Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
File: _Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft (raw, json)
Hash identifier: eZ7LRvxYv+g0JuI98uTI6woVi+8IxMvbo2+a8e06SaA=
Subject key identifier: 17:46:7B:E4:A4:06:92:CA:32:AB:DB:E3:DF:CD:F2:A9:0C:B0:52:3B
Authority key identifier: FC:D7:7E:68:77:82:98:33:04:33:33:53:8B:47:F1:26:82:CE:BD:C3
Certificate issuer: /CN=fcd77e6877829833043333538b47f12682cebdc3
Certificate serial: 0199FFFE88602ABB13E7B50B6932AA13042E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
Manifest number: 0564
Signing time: Mon 20 Oct 2025 05:01:35 +0000
Manifest this update: Mon 20 Oct 2025 05:01:35 +0000
Manifest next update: Tue 21 Oct 2025 05:01:35 +0000
Files and hashes: 1: _Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl (hash: NzPyPygGs6pV2+BDzUgWB6ejIODvWhGrgPZNhSAzGpw=)
2: nVML7LcRQkLl4LsQylRXZkNhkNs.roa (hash: aP+8mW119fycA5Li+oipfw+Kb6S3KHGW180HDqCC2II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:88:60:2a:bb:13:e7:b5:0b:69:32:aa:13:04:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd77e6877829833043333538b47f12682cebdc3
Validity
Not Before: Oct 20 05:01:35 2025 GMT
Not After : Oct 21 05:01:35 2025 GMT
Subject: CN=17467be4a40692ca32abdbe3dfcdf2a90cb0523b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b1:13:8a:39:16:ed:c5:72:de:f3:0e:1a:fd:
0f:fe:2e:0b:05:29:5c:52:4a:dd:80:29:92:f7:57:
dc:85:78:f0:1f:72:8f:a6:ef:3b:2c:15:57:0f:eb:
c5:bd:50:2f:08:7a:67:30:70:99:5a:5e:9f:ad:4c:
0a:ac:a1:2f:5f:2c:48:37:8a:2f:c1:76:ae:0e:f5:
35:d5:5c:9f:55:3d:89:72:4b:8b:6e:1a:0d:d6:95:
11:a2:8d:c2:d0:9c:67:ae:50:fa:2d:88:56:36:ff:
75:b7:b6:37:11:4a:a6:b2:f5:d8:ae:c0:ec:94:3c:
ee:36:d0:7f:05:17:22:92:be:90:be:6b:72:90:00:
08:cd:83:4c:d9:79:ee:1a:69:79:0b:77:b8:9f:81:
8d:30:54:bf:e3:7f:42:d5:82:39:f0:b7:ca:d7:f3:
a3:ac:14:79:51:17:6f:88:0d:89:01:56:88:f0:33:
93:cd:77:69:69:ba:f1:ac:e6:8d:a2:4a:aa:92:9c:
a9:60:a4:ab:9f:f7:e8:e2:9d:05:59:ec:5a:6f:e5:
99:d8:6e:b7:97:fe:4b:0d:dc:96:a5:5a:5f:9a:64:
26:a0:47:0c:1f:eb:99:e8:e5:15:1b:40:09:c4:92:
fa:33:0a:39:27:8e:d8:60:95:df:97:4d:46:b8:76:
cd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:46:7B:E4:A4:06:92:CA:32:AB:DB:E3:DF:CD:F2:A9:0C:B0:52:3B
X509v3 Authority Key Identifier:
keyid:FC:D7:7E:68:77:82:98:33:04:33:33:53:8B:47:F1:26:82:CE:BD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:57:09:a3:6d:1c:6f:4b:55:de:ed:86:d2:35:ac:b3:29:62:
