Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
File: NdRfKsW84Vad9rKtgNFvG5L72Fw.mft (raw, json)
Hash identifier: k0MUizK22gcgfJ8bkl+luZt4Rw1A/AX02+ZPJbWNi0w=
Subject key identifier: C8:06:E6:4F:67:73:27:A9:7F:43:91:7F:1F:BE:55:D9:A0:35:49:1F
Authority key identifier: 35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
Certificate issuer: /CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Certificate serial: 01988AA0BDBAF2D8D4E82FDFD27AD6FCA5C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
Manifest number: 1622
Signing time: Fri 08 Aug 2025 17:00:46 +0000
Manifest this update: Fri 08 Aug 2025 17:00:46 +0000
Manifest next update: Sat 09 Aug 2025 17:00:46 +0000
Files and hashes: 1: NdRfKsW84Vad9rKtgNFvG5L72Fw.crl (hash: im/lSeEXl5N8DtNVI2EJVrqCpQBR6yzTIrmPXx7O09I=)
2: Pxn4Z0bdWmWck5jdH1FaueBsOf0.roa (hash: vg1TLVE75nnwqoL/egav334PmpcLAh17CAvdGO24png=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:a0:bd:ba:f2:d8:d4:e8:2f:df:d2:7a:d6:fc:a5:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Validity
Not Before: Aug 8 17:00:46 2025 GMT
Not After : Aug 9 17:00:46 2025 GMT
Subject: CN=c806e64f677327a97f43917f1fbe55d9a035491f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:03:3f:30:46:06:55:46:06:9f:fc:2f:6d:3e:
c6:5a:2f:01:b5:47:ef:93:9e:f3:d4:3f:4e:73:00:
b9:91:52:33:a3:65:39:97:2f:be:67:b9:64:af:9e:
58:ba:52:e2:b3:38:2e:02:f6:c3:ca:b1:04:41:1a:
a5:68:92:53:b7:19:50:b0:5b:db:d5:f9:0b:5e:90:
8d:3f:5b:53:d1:87:04:f5:ad:3b:b5:7a:dd:22:05:
9a:ff:d1:74:ec:d6:8e:5a:0b:91:b9:2b:03:a0:d5:
dd:81:0b:1f:5d:f9:1f:9e:bd:cd:51:00:e1:e2:5e:
6f:f3:49:b7:50:e6:98:91:00:37:bf:28:f8:2f:56:
c3:6a:31:0c:f3:30:fb:b1:f3:6f:91:2c:e1:df:c4:
00:39:8a:dd:4c:55:03:eb:66:50:3d:cf:7c:6d:44:
a6:4c:e2:73:ea:be:7b:f1:d6:a0:74:79:0d:a7:b3:
46:b5:61:4a:3d:65:45:08:e3:6a:ae:52:c6:0d:e2:
e9:e3:c9:7a:58:27:5f:a3:83:49:b8:80:ed:5a:9a:
7d:47:a7:c2:fd:b7:27:4d:fc:9f:7d:fb:9e:a5:37:
1d:7f:03:76:dc:a6:81:1c:85:38:55:12:42:2d:7f:
a0:22:2d:11:01:5d:d9:4c:29:bf:01:9c:30:04:75:
21:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:06:E6:4F:67:73:27:A9:7F:43:91:7F:1F:BE:55:D9:A0:35:49:1F
X509v3 Authority Key Identifier:
keyid:35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a9:a8:a4:c6:e0:1e:69:3d:2e:ec:c1:36:c9:48:f3:eb:a2:
99:cb:d1:ed:06:c0:a8:f9:c7:80:0f:ce:cb:a6:49:e5:33:bd:
d9:8b:e8:db:fd:b0:45:9c:fb:a5:46:82:ae:db:96:27:b4:58:
b5:4a:72:8a:6a:37:3b:e6:b2:19:b9:8d:47:d9:13:81:c3:cd:
af:32:b2:30:d4:6b:5c:dd:ff:03:82:26:fd:57:16:55:a2:73:
a8:18:57:42:28:da:a2:db:65:2f:50:df:60:4b:dc:be:0c:d8:
17:ab:ce:ea:b7:cb:de:06:f2:2b:e6:1f:22:0a:62:1a:41:5d:
52:c3:ac:52:eb:88:aa:98:dc:7e:93:59:e9:76:d8:00:02:20:
d3:f0:ac:44:25:e0:bc:52:72:0e:73:00:1a:46:eb:d5:a8:4c:
eb:d7:1c:e5:a8:8c:b1:75:24:07:4e:de:59:be:12:96:8f:9c:
45:e5:ae:5e:45:44:72:87:e4:b9:2f:ae:0d:7d:37:ce:82:8f:
72:ff:93:1a:32:c6:1c:48:aa:b8:45:da:14:ed:ed:22:bf:be:
7c:4d:fb:50:d5:bd:48:3b:9e:95:59:2e:1f:26:e4:2b:c9:56:
3d:3d:bb:9c:a5:dd:5d:3d:b3:b7:44:9f:90:9b:59:3b:ec:cb:
4e:75:34:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:51:29 2025 by rpki-client