Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
File: NdrPcDZ9CsMFpawau68jmLJtk1U.mft (raw, json)
Hash identifier: rSRigWbGNAkhw4d/iL7WMYbpk0TX3uLpxtxqJYYzuQE=
Subject key identifier: B9:E1:08:0E:C2:32:83:A3:E9:A4:2F:F2:27:50:9E:6C:1E:A3:5D:D1
Authority key identifier: 35:DA:CF:70:36:7D:0A:C3:05:A5:AC:1A:BB:AF:23:98:B2:6D:93:55
Certificate issuer: /CN=35dacf70367d0ac305a5ac1abbaf2398b26d9355
Certificate serial: 0198827996173F936094F509525FE0549FCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
Manifest number: 03B8
Signing time: Thu 07 Aug 2025 03:01:03 +0000
Manifest this update: Thu 07 Aug 2025 03:01:03 +0000
Manifest next update: Fri 08 Aug 2025 03:01:03 +0000
Files and hashes: 1: NV-I2foKzHLj-RMxKytozaQe67g.roa (hash: PhlDXyOiHHSXRcXTISte8ar8TbgSTtrPQqIchH8glHs=)
2: NdrPcDZ9CsMFpawau68jmLJtk1U.crl (hash: qTYWka9PovJ7jcojrFOsNVoFyGT6LJ/FxzIfNYVUX7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:79:96:17:3f:93:60:94:f5:09:52:5f:e0:54:9f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35dacf70367d0ac305a5ac1abbaf2398b26d9355
Validity
Not Before: Aug 7 03:01:03 2025 GMT
Not After : Aug 8 03:01:03 2025 GMT
Subject: CN=b9e1080ec23283a3e9a42ff227509e6c1ea35dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a5:ae:0d:69:7b:57:42:92:8f:b6:81:dd:08:
10:b4:17:54:05:25:dd:a3:25:94:93:4b:12:ac:a3:
30:0b:5d:09:06:18:f8:a2:eb:c6:3a:b3:80:eb:0c:
c9:e9:b7:d1:01:b9:47:bd:be:c2:97:6e:aa:bb:16:
3e:9b:5f:f5:d3:65:1f:dd:0a:36:9b:5f:92:bd:d2:
09:f9:0a:27:76:05:39:8f:ed:01:99:e1:d9:63:b3:
0a:fc:e1:86:ba:05:71:00:a6:c1:62:00:00:f4:03:
0c:4b:bb:8f:4c:7e:b3:e6:1a:3d:e7:86:96:40:e4:
8b:7c:09:05:3c:09:8c:3b:7b:ed:06:44:e7:5a:bc:
9f:7b:eb:6a:86:30:90:ad:4b:83:23:78:ff:b7:26:
20:8f:6b:70:22:3b:03:43:df:b5:f2:99:46:51:b5:
00:45:7d:1d:33:ec:25:3f:0b:7e:19:8c:30:fc:7a:
00:c1:c2:25:ab:2f:a4:42:4f:bb:f2:51:fb:5e:e5:
9f:40:92:0b:86:62:23:60:74:bb:ad:a6:8d:b3:39:
45:39:88:f4:10:10:e7:50:d0:75:0e:40:fc:24:c1:
14:e3:68:80:a4:d8:79:07:3b:24:2b:af:d3:38:22:
8c:66:f6:cf:51:c1:9e:54:31:2a:46:18:cc:5e:12:
f5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E1:08:0E:C2:32:83:A3:E9:A4:2F:F2:27:50:9E:6C:1E:A3:5D:D1
X509v3 Authority Key Identifier:
keyid:35:DA:CF:70:36:7D:0A:C3:05:A5:AC:1A:BB:AF:23:98:B2:6D:93:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:bd:8b:46:03:e9:2b:d5:6e:0f:90:aa:d4:6f:d7:bf:81:16:
81:3b:a3:8b:19:f0:37:34:6a:e9:cd:49:25:b7:20:e4:f0:b1:
65:ce:86:1f:a8:bb:a3:34:38:b7:43:68:62:99:c1:cf:cc:af:
19:eb:8c:e4:48:b7:60:99:71:3f:dc:de:16:d9:d6:6d:b7:9f:
76:eb:77:03:5d:76:26:75:bb:03:ac:f6:9f:1a:80:29:26:c4:
50:de:5a:5f:2a:c0:08:cd:04:d9:9e:fe:04:10:00:79:91:41:
87:34:34:42:6c:b9:ee:0b:aa:9b:67:f2:37:d2:7b:41:be:bc:
7a:0d:64:0e:db:d1:96:4c:72:a2:79:92:0b:54:39:ab:34:af:
9f:32:01:d7:a1:3f:07:4f:01:9e:e2:1b:03:e9:0e:f5:9b:fe:
31:43:51:24:a0:75:b6:ba:ec:12:1b:f4:e0:2d:3f:03:f7:a7:
83:0b:07:19:4f:ce:a1:a9:ff:69:7a:37:13:1b:e8:bf:2e:25:
5a:4a:fd:f9:9a:ea:02:31:f2:b4:0f:a2:79:14:30:3b:64:56:
f3:f2:03:1f:c1:5e:7c:50:68:56:78:94:f6:1b:af:7f:a2:27:
cb:5f:9e:17:75:51:c8:a8:2f:65:1d:b0:41:e3:c0:c7:d9:cb:
5b:54:92:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:16:37 2025 by rpki-client