Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
File: NdrPcDZ9CsMFpawau68jmLJtk1U.mft (raw, json)
Hash identifier: hID5moxt/tEfLjk7OeffqFkU13OM7wJt5kc2G/ga0WM=
Subject key identifier: 1E:9B:7B:A1:F4:B2:EC:FC:F0:B2:38:83:54:53:3A:50:E4:4A:2A:1E
Authority key identifier: 35:DA:CF:70:36:7D:0A:C3:05:A5:AC:1A:BB:AF:23:98:B2:6D:93:55
Certificate issuer: /CN=35dacf70367d0ac305a5ac1abbaf2398b26d9355
Certificate serial: 019A500714649130F42E180839EE14FAB8F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
Manifest number: 04A7
Signing time: Tue 04 Nov 2025 18:00:32 +0000
Manifest this update: Tue 04 Nov 2025 18:00:32 +0000
Manifest next update: Wed 05 Nov 2025 18:00:32 +0000
Files and hashes: 1: NV-I2foKzHLj-RMxKytozaQe67g.roa (hash: PhlDXyOiHHSXRcXTISte8ar8TbgSTtrPQqIchH8glHs=)
2: NdrPcDZ9CsMFpawau68jmLJtk1U.crl (hash: vJMK1A9zvYC8spkXt4Mrdt5IKQJNN2ZbTSOwHaaiARo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:14:64:91:30:f4:2e:18:08:39:ee:14:fa:b8:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35dacf70367d0ac305a5ac1abbaf2398b26d9355
Validity
Not Before: Nov 4 18:00:32 2025 GMT
Not After : Nov 5 18:00:32 2025 GMT
Subject: CN=1e9b7ba1f4b2ecfcf0b2388354533a50e44a2a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4f:39:28:e4:68:fe:f3:a8:58:b3:c7:64:30:
20:a6:0f:71:8a:42:06:4e:c2:1f:25:4b:bc:fc:82:
11:4a:73:c1:24:58:89:58:6e:f7:a6:93:d5:39:78:
2b:2a:4c:26:d8:c6:72:4f:62:0b:a2:13:43:a7:c4:
cc:2f:a2:29:18:b0:a0:43:5d:a8:e7:2e:be:2a:65:
96:4a:73:cd:7f:8a:a8:20:af:23:56:1f:ce:e2:12:
bd:2e:45:57:c2:5a:c0:c0:67:ad:51:5d:43:66:54:
52:67:a4:1a:6e:e2:2f:5d:e0:6b:fd:f9:4d:38:39:
04:5a:68:33:3b:48:07:4f:03:82:72:b0:ae:57:c7:
d7:e9:6c:57:8f:f5:48:d8:da:37:e9:5c:33:d4:57:
64:b8:5b:30:9e:b1:f0:e1:44:a9:86:e0:de:81:81:
9e:d6:b8:a2:83:be:54:ee:2a:25:72:17:8f:18:d1:
f6:c5:92:b8:26:0f:38:56:f7:15:66:5f:1f:2e:b1:
5c:30:d8:90:25:ea:1b:b2:b0:94:4e:f1:7e:67:91:
cc:ee:68:93:ef:18:13:5d:19:60:e8:fd:6f:88:5b:
d5:c6:35:c8:01:06:71:a9:b0:50:3c:9e:be:81:97:
c2:b6:e8:42:ca:ce:d6:59:1b:12:42:38:3d:a6:d1:
90:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:9B:7B:A1:F4:B2:EC:FC:F0:B2:38:83:54:53:3A:50:E4:4A:2A:1E
X509v3 Authority Key Identifier:
keyid:35:DA:CF:70:36:7D:0A:C3:05:A5:AC:1A:BB:AF:23:98:B2:6D:93:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:19:61:6d:94:7e:ca:6b:07:d7:a1:1a:df:eb:73:4a:64:67:
ae:5e:59:8f:0f:50:1d:c0:74:3c:d4:ee:38:a7:a7:70:7e:9d:
1b:4d:6a:e6:ad:89:be:c3:fd:56:3a:86:9a:b5:3b:ab:b6:cc:
56:67:eb:08:4e:6b:79:7a:0b:83:7f:e9:ed:37:51:c3:95:13:
df:87:7a:85:a4:0b:28:0e:0d:4c:18:77:30:16:41:db:7b:56:
88:43:c1:94:e8:94:6f:f6:4b:4e:d7:60:2f:16:de:28:57:69:
e0:c6:56:fc:e6:52:6d:72:be:10:e7:44:f0:47:27:84:bb:91:
b8:69:8b:3e:03:56:a6:48:22:a4:ed:f8:8b:50:92:de:0f:05:
de:8b:68:16:a0:76:9a:27:75:eb:54:03:34:74:c3:7e:c4:ec:
4d:57:d6:17:7d:60:fd:65:05:16:cc:92:0e:8f:3b:bb:65:f3:
5d:da:b2:50:dd:e0:4b:bd:53:f9:35:64:77:59:71:9f:47:6c:
9f:0f:c2:f6:aa:5a:40:3e:b6:a6:bf:f6:43:5e:8c:97:2d:33:
cb:79:20:ce:84:36:07:75:c6:3e:46:44:aa:35:5c:3e:3f:a2:
99:0d:ef:8b:23:53:4f:da:c3:84:fb:c4:ac:2b:d0:21:da:a9:
41:4e:b1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:45:58 2025 by rpki-client