Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
File: ndUEhgp8kk5yHL-upfSacsgpbDU.mft (raw, json)
Hash identifier: 666dDymBMfwtKtMDzgmqt32sPPRRoJ9BKyOydLbCPQo=
Subject key identifier: 37:E3:1A:E4:08:4A:EA:E1:6A:94:9C:05:A0:0A:9A:48:C8:70:F8:B7
Authority key identifier: 9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
Certificate issuer: /CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Certificate serial: 019A4EF4FD18538EF43A351C1F6EBF9F2C51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
Manifest number: 144D
Signing time: Tue 04 Nov 2025 13:01:09 +0000
Manifest this update: Tue 04 Nov 2025 13:01:09 +0000
Manifest next update: Wed 05 Nov 2025 13:01:09 +0000
Files and hashes: 1: X5jYbn-h_3ZrymXeQcutqUSQLI0.roa (hash: m8dLiyB+f2bY0CN3q6gxqkEWD+kF5d7UEcU/fd6EB40=)
2: nO41lzHTLA0qnXGNSido0EKnbG8.roa (hash: p9hF7X8F0vCkUimBjAw1aM4Oym1MBxjaah21sqRzrUE=)
3: ndUEhgp8kk5yHL-upfSacsgpbDU.crl (hash: Ynyf0PaWUieqHOMMyT12ypKeEfuBi8GPWMQnfk9e9a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:fd:18:53:8e:f4:3a:35:1c:1f:6e:bf:9f:2c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd504860a7c924e721cbfaea5f49a72c8296c35
Validity
Not Before: Nov 4 13:01:09 2025 GMT
Not After : Nov 5 13:01:09 2025 GMT
Subject: CN=37e31ae4084aeae16a949c05a00a9a48c870f8b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0e:f6:e4:61:7c:9c:cc:55:d4:42:9c:fa:d9:
c9:b5:81:21:da:04:01:66:cf:1c:f2:8e:0d:6b:4e:
64:aa:ea:57:cd:9b:62:88:c1:ca:a3:f1:5c:71:ca:
13:89:cd:98:67:b8:b0:55:dc:11:e1:29:87:1a:70:
d4:73:fd:0f:d6:82:fc:d6:0d:03:f3:cb:cf:01:49:
6d:70:ee:d0:a4:fb:91:fe:60:0e:87:1a:25:48:87:
33:52:1a:eb:68:c3:58:99:4f:22:66:7a:5c:5a:8e:
95:54:c4:34:4a:db:99:b7:3a:b2:77:3b:bb:7d:26:
c6:a6:36:c6:66:8d:16:d4:f8:87:58:ce:61:b2:b9:
16:ed:dd:39:b6:95:85:67:f6:83:7c:2b:56:46:92:
a6:29:e0:0f:1e:96:51:e6:2c:5a:7b:21:10:24:8a:
8e:06:c6:56:50:f9:f1:4b:d4:1d:d2:59:4d:ec:e4:
73:61:04:9b:8f:6c:4c:e0:3d:65:99:4e:f6:55:88:
ca:fe:1c:50:1e:3c:a4:b1:95:aa:7a:0d:10:56:f9:
44:7a:d5:5f:fc:6c:2c:4c:b3:0f:d7:68:c3:a3:e4:
ae:c2:fb:00:1c:38:44:15:7b:59:bf:0f:51:50:56:
35:ff:92:f1:47:c5:2a:9e:87:27:ff:d1:39:ab:18:
43:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E3:1A:E4:08:4A:EA:E1:6A:94:9C:05:A0:0A:9A:48:C8:70:F8:B7
X509v3 Authority Key Identifier:
keyid:9D:D5:04:86:0A:7C:92:4E:72:1C:BF:AE:A5:F4:9A:72:C8:29:6C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndUEhgp8kk5yHL-upfSacsgpbDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/496232-d18b-4554-9a43-432f5c1f41f7/1/ndUEhgp8kk5yHL-upfSacsgpbDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:7c:1a:fb:6d:a6:7a:d3:f1:0d:46:f5:44:f7:bb:37:95:f9:
b5:8c:75:98:66:a2:18:c6:95:bf:7d:e5:06:d3:76:84:fb:d4:
ca:fc:83:86:f1:39:9c:f2:18:b3:eb:62:bd:8d:ef:da:18:5b:
c1:94:fd:07:51:51:d8:cf:e4:63:40:97:48:48:29:33:10:c0:
61:21:ee:3a:23:4d:90:09:4e:e8:02:ef:c2:c8:eb:b3:46:85:
01:f7:ee:7b:5d:47:87:4a:eb:47:79:d5:ee:86:0e:92:51:d8:
3a:e4:b9:ce:8c:ca:86:c1:12:dd:87:5a:3d:0e:06:ac:b3:4c:
bf:60:55:ca:e3:54:f9:67:46:3a:aa:3a:ba:63:d6:18:fb:4c:
a4:72:c6:e8:a5:ff:2f:b7:f2:7c:5a:f6:24:1b:2c:2f:4f:8a:
32:84:d6:8d:ad:e1:54:07:0d:c2:3d:cf:6f:d3:fa:20:7d:4a:
f3:51:13:11:64:a9:7e:b4:20:da:b3:1f:07:98:3c:ec:bc:c6:
3d:25:45:70:c9:49:60:0d:80:ea:65:65:c9:7e:7e:6c:50:fe:
4a:88:80:9c:6c:d2:4f:b0:2a:a0:c2:12:d2:09:a7:ee:fe:15:
5c:3e:45:f9:26:49:1b:27:38:71:1b:8c:14:71:33:ca:38:19:
ab:ec:4c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:22:26 2025 by rpki-client