Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
File: _Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft (raw, json)
Hash identifier: BoU2MYsVEph6Ybf8fKqVaJSVxIp9ykGQIx1hzUi8nbU=
Subject key identifier: 71:C8:CF:D7:79:2D:AD:76:02:F7:5B:6D:E2:1C:A6:3A:FA:3A:63:3D
Authority key identifier: FC:D7:7E:68:77:82:98:33:04:33:33:53:8B:47:F1:26:82:CE:BD:C3
Certificate issuer: /CN=fcd77e6877829833043333538b47f12682cebdc3
Certificate serial: 0197B6D763FE1A4E9DF8FAD41D73F53DBF4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
Manifest number: 0435
Signing time: Sat 28 Jun 2025 14:00:58 +0000
Manifest this update: Sat 28 Jun 2025 14:00:58 +0000
Manifest next update: Sun 29 Jun 2025 14:00:58 +0000
Files and hashes: 1: _Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl (hash: /BQt/pH2oTsAtfq0B8DdUUkjtixnNa3Jd/35yQRkMP8=)
2: nVML7LcRQkLl4LsQylRXZkNhkNs.roa (hash: aP+8mW119fycA5Li+oipfw+Kb6S3KHGW180HDqCC2II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:63:fe:1a:4e:9d:f8:fa:d4:1d:73:f5:3d:bf:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd77e6877829833043333538b47f12682cebdc3
Validity
Not Before: Jun 28 14:00:58 2025 GMT
Not After : Jun 29 14:00:58 2025 GMT
Subject: CN=71c8cfd7792dad7602f75b6de21ca63afa3a633d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f3:aa:ec:cd:87:35:4f:7c:52:09:c2:b9:eb:
85:96:a8:3d:35:0e:e6:a3:24:af:1e:a2:36:f3:71:
dc:15:82:c2:ce:7b:46:ab:8d:bc:f8:6d:8a:d6:a3:
63:18:17:6e:44:29:49:79:cf:e3:af:8e:a5:a6:79:
8b:56:d5:64:e4:dc:72:e0:e8:84:39:a0:85:b2:86:
e6:fb:39:a8:b4:34:aa:6e:66:0a:ca:c6:ae:c4:d6:
5d:27:1f:33:f5:72:a9:a4:0b:61:d8:5a:3b:a6:64:
ea:2b:f1:da:c2:ea:ed:f2:60:b9:c1:fc:8f:96:25:
f0:ec:ee:cc:31:8b:52:2c:a8:5a:bb:5e:e6:60:af:
e2:24:80:86:93:27:09:45:80:ad:f0:7f:12:dc:8a:
b8:94:ec:c2:07:cc:cb:78:24:ab:dc:5a:4a:e7:45:
2a:ef:72:77:d3:20:42:95:64:05:e9:92:76:e3:1a:
96:41:a7:f3:07:de:3c:59:36:4c:16:60:23:6f:61:
02:a9:d7:d1:f2:22:a6:d5:e5:50:ed:aa:09:9f:24:
ae:e9:b1:39:7b:34:dd:bb:b9:fb:1f:97:cf:87:a2:
aa:92:3e:ee:ff:40:67:d8:e9:21:9e:ab:54:11:81:
33:79:92:9b:c9:b6:07:3c:a9:d7:c5:91:ad:20:90:
fc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C8:CF:D7:79:2D:AD:76:02:F7:5B:6D:E2:1C:A6:3A:FA:3A:63:3D
X509v3 Authority Key Identifier:
keyid:FC:D7:7E:68:77:82:98:33:04:33:33:53:8B:47:F1:26:82:CE:BD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:1f:b3:75:56:c6:22:f5:18:a0:8b:1b:70:da:b7:ab:a4:45:
