
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
File: ndZC_U41WVtf1FikOjrKyLkTlc4.mft (raw, json)
Hash identifier: zNGRYt4NCKviB+x9gVEAUNEECFeMvaDzAK/eaEuymck=
Subject key identifier: 67:76:44:8A:5A:3A:2C:B7:58:D8:10:96:C5:A3:F7:00:4C:58:7F:CE
Authority key identifier: 9D:D6:42:FD:4E:35:59:5B:5F:D4:58:A4:3A:3A:CA:C8:B9:13:95:CE
Certificate issuer: /CN=9dd642fd4e35595b5fd458a43a3acac8b91395ce
Certificate serial: 0199FB458122C930A52D759BFC64A37C4AD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
Manifest number: 0C8C
Signing time: Sun 19 Oct 2025 07:01:00 +0000
Manifest this update: Sun 19 Oct 2025 07:01:00 +0000
Manifest next update: Mon 20 Oct 2025 07:01:00 +0000
Files and hashes: 1: ECvfm0gD15erbdYEbJ2O8AxuCuo.roa (hash: GjjofPn0BcYPE+NfKTzkDKX8EBfUwYH0FkVVr77Ou74=)
2: ndZC_U41WVtf1FikOjrKyLkTlc4.crl (hash: Q82aeaHJMZeFd/0nWfbOdxU9WWQQCMtIPejPpBPMQVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:81:22:c9:30:a5:2d:75:9b:fc:64:a3:7c:4a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd642fd4e35595b5fd458a43a3acac8b91395ce
Validity
Not Before: Oct 19 07:01:00 2025 GMT
Not After : Oct 20 07:01:00 2025 GMT
Subject: CN=6776448a5a3a2cb758d81096c5a3f7004c587fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:53:0a:93:19:aa:82:33:5f:f5:b8:df:26:74:
6e:9b:de:95:74:e6:54:44:aa:eb:60:63:b3:07:ed:
ff:f9:c5:bc:36:8e:fc:e5:5d:cf:12:67:77:02:65:
a5:01:93:09:2d:0a:cc:fe:03:ec:16:f3:af:9a:c3:
22:03:82:15:19:2d:1e:5b:2d:cc:98:6c:a0:a9:63:
ea:2d:93:13:43:e0:06:b3:d6:25:de:95:ce:bc:c9:
38:4c:39:97:6f:fa:3d:b1:1e:cf:2c:91:7b:64:3f:
59:97:4a:d0:b8:8d:a0:c0:3a:40:95:da:06:54:4b:
23:f9:0b:e9:19:cb:d5:d6:9d:31:dd:68:9e:ba:02:
9b:09:2e:2e:16:61:77:52:4f:e6:85:80:e9:ae:6b:
a2:fc:e6:b6:99:5f:da:d6:6a:4c:b6:d0:00:b5:ff:
df:ae:3a:61:0e:f0:8a:07:d6:69:a4:0e:1d:97:71:
ab:e2:c3:0f:23:07:e5:84:57:28:fa:f2:88:74:2f:
6f:31:19:3e:1b:cd:b2:a3:f9:1f:65:7c:74:ed:1c:
2f:cd:d3:40:92:f0:f4:33:30:91:b3:dc:d9:24:03:
f2:b9:db:b7:32:97:0c:7d:1e:a7:83:85:ac:6d:24:
36:bc:7b:3c:9d:2c:13:bc:a0:ac:7f:66:75:d4:79:
f1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:76:44:8A:5A:3A:2C:B7:58:D8:10:96:C5:A3:F7:00:4C:58:7F:CE
X509v3 Authority Key Identifier:
keyid:9D:D6:42:FD:4E:35:59:5B:5F:D4:58:A4:3A:3A:CA:C8:B9:13:95:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ef:42:2b:62:5f:e4:ec:55:b6:1b:4d:c0:42:49:f9:b9:4e:
bc:85:0e:ac:b8:0e:28:a1:38:2a:31:42:b1:ab:da:14:af:36:
66:41:27:73:a2:a6:cc:ed:26:03:4c:70:4d:3d:24:8e:19:92:
28:7e:72:d0:bc:b9:66:25:ad:78:8b:96:35:f7:97:c6:98:8e:
13:7a:ab:e4:7f:62:16:3c:a5:3d:3a:cb:dd:ed:b7:aa:00:62:
51:b6:c2:70:23:33:cf:fd:e2:fc:a4:dd:64:0e:cc:be:33:cf:
ce:16:ad:4c:a1:3f:73:ac:52:17:a7:f8:86:24:5d:77:c9:1e:
b8:d0:05:af:f9:56:82:81:98:72:95:22:e8:ef:cd:98:61:9e:
b1:2e:12:fe:53:4c:f4:09:4f:ff:e0:68:75:64:99:a3:2a:da:
18:9e:41:6d:7b:d2:f1:74:28:e5:6f:c0:08:e4:9f:df:e5:98:
66:22:7d:81:3b:ec:04:e7:06:47:b6:85:a4:2a:84:8b:35:b1:
bf:31:49:b7:af:2e:c2:be:56:88:d4:ea:41:71:0e:64:88:eb:
c3:0d:88:a4:bf:e6:f2:3e:38:c5:86:54:dd:ec:53:b5:40:51:
f1:5e:0b:58:a9:5f:f0:af:fe:35:b1:16:92:4c:c6:15:70:0c:
83:b4:78:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:23 2025 by rpki-client