Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
File: ndUEhgp8kk5yHL-upfSacsgpbDU.mft (raw, json)
Hash identifier: GE2SlKKcrV+QqzoIvtjAlvt8HVoGQ6mRWwJpGsXOA30=
Subject key identifier: AA:48:9A:B6:B6:4F:12:DB:5C:44:AB:A7:41:A0:AD:09:96:FB:FA:B1
Authority key identifier: 9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
Certificate issuer: /CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Certificate serial: 0199FDD9DCD9A9C05702EB946276C8D54D0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
Manifest number: 1423
Signing time: Sun 19 Oct 2025 19:02:17 +0000
Manifest this update: Sun 19 Oct 2025 19:02:17 +0000
Manifest next update: Mon 20 Oct 2025 19:02:17 +0000
Files and hashes: 1: X5jYbn-h_3ZrymXeQcutqUSQLI0.roa (hash: m8dLiyB+f2bY0CN3q6gxqkEWD+kF5d7UEcU/fd6EB40=)
2: nO41lzHTLA0qnXGNSido0EKnbG8.roa (hash: p9hF7X8F0vCkUimBjAw1aM4Oym1MBxjaah21sqRzrUE=)
3: ndUEhgp8kk5yHL-upfSacsgpbDU.crl (hash: jMnI4pTsZJZWlJS2LaPxYaQfaOOWmg2Gn1G+4sVgZqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:dc:d9:a9:c0:57:02:eb:94:62:76:c8:d5:4d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Validity
Not Before: Oct 19 19:02:17 2025 GMT
Not After : Oct 20 19:02:17 2025 GMT
Subject: CN=aa489ab6b64f12db5c44aba741a0ad0996fbfab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f5:5f:14:f5:65:59:e6:ca:a0:b4:bf:14:37:
9a:8c:0d:20:2e:56:5c:6e:bc:ba:97:50:07:a3:9a:
1b:34:67:df:d6:a3:d4:2c:df:ba:bc:7c:ce:9b:c9:
0c:57:d1:e8:88:d0:09:5e:27:e1:bb:8c:3a:44:75:
0c:3a:a1:b3:83:b1:6b:51:24:38:0a:33:b1:ce:79:
f6:30:66:75:84:93:fd:82:9c:46:b1:87:0d:ff:b0:
b1:60:ea:a8:2a:da:fa:8f:58:1f:48:56:54:c5:b9:
a8:6e:eb:5b:37:83:84:fd:60:71:21:ba:cc:d5:0c:
91:00:34:76:1a:47:0d:a9:5a:5c:0e:59:e3:e3:9e:
41:5b:ad:78:07:6c:28:17:a4:ef:b5:92:8c:02:cd:
63:b6:c7:63:e5:18:1d:27:9f:81:9c:86:38:e3:cb:
31:9f:ea:9c:d5:0d:e8:14:05:83:05:a5:c5:34:ec:
50:a1:68:44:a0:c6:02:2c:36:db:14:79:ec:64:92:
cc:95:e9:22:e3:3a:d6:87:82:b5:79:1a:4e:89:3a:
61:2d:ee:a0:fe:4f:e5:2d:98:85:fd:ff:6f:f1:9c:
97:b7:ee:16:75:2f:2c:58:d6:b2:b5:85:29:6e:2e:
a2:e8:0c:0a:7f:58:97:dd:d9:b1:c5:da:d8:c4:00:
ee:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:48:9A:B6:B6:4F:12:DB:5C:44:AB:A7:41:A0:AD:09:96:FB:FA:B1
X509v3 Authority Key Identifier:
keyid:9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:cb:2e:ee:2d:41:ed:f6:43:5a:2e:79:4c:fc:52:48:10:d3:
