Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
File: ndUEhgp8kk5yHL-upfSacsgpbDU.mft (raw, json)
Hash identifier: EE8Kz45Wj4nBFvl28Quq1/MoeSw//F0duQC+Phoor9I=
Subject key identifier: AC:E4:97:C0:59:A4:D5:33:83:A6:CC:C4:61:36:34:97:25:2E:08:EF
Authority key identifier: 9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
Certificate issuer: /CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Certificate serial: 01988355F7C5901260C0DEDFFB1F916FA65B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
Manifest number: 135F
Signing time: Thu 07 Aug 2025 07:01:45 +0000
Manifest this update: Thu 07 Aug 2025 07:01:45 +0000
Manifest next update: Fri 08 Aug 2025 07:01:45 +0000
Files and hashes: 1: X5jYbn-h_3ZrymXeQcutqUSQLI0.roa (hash: m8dLiyB+f2bY0CN3q6gxqkEWD+kF5d7UEcU/fd6EB40=)
2: nO41lzHTLA0qnXGNSido0EKnbG8.roa (hash: p9hF7X8F0vCkUimBjAw1aM4Oym1MBxjaah21sqRzrUE=)
3: ndUEhgp8kk5yHL-upfSacsgpbDU.crl (hash: 0Ediq+skCr2Xk0wvagYfeZeeOxeuxdIkdQ/EqzcGu/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:55:f7:c5:90:12:60:c0:de:df:fb:1f:91:6f:a6:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Validity
Not Before: Aug 7 07:01:45 2025 GMT
Not After : Aug 8 07:01:45 2025 GMT
Subject: CN=ace497c059a4d53383a6ccc461363497252e08ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9f:32:f8:81:ce:9a:9d:45:60:74:e3:77:4e:
54:9e:11:ba:d3:2e:3d:41:bc:9b:27:5a:43:79:98:
d3:93:5a:0e:41:48:e6:e6:4d:76:6e:2a:0c:a7:ea:
fd:f9:35:44:26:86:15:54:77:f2:1f:bb:a1:b9:2f:
53:68:42:d8:e5:68:96:04:af:d8:1f:d6:8c:2e:18:
d4:ea:72:5c:70:0b:f3:6a:39:e1:00:ed:3c:ef:66:
5c:64:fa:c1:cd:fc:cb:ce:ff:20:5d:e5:71:45:3a:
a0:7c:04:48:83:72:bb:cf:2f:b3:b5:5f:89:d2:a6:
4f:cc:e2:f1:9c:66:e7:64:79:98:98:2a:e3:da:fd:
ca:25:3f:7c:b4:f4:e5:60:1f:0b:05:8c:42:0f:ee:
ea:36:fb:a4:7d:b1:5b:9b:7c:e4:34:89:fb:1a:1b:
a6:d7:c2:b3:f2:c2:d0:e9:64:1a:e8:02:8c:b9:64:
fd:99:b1:5a:c0:9e:dc:2f:b4:ac:6e:f0:52:fb:f8:
59:02:fe:8b:25:28:1d:cb:63:1b:2d:a1:9b:28:ba:
b2:55:2a:0b:bb:6b:00:08:a6:97:01:d7:d1:7d:fc:
10:76:ef:4e:6c:ee:80:72:c5:b7:ce:6f:4a:7b:e6:
26:47:b6:59:92:6b:48:38:57:a1:48:aa:9f:8e:39:
e2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E4:97:C0:59:A4:D5:33:83:A6:CC:C4:61:36:34:97:25:2E:08:EF
X509v3 Authority Key Identifier:
keyid:9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c1:82:c1:f1:e4:9d:5f:9b:ae:09:de:bb:6b:24:2d:1b:7b:
f1:e0:ef:ca:69:ec:7d:ab:8e:dd:54:02:86:7d:e8:f4:23:3f:
e9:e4:dd:dc:16:40:1b:e3:a4:ea:91:6a:cf:4e:56:16:82:30:
90:df:57:d9:40:cc:f8:ba:69:68:ba:a7:1d:93:81:d4:dd:bc:
db:e5:f2:94:65:88:5d:39:89:60:77:af:b4:b7:33:1d:8c:b2:
64:74:8d:32:62:12:4b:d0:a5:ad:63:b7:28:3e:f8:7a:e1:1b:
43:3b:60:3c:02:8b:6f:7c:b8:43:e1:fc:50:65:2e:42:cf:67:
7c:91:db:02:4e:54:84:7a:ee:34:a6:2c:66:13:06:97:ed:3c:
67:95:f5:9e:3e:03:b7:ab:96:c7:56:dc:79:08:60:db:f3:1a:
3c:f2:8a:bb:81:c0:f4:9d:6a:61:bf:cf:bb:70:cf:74:51:4b:
88:c8:3c:a2:48:17:ff:4d:97:cd:16:a9:0c:6f:31:a9:81:d0:
e0:e1:43:dd:ff:22:49:09:30:d7:27:ce:c8:f3:1b:ea:dd:0e:
14:97:c5:a6:1d:2a:24:1c:ab:1e:9f:13:5c:19:cb:d7:87:0d:
89:bc:36:29:22:ff:1a:46:37:07:a4:80:06:30:d0:12:fe:d8:
7d:a6:bd:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:33:50 2025 by rpki-client