Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
File: _Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft (raw, json)
Hash identifier: /WJ0XNhe5AiOewG80BPWXg+zRCefm0fRqD3cFtBBRfY=
Subject key identifier: 67:D1:42:AB:9F:6F:43:D5:7F:9F:BD:07:74:60:36:04:6B:7A:9E:69
Authority key identifier: FC:D7:7E:68:77:82:98:33:04:33:33:53:8B:47:F1:26:82:CE:BD:C3
Certificate issuer: /CN=fcd77e6877829833043333538b47f12682cebdc3
Certificate serial: 0198D6985872900F625EFC2AF3F5E6D21133
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
Manifest number: 04CA
Signing time: Sat 23 Aug 2025 11:02:44 +0000
Manifest this update: Sat 23 Aug 2025 11:02:44 +0000
Manifest next update: Sun 24 Aug 2025 11:02:44 +0000
Files and hashes: 1: _Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl (hash: +bT5JC/zB/bEsMqZpAjXK85Fa1IeMqiku2g3jBAsnGU=)
2: nVML7LcRQkLl4LsQylRXZkNhkNs.roa (hash: aP+8mW119fycA5Li+oipfw+Kb6S3KHGW180HDqCC2II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:58:72:90:0f:62:5e:fc:2a:f3:f5:e6:d2:11:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd77e6877829833043333538b47f12682cebdc3
Validity
Not Before: Aug 23 11:02:44 2025 GMT
Not After : Aug 24 11:02:44 2025 GMT
Subject: CN=67d142ab9f6f43d57f9fbd07746036046b7a9e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:60:86:88:2b:d0:41:a3:85:39:05:07:ed:93:
b4:64:7d:2b:04:17:d6:f4:3e:a9:5f:7a:81:d3:fc:
9f:e7:88:2e:85:98:71:9e:19:d6:ca:bf:5e:82:81:
65:0d:48:b4:5c:c3:0c:ab:c2:0a:e2:5f:41:d3:7d:
d9:c9:00:b3:03:73:07:a8:c9:d2:40:2b:0a:6c:b7:
56:ac:7a:1a:a5:7a:8e:b2:c6:ed:d6:3f:b5:93:c3:
0a:3b:8a:a6:c8:37:e1:f9:f6:88:44:34:0c:2b:94:
7d:04:64:5f:11:e5:c3:a4:d5:9a:e9:c1:62:b2:73:
f1:28:76:af:83:97:23:d9:78:50:2c:67:05:74:fa:
fa:e5:c9:69:46:b0:3b:89:28:27:ef:b3:64:c9:35:
a4:7c:fe:b8:b5:0d:ea:7f:3f:65:d4:1e:05:3a:d2:
bb:38:8f:78:20:50:f9:52:46:56:1f:08:41:be:ab:
dd:c2:95:75:bd:f1:ab:81:80:83:41:6f:f2:87:c4:
5f:22:7f:fc:de:c4:e9:46:c3:e2:c4:87:27:59:e1:
d4:90:92:1e:e6:8a:51:e7:17:de:68:d8:5a:9d:1b:
6f:9e:52:cc:88:9a:e8:09:c4:8e:2f:5c:b1:4e:a9:
a0:07:5a:09:4d:27:17:d3:62:0e:92:12:6b:63:f8:
51:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D1:42:AB:9F:6F:43:D5:7F:9F:BD:07:74:60:36:04:6B:7A:9E:69
X509v3 Authority Key Identifier:
keyid:FC:D7:7E:68:77:82:98:33:04:33:33:53:8B:47:F1:26:82:CE:BD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b0:08:35:a6:0f:75:ab:24:cf:c9:c7:38:86:f0:51:89:23:
13:3d:76:66:22:13:54:34:31:0f:d4:06:42:a1:b3:22:9d:91:
3d:a5:f5:98:45:bc:b6:c0:6f:d0:cb:1d:6a:66:e8:53:5e:fa:
95:f8:ab:39:f4:ab:f8:3e:72:3d:ec:ba:31:12:8d:e0:5d:50:
e2:c6:8e:22:03:ce:3d:9e:a4:92:d6:c3:43:ff:52:17:8e:1d:
60:f3:f5:4b:3b:07:23:91:b6:21:bc:b0:b0:a1:73:26:60:f5:
c3:a3:3e:15:6d:dd:a2:26:a1:c5:a4:06:4c:d5:4d:41:56:6e:
f2:f8:5e:44:5c:97:c1:d5:28:c7:c2:8f:d6:d1:99:f4:b8:fd:
42:d0:f7:d2:7a:c6:0f:19:c3:22:0b:e1:be:89:0a:8e:60:96:
43:97:c8:06:80:e1:19:37:81:6d:9e:9b:07:3c:b5:02:75:1e:
43:4e:bc:9f:5b:87:93:6b:e2:9e:7d:2a:bb:0d:fb:94:c9:8f:
3f:1b:5d:53:67:a1:08:67:14:a0:a3:37:3c:52:86:88:ed:a9:
72:32:7c:cb:58:b3:0d:9d:aa:1f:b6:ad:52:d7:7f:3e:87:0e:
51:14:1f:e2:06:f2:b7:3c:c6:49:fb:ba:40:2c:47:27:de:92:
dd:a5:ff:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:43:53 2025 by rpki-client