5b:8b:0b:41:5f:1e:1a:63:31:8b:7f:9e:0a:af:ca:7d:f0:6e:
99:2d:cd:d4:d6:d6:ad:3f:dc:d8:79:0e:89:70:00:07:98:18:
b2:8e:63:3f:7c:a9:56:8e:3b:0f:30:c2:02:d4:06:97:f9:51:
93:72:9c:97:e1:5f:cf:7e:34:df:16:16:38:cd:1f:89:f4:27:
75:0d:de:6b:b4:2b:9d:6e:71:09:1e:6f:1c:ee:7e:44:88:71:
3a:bb:00:6e:14:1a:75:97:58:45:bd:dc:11:1a:62:63:fb:54:
20:1b:4a:ff:7d:5d:43:36:6a:e1:97:a2:8a:73:1b:16:2d:02:
38:c2:77:15:5e:4f:08:5c:71:d8:81:da:50:3c:75:4c:04:46:
a8:a5:13:c2:dd:64:a1:98:eb:6c:08:f0:81:2e:6a:4b:e4:95:
3c:3a:d3:5e:db:2c:1f:bb:c0:d7:2c:00:92:7a:b2:21:56:50:
ca:67:90:88:28:6b:7b:0f:d5:16:89:e1:5b:7b:75:41:70:0a:
d8:ea:28:11:8a:7b:4c:c4:36:9d:a5:b3:67:8c:98:bb:d1:6e:
bd:43:40:7e:60:a4:e0:0f:63:e5:e5:90:2e:f4:7e:3a:e0:38:
d4:1d:40:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92dzZqcBXAuuUYnbI1U0KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkZDUwNDg2MGE3YzkyNGU3MjFjYmZhZWE1ZjQ5YTcyYzgy
OTZjMzUwHhcNMjUxMDE5MTkwMjE3WhcNMjUxMDIwMTkwMjE3WjAzMTEwLwYDVQQD
EyhhYTQ4OWFiNmI2NGYxMmRiNWM0NGFiYTc0MWEwYWQwOTk2ZmJmYWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fVfFPVlWebKoLS/FDeajA0gLlZc
bry6l1AHo5obNGff1qPULN+6vHzOm8kMV9HoiNAJXifhu4w6RHUMOqGzg7FrUSQ4
CjOxznn2MGZ1hJP9gpxGsYcN/7CxYOqoKtr6j1gfSFZUxbmobutbN4OE/WBxIbrM
1QyRADR2GkcNqVpcDlnj455BW614B2woF6TvtZKMAs1jtsdj5RgdJ5+BnIY448sx
n+qc1Q3oFAWDBaXFNOxQoWhEoMYCLDbbFHnsZJLMleki4zrWh4K1eRpOiTphLe6g
/k/lLZiF/f9v8ZyXt+4WdS8sWNaytYUpbi6i6AwKf1iX3dmxxdrYxADu1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpImra2TxLbXESrp0GgrQmW+/qxMB8GA1UdIwQY
MBaAFJ3VBIYKfJJOchy/rqX0mnLIKWw1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmRVRWhncDhrazV5SEwtdXBmU2Fjc2dwYkRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80OTYyMzItZDE4Yi00NTU0LTlhNDMt
NDMyZjVjMWY0MWY3LzEvbmRVRWhncDhrazV5SEwtdXBmU2Fjc2dwYkRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi80OTYyMzItZDE4Yi00NTU0LTlhNDMtNDMyZjVjMWY0MWY3
LzEvbmRVRWhncDhrazV5SEwtdXBmU2Fjc2dwYkRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg8su7i1B
7fZDWi55TPxSSBDTW4sLQV8eGmMxi3+eCq/KffBumS3N1NbWrT/c2HkOiXAAB5gY
so5jP3ypVo47DzDCAtQGl/lRk3Kcl+Ffz3403xYWOM0fifQndQ3ea7QrnW5xCR5v
HO5+RIhxOrsAbhQadZdYRb3cERpiY/tUIBtK/31dQzZq4ZeiinMbFi0COMJ3FV5P
CFxx2IHaUDx1TARGqKUTwt1koZjrbAjwgS5qS+SVPDrTXtssH7vA1ywAknqyIVZQ
ymeQiChrew/VFonhW3t1QXAK2OooEYp7TMQ2naWzZ4yYu9FuvUNAfmCk4A9j5eWQ
LvR+OuA41B1Ayw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:50 2025 by rpki-client