f4:81:0f:72:58:4d:e8:8d:c5:ad:14:4d:86:d5:c9:49:7c:2b:
de:87:dd:dc:20:fd:2d:8a:87:fe:16:a0:9b:cf:9d:8a:03:d5:
94:f4:a1:0f:b2:05:49:aa:b8:c7:d1:60:8c:ea:2c:b0:bf:09:
6c:cd:37:14:5b:8c:2e:b7:d4:2f:df:8f:ec:ef:15:ac:34:ac:
74:c4:57:09:f7:8b:6f:49:ee:9d:18:18:4b:eb:3b:51:26:f0:
45:84:e6:44:a3:6e:7b:a2:62:fe:e7:8c:28:1d:47:c1:43:8f:
2b:57:63:2f:77:af:0d:cc:89:5b:2c:44:a8:6a:aa:3b:1e:e6:
79:fd:56:4a:f0:2f:b0:c5:3e:43:4a:5e:02:e0:c2:33:35:09:
53:72:4f:94:f6:26:48:2f:8d:ae:da:c4:15:75:29:7d:c1:a5:
0e:37:2b:7c:8b:83:e1:39:3f:54:45:65:6b:ad:99:e3:5e:bf:
00:f6:bf:14:92:62:46:33:c2:61:a9:ed:77:35:de:d2:ee:87:
39:e4:4e:60:7d:ad:20:ec:68:fe:f2:c2:d0:3e:4c:36:1e:32:
89:bf:d6:53:4a:aa:56:27:67:51:72:9f:63:58:46:be:eb:21:
71:3d:9e:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe212P+Gk6d+PrUHXP1Pb9OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZDc3ZTY4Nzc4Mjk4MzMwNDMzMzM1MzhiNDdmMTI2ODJj
ZWJkYzMwHhcNMjUwNjI4MTQwMDU4WhcNMjUwNjI5MTQwMDU4WjAzMTEwLwYDVQQD
Eyg3MWM4Y2ZkNzc5MmRhZDc2MDJmNzViNmRlMjFjYTYzYWZhM2E2MzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6/Oq7M2HNU98UgnCueuFlqg9NQ7m
oySvHqI283HcFYLCzntGq428+G2K1qNjGBduRClJec/jr46lpnmLVtVk5Nxy4OiE
OaCFsobm+zmotDSqbmYKysauxNZdJx8z9XKppAth2Fo7pmTqK/Hawurt8mC5wfyP
liXw7O7MMYtSLKhau17mYK/iJICGkycJRYCt8H8S3Iq4lOzCB8zLeCSr3FpK50Uq
73J30yBClWQF6ZJ24xqWQafzB948WTZMFmAjb2ECqdfR8iKm1eVQ7aoJnySu6bE5
ezTdu7n7H5fPh6Kqkj7u/0Bn2OkhnqtUEYEzeZKbybYHPKnXxZGtIJD8mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHIz9d5La12AvdbbeIcpjr6OmM9MB8GA1UdIwQY
MBaAFPzXfmh3gpgzBDMzU4tH8SaCzr3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX05kLWFIZUNtRE1FTXpOVGkwZnhKb0xPdmNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xZWQxZjYtMDlkNy00Mjk0LTkyYjQt
ZTU1MTc0NWQyNzZlLzEvX05kLWFIZUNtRE1FTXpOVGkwZnhKb0xPdmNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8xZWQxZjYtMDlkNy00Mjk0LTkyYjQtZTU1MTc0NWQyNzZl
LzEvX05kLWFIZUNtRE1FTXpOVGkwZnhKb0xPdmNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMB+zdVbG
IvUYoIsbcNq3q6RF9IEPclhN6I3FrRRNhtXJSXwr3ofd3CD9LYqH/hagm8+digPV
lPShD7IFSaq4x9FgjOossL8JbM03FFuMLrfUL9+P7O8VrDSsdMRXCfeLb0nunRgY
S+s7USbwRYTmRKNue6Ji/ueMKB1HwUOPK1djL3evDcyJWyxEqGqqOx7mef1WSvAv
sMU+Q0peAuDCMzUJU3JPlPYmSC+NrtrEFXUpfcGlDjcrfIuD4Tk/VEVla62Z416/
APa/FJJiRjPCYantdzXe0u6HOeROYH2tIOxo/vLC0D5MNh4yib/WU0qqVidnUXKf
Y1hGvushcT2ebQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:16:21 2025 by rpki-client