08:44:1b:ba:8d:b7:e4:
91:4b:cf:aa:a7:cc:79:98:c9:8f:fc:b2:87:8d:26:68:b1:61:
7e:31:66:b3:09:68:8e:7c:fe:e4:ad:ab:c7:51:7e:78:dc:4e:
f5:29:93:a4:12:6e:ac:d6:76:36:c7:56:08:13:f0:5c:7a:2c:
ff:bd:a5:4c:b1:a8:5c:ce:85:84:54:0f:38:b7:9b:a9:08:5f:
bd:12:0d:94:bb:d4:34:f6:ff:48:03:94:40:e2:00:72:0a:a4:
d6:3a:b9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:46:10 2025 by rpki-client