1d:48:ce:7b:85:66:00:95:80:f6:98:97:28:8a:79:15:3f:1f:
81:14:31:ec:8e:9e:8a:70:c6:43:e5:29:fb:7f:d1:cd:fc:38:
0a:b6:e1:f8:b7:52:cc:82:dc:9b:4f:cc:e9:36:00:2b:a7:cb:
ca:2d:4f:48:15:46:6b:34:d0:a8:fd:f2:0b:59:fb:17:38:1c:
73:5f:75:96:05:04:cd:2e:4d:be:80:b8:a6:bb:0e:1f:9a:d1:
57:1b:91:84:06:dc:94:ce:44:5e:df:fe:a0:16:34:f4:f4:a0:
44:8a:2c:57:de:a8:f2:d2:24:f1:c3:f6:b6:0c:05:f2:f9:62:
f5:5e:a8:af:0a:41:1e:de:33:ad:dd:fa:14:2e:1d:8f:65:a9:
06:7a:58:d1:ba:71:1e:7f:8f:29:3a:f8:25:84:99:34:52:24:
10:a3:5d:0e:21:0b:79:76:ab:59:32:63:26:40:c2:9b:d9:94:
66:95:ae:78:b2:82:11:17:43:ad:eb:64:f6:b1:05:cf:8d:73:
ef:b7:0a:b2:78:db:2b:75:de:67:83:a3:1d:c6:db:fc:5e:bc:
4b:98:af:eb:3b:0f:1e:ab:c2:4d:bb:2e:fb:34:db:56:e2:35:
a4:f7:d9:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn//ohgKrsT57ULaTKqEwQuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZDc3ZTY4Nzc4Mjk4MzMwNDMzMzM1MzhiNDdmMTI2ODJj
ZWJkYzMwHhcNMjUxMDIwMDUwMTM1WhcNMjUxMDIxMDUwMTM1WjAzMTEwLwYDVQQD
EygxNzQ2N2JlNGE0MDY5MmNhMzJhYmRiZTNkZmNkZjJhOTBjYjA1MjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorETijkW7cVy3vMOGv0P/i4LBSlc
UkrdgCmS91fchXjwH3KPpu87LBVXD+vFvVAvCHpnMHCZWl6frUwKrKEvXyxIN4ov
wXauDvU11VyfVT2JckuLbhoN1pURoo3C0JxnrlD6LYhWNv91t7Y3EUqmsvXYrsDs
lDzuNtB/BRcikr6QvmtykAAIzYNM2XnuGml5C3e4n4GNMFS/439C1YI58LfK1/Oj
rBR5URdviA2JAVaI8DOTzXdpabrxrOaNokqqkpypYKSrn/fo4p0FWexab+WZ2G63
l/5LDdyWpVpfmmQmoEcMH+uZ6OUVG0AJxJL6Mwo5J47YYJXfl01GuHbNjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdGe+SkBpLKMqvb49/N8qkMsFI7MB8GA1UdIwQY
MBaAFPzXfmh3gpgzBDMzU4tH8SaCzr3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX05kLWFIZUNtRE1FTXpOVGkwZnhKb0xPdmNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xZWQxZjYtMDlkNy00Mjk0LTkyYjQt
ZTU1MTc0NWQyNzZlLzEvX05kLWFIZUNtRE1FTXpOVGkwZnhKb0xPdmNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8xZWQxZjYtMDlkNy00Mjk0LTkyYjQtZTU1MTc0NWQyNzZl
LzEvX05kLWFIZUNtRE1FTXpOVGkwZnhKb0xPdmNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbVcJo20c
b0tV3u2G0jWssyliHUjOe4VmAJWA9piXKIp5FT8fgRQx7I6einDGQ+Up+3/Rzfw4
Crbh+LdSzILcm0/M6TYAK6fLyi1PSBVGazTQqP3yC1n7Fzgcc191lgUEzS5NvoC4
prsOH5rRVxuRhAbclM5EXt/+oBY09PSgRIosV96o8tIk8cP2tgwF8vli9V6orwpB
Ht4zrd36FC4dj2WpBnpY0bpxHn+PKTr4JYSZNFIkEKNdDiELeXarWTJjJkDCm9mU
ZpWueLKCERdDretk9rEFz41z77cKsnjbK3XeZ4OjHcbb/F68S5iv6zsPHqvCTbsu
+zTbVuI1pPfZFA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:02:41 2025 by rpki-client