Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
File: NdhRwRSj93nqgCV7HuGCas2uSk4.mft (raw, json)
Hash identifier: EgL8Ms9ELqVvqjZrl+snR9nAtMd7XhNbcNGniNAADCY=
Subject key identifier: 33:13:FF:1B:3C:29:37:56:3D:E5:89:3E:B7:72:27:55:3D:08:3A:DA
Authority key identifier: 35:D8:51:C1:14:A3:F7:79:EA:80:25:7B:1E:E1:82:6A:CD:AE:4A:4E
Certificate issuer: /CN=35d851c114a3f779ea80257b1ee1826acdae4a4e
Certificate serial: 019894EDD1DB1CD14F62606DEAE44F2073D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
Manifest number: 1627
Signing time: Sun 10 Aug 2025 17:01:10 +0000
Manifest this update: Sun 10 Aug 2025 17:01:10 +0000
Manifest next update: Mon 11 Aug 2025 17:01:10 +0000
Files and hashes: 1: NdhRwRSj93nqgCV7HuGCas2uSk4.crl (hash: IOkhI8Gta56+Qp69D7x9ExtCnA2MLJwuGcIYqURrjo0=)
2: QIqKLnFZSvkIdztpTOrghmndfqs.roa (hash: wHBtvNsb06U7COg9JhFFEVNmIo0CSx+CQSOErCnUsO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:ed:d1:db:1c:d1:4f:62:60:6d:ea:e4:4f:20:73:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d851c114a3f779ea80257b1ee1826acdae4a4e
Validity
Not Before: Aug 10 17:01:10 2025 GMT
Not After : Aug 11 17:01:10 2025 GMT
Subject: CN=3313ff1b3c2937563de5893eb77227553d083ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c3:06:12:e2:10:d9:51:63:3e:33:3f:85:c4:
c0:ff:41:af:cd:58:23:49:6d:1c:6f:2a:18:b8:4d:
9c:26:65:26:1b:c8:cf:48:e7:db:3a:8f:59:2b:80:
e0:fe:31:f2:db:37:2f:ac:49:9f:4a:f9:c8:78:6a:
b7:04:7e:cb:a6:66:ec:15:ce:2a:56:4c:19:b9:59:
08:e2:7c:39:5d:0d:16:43:ad:01:49:7c:1a:19:8b:
09:d2:a4:ab:04:fe:54:30:cf:c9:0b:03:45:0c:16:
59:b5:3b:0b:90:b6:d4:39:24:19:bf:16:b0:50:95:
63:d8:53:cb:45:e6:dd:e4:3c:ab:5c:a4:8b:ba:ee:
52:9c:87:e0:3c:9c:e9:dc:20:a8:18:e4:51:13:5e:
60:ec:e6:d8:0d:2d:dc:79:6e:c2:bb:81:37:87:7e:
87:92:dc:44:96:ae:13:28:73:ec:d3:f9:34:e7:5a:
86:8b:9f:2b:a6:21:6d:6e:4d:1b:da:f0:b0:13:d7:
86:40:91:33:ee:15:03:2f:65:88:10:81:2f:f0:8f:
78:7e:d4:69:82:25:cb:ae:22:de:76:27:ec:09:5b:
41:12:80:99:37:f9:27:91:01:3a:9e:ed:35:2e:85:
6a:7e:62:55:2e:44:14:b4:97:01:0b:22:13:ea:90:
f4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:13:FF:1B:3C:29:37:56:3D:E5:89:3E:B7:72:27:55:3D:08:3A:DA
X509v3 Authority Key Identifier:
keyid:35:D8:51:C1:14:A3:F7:79:EA:80:25:7B:1E:E1:82:6A:CD:AE:4A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdhRwRSj93nqgCV7HuGCas2uSk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fffee1-bd46-4523-9eca-705563137d7a/1/NdhRwRSj93nqgCV7HuGCas2uSk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ee:c4:c0:fc:7f:53:ed:e2:bd:88:0b:4f:74:98:1a:0d:5d:
31:1c:d0:6f:20:83:85:b7:6f:90:95:ec:12:70:8b:4c:10:a5:
80:b2:86:19:66:67:e5:04:6b:8e:17:27:30:2b:46:87:54:20:
87:bb:e7:31:b2:a9:e9:3f:f4:f9:76:52:49:fc:c5:53:d5:20:
ff:db:7e:07:b6:aa:1f:6e:7e:15:b6:ac:e9:2d:5e:86:87:c5:
f9:c3:5b:c5:dc:90:89:99:3a:91:e8:b0:f3:1d:01:b9:d8:e5:
cf:e9:10:3e:a6:69:52:15:53:1c:a9:1a:c7:27:3c:6c:30:66:
1d:0e:04:01:16:84:ea:b6:45:77:5c:64:59:da:fa:cd:7b:08:
65:75:b0:d6:f3:05:dc:a8:2a:80:59:75:c4:ca:4d:cf:09:f5:
22:92:28:03:03:76:9d:5f:7b:0b:1c:7d:ba:57:09:2d:fb:32:
81:2b:cf:52:6d:96:ca:d4:ea:98:67:1f:43:04:4b:60:f7:c6:
3a:0d:b1:fd:8b:52:a1:fb:9a:61:a1:8d:3a:d3:d8:9d:a3:9d:
f1:22:fb:00:0b:16:9f:97:66:7b:a6:75:d3:ff:cf:08:ca:15:
91:a9:52:57:f9:a8:9f:fc:2f:47:a2:9e:bd:6d:60:b3:cc:21:
c1:6a:2a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:47:11 2025 by rpki-client