Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
File: NdRfKsW84Vad9rKtgNFvG5L72Fw.mft (raw, json)
Hash identifier: XGUvE2nMpraMXjD94SOF193scDRz0Gqhhf2rtDfUQGI=
Subject key identifier: 2B:45:F8:86:A8:7C:29:B3:AD:25:9F:CF:8C:EE:45:F2:0D:25:F9:70
Authority key identifier: 35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
Certificate issuer: /CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Certificate serial: 019A4E8643A44084A052503A4B1B407924D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 11:00:13 +0000
Manifest this update: Tue 04 Nov 2025 11:00:13 +0000
Manifest next update: Wed 05 Nov 2025 11:00:13 +0000
Files and hashes: 1: NdRfKsW84Vad9rKtgNFvG5L72Fw.crl (hash: P64/CAOmemkFRrrgtHnDpSuaVdjTQY9ieo3J72rpS2U=)
2: Pxn4Z0bdWmWck5jdH1FaueBsOf0.roa (hash: vg1TLVE75nnwqoL/egav334PmpcLAh17CAvdGO24png=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:43:a4:40:84:a0:52:50:3a:4b:1b:40:79:24:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Validity
Not Before: Nov 4 11:00:13 2025 GMT
Not After : Nov 5 11:00:13 2025 GMT
Subject: CN=2b45f886a87c29b3ad259fcf8cee45f20d25f970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9b:7b:f9:78:47:69:2f:eb:02:4c:82:66:b3:
54:18:ef:41:e5:55:44:b4:3e:ac:d2:f4:f6:44:71:
a2:69:8a:d2:5d:a4:fe:b4:26:c0:4c:fb:90:dd:6d:
ea:0e:0c:dd:8e:6f:9d:2c:ad:55:b4:3a:62:5c:5f:
67:c5:df:02:e7:25:c6:34:61:3a:29:a9:cc:a6:7c:
6e:fa:66:65:7a:97:4f:ad:2f:5e:bc:29:26:af:3f:
01:1f:f2:1f:66:cd:f4:91:d8:df:a1:72:c9:8d:ee:
e0:5c:ea:a4:57:68:4c:4e:25:20:de:77:a9:0b:c8:
e6:7d:c1:ea:9d:c4:52:4b:74:94:6d:36:31:0c:80:
22:b7:a1:92:2a:41:cc:af:29:da:ab:a1:3a:c7:20:
24:c2:34:f6:43:cd:38:7c:59:71:d3:73:b9:b3:ab:
9d:ad:27:87:93:ec:80:8c:a8:d6:af:fe:79:37:f9:
98:3a:ea:d3:e6:71:e9:1e:36:f3:bb:79:fa:c3:51:
80:e2:6b:c2:30:3a:41:96:f3:12:0a:74:cf:56:e3:
c4:ac:79:21:5b:55:b1:94:43:57:56:ac:eb:39:81:
8f:e1:60:da:cd:1d:fc:9c:77:68:36:7c:66:dd:77:
62:5c:d6:22:da:d8:12:7d:87:bc:93:f5:4f:e7:d9:
fb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:45:F8:86:A8:7C:29:B3:AD:25:9F:CF:8C:EE:45:F2:0D:25:F9:70
X509v3 Authority Key Identifier:
keyid:35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:08:ce:fe:4a:24:96:20:15:b9:40:8f:3c:e0:e3:0a:67:78:
f2:0d:07:2b:53:b6:93:88:34:bf:f3:7c:cb:dd:0b:c6:3b:0e:
49:af:f3:da:b0:7f:ea:34:6f:5e:84:01:26:90:9e:c9:8b:4d:
b0:7b:61:a5:9d:97:d9:b2:66:d8:68:c8:c7:76:f8:8c:39:6c:
bc:df:db:16:42:96:07:50:5b:7f:78:01:7e:16:e9:8c:4e:9d:
75:4b:da:54:f4:36:58:23:92:5e:0b:40:d5:b0:f4:27:c2:6f:
67:e1:09:04:ab:03:74:58:74:89:97:e2:b0:6f:54:87:66:ed:
10:a1:3a:a5:72:8b:6c:a4:f7:24:e0:a6:27:af:de:05:1d:a2:
c7:52:a8:25:f4:4f:8a:9d:7c:c2:1d:55:ee:6e:5c:a1:5d:25:
d6:32:dc:c0:1c:45:9d:d9:b5:3a:43:7d:d3:05:89:4e:ce:6e:
d0:26:ed:e1:65:46:65:26:97:4c:ff:cb:99:7e:42:fb:6a:e2:
c0:ed:1f:68:d7:07:b5:87:af:ed:91:18:29:38:01:d4:d5:09:
7b:77:e6:90:21:a4:bb:02:20:77:a0:54:c4:18:c0:c9:53:70:
c4:71:5c:4b:0a:06:4a:6b:bd:76:99:d2:27:10:7c:7d:d8:ee:
bf:e4:ba:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:24 2025 by rpki-client