Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft
File: NdHNq6MVWd4SqxnXnxri0hjDefc.mft (raw, json)
Hash identifier: bKvk+gwhtYL9qHBtDCp+v3ALazkx64RKMeP1njhtN7Q=
Subject key identifier: 9E:61:41:C3:A6:F7:75:4A:23:E6:3D:FA:6D:C3:36:19:E0:F1:92:51
Authority key identifier: 35:D1:CD:AB:A3:15:59:DE:12:AB:19:D7:9F:1A:E2:D2:18:C3:79:F7
Certificate issuer: /CN=35d1cdaba31559de12ab19d79f1ae2d218c379f7
Certificate serial: 019A51511457405DD3CF154E91A184166F6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdHNq6MVWd4SqxnXnxri0hjDefc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 00:00:59 +0000
Manifest this update: Wed 05 Nov 2025 00:00:59 +0000
Manifest next update: Thu 06 Nov 2025 00:00:59 +0000
Files and hashes: 1: HI5bhroHTAd2JOvu5YSZV3u06FM.roa (hash: Sccuti/fJ5690EYg+UXdl+hwT8LmoHMXCPxrbV1XvfA=)
2: NdHNq6MVWd4SqxnXnxri0hjDefc.crl (hash: 0IO95A2zenchcqZJxllrT/kmbuo8m7jpCzfZPgOqrME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdHNq6MVWd4SqxnXnxri0hjDefc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:14:57:40:5d:d3:cf:15:4e:91:a1:84:16:6f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d1cdaba31559de12ab19d79f1ae2d218c379f7
Validity
Not Before: Nov 5 00:00:59 2025 GMT
Not After : Nov 6 00:00:59 2025 GMT
Subject: CN=9e6141c3a6f7754a23e63dfa6dc33619e0f19251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7d:44:47:a7:a8:89:21:24:16:45:2c:6c:1a:
ce:1f:34:d1:4f:b7:c3:66:1b:b9:c0:04:7e:c5:d7:
43:3b:6e:8d:30:e1:96:b0:ff:2d:3d:4c:23:34:e1:
24:b5:26:ea:b4:a6:1e:5b:66:89:75:71:b4:b3:2d:
2a:9e:84:81:68:b1:4b:90:93:35:ef:26:f7:6c:b2:
16:d8:61:08:03:5b:c1:de:6d:ff:78:ec:4e:74:b6:
01:6e:d7:1c:d1:d1:4c:5d:8a:29:57:9a:e3:96:c1:
0f:7d:bf:e2:24:21:5c:88:cb:50:62:3f:e6:f3:06:
41:5f:0c:88:48:40:a2:5b:49:8f:35:ad:33:56:b7:
11:19:a9:6b:2d:52:ee:19:bf:87:9d:ab:72:03:2f:
68:b7:47:9c:a3:d6:c2:98:8e:83:6f:c3:23:f3:05:
da:94:b2:a3:a2:72:b6:c4:85:ab:f4:99:b9:06:29:
24:36:98:57:15:3a:73:94:c5:1d:42:ce:06:3d:9f:
18:7f:aa:cc:8d:f0:ed:75:d5:23:77:4a:cf:18:8f:
56:88:4a:a3:c6:c3:58:14:6d:d1:e0:d5:94:f7:4d:
3f:4e:04:44:64:b9:d6:88:0f:a6:80:50:80:3f:73:
d9:43:8a:cd:2d:10:91:86:a6:63:1c:46:f7:5b:f4:
73:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:61:41:C3:A6:F7:75:4A:23:E6:3D:FA:6D:C3:36:19:E0:F1:92:51
X509v3 Authority Key Identifier:
keyid:35:D1:CD:AB:A3:15:59:DE:12:AB:19:D7:9F:1A:E2:D2:18:C3:79:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdHNq6MVWd4SqxnXnxri0hjDefc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f1edc0-63c1-42b4-a040-3ff926085527/1/NdHNq6MVWd4SqxnXnxri0hjDefc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:9f:44:cc:cc:f0:29:e5:12:f1:8f:07:f2:30:7e:73:bd:d2:
14:e5:c8:4d:4e:9e:19:c7:ef:bf:13:97:25:f5:40:42:3d:ff:
5b:16:44:87:1a:2d:f0:5f:95:08:d5:37:27:96:8e:5e:b4:e7:
b9:a7:f7:36:3d:cb:fb:4a:e6:de:9c:56:e5:e2:7b:c4:1a:c4:
a7:ee:91:73:f8:63:13:82:5b:ae:e8:70:e2:6b:d3:80:bc:3a:
d2:29:f2:30:e6:89:1a:52:5c:4f:5c:bd:f7:ad:bc:19:bf:9a:
22:22:0e:2a:e7:39:d9:f2:1f:8c:f3:76:44:30:e1:31:94:c5:
69:78:65:24:10:8f:3d:e6:b3:2a:19:97:40:08:97:0e:a8:0b:
6d:8a:8b:b6:f6:ba:34:ae:62:ac:12:ce:4a:05:5c:59:98:67:
75:f3:f3:04:70:40:86:7c:92:08:47:d8:48:e2:f3:e5:d0:69:
21:e7:c2:67:08:ed:c8:4e:ba:29:1f:95:27:b6:ca:ae:db:29:
ca:4b:9d:bf:44:f2:dc:ed:ff:57:d2:c4:7b:7f:63:46:e7:48:
c3:fa:94:1b:a5:a9:0a:59:11:8a:1f:f8:5e:11:71:23:8d:97:
27:f3:01:76:1c:a7:0a:1a:09:3a:f0:db:af:32:51:4d:fc:65:
70:0b:71:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:35 2025 by rpki-client