Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft
File: _Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft (raw, json)
Hash identifier: O1IxGo63Nlo2508m1YYzE/Gl1QljQxw18Cka/tB//IY=
Subject key identifier: A5:D7:4E:99:09:6A:4F:34:33:38:A8:E3:32:1C:3A:8F:D6:55:5C:28
Authority key identifier: FC:D7:39:9F:87:47:0C:3E:A4:E4:DF:D6:97:A9:8A:E2:BD:02:6F:9C
Certificate issuer: /CN=fcd7399f87470c3ea4e4dfd697a98ae2bd026f9c
Certificate serial: 0198D660B51201EF9C49482CA5E1090E7DAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft
Manifest number: FE
Signing time: Sat 23 Aug 2025 10:01:58 +0000
Manifest this update: Sat 23 Aug 2025 10:01:58 +0000
Manifest next update: Sun 24 Aug 2025 10:01:58 +0000
Files and hashes: 1: _Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.crl (hash: +473EvT6Z8wh112B2cGQFVjwXbgjyTNy277koMkIyX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:b5:12:01:ef:9c:49:48:2c:a5:e1:09:0e:7d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd7399f87470c3ea4e4dfd697a98ae2bd026f9c
Validity
Not Before: Aug 23 10:01:58 2025 GMT
Not After : Aug 24 10:01:58 2025 GMT
Subject: CN=a5d74e99096a4f343338a8e3321c3a8fd6555c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ef:48:a8:aa:1d:0c:f3:f8:09:04:63:3e:e8:
b7:7e:11:fd:56:28:22:46:a9:c9:60:89:a2:b5:e3:
57:2d:08:46:a6:44:8f:7c:de:56:c0:25:7d:8c:33:
11:50:38:6b:7f:06:d2:81:68:61:81:15:8d:72:93:
78:78:f0:d7:64:9f:4b:00:67:40:53:50:56:3e:8b:
66:5f:72:d8:93:33:65:8c:3a:13:3b:40:d5:7c:27:
38:94:e5:9d:7e:ce:de:e1:da:8d:8f:71:c0:2e:0d:
24:ef:0d:45:f3:75:ce:db:9d:01:f0:e5:58:4f:62:
a8:64:b6:5d:a9:2d:8c:46:a0:4f:4e:b6:3b:98:42:
9a:33:5e:b5:b3:21:19:74:1d:ef:11:c9:d4:ef:5f:
77:78:4a:e5:b9:25:e2:51:09:32:92:70:2c:97:08:
dd:db:61:2f:df:d6:40:ff:06:fc:31:a0:db:8a:bb:
e8:9b:07:9d:90:8c:e9:41:11:3b:a7:0c:f2:a0:d2:
5b:5f:1e:6b:58:82:06:10:e4:9a:3d:ac:a4:e2:87:
d7:31:0b:b2:27:5f:02:55:20:2e:d8:92:62:ef:e6:
59:e8:3c:71:91:5a:87:85:cf:7a:c4:08:04:cb:7f:
bf:d2:80:27:2c:02:28:20:38:3a:16:e1:47:51:a7:
ee:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D7:4E:99:09:6A:4F:34:33:38:A8:E3:32:1C:3A:8F:D6:55:5C:28
X509v3 Authority Key Identifier:
keyid:FC:D7:39:9F:87:47:0C:3E:A4:E4:DF:D6:97:A9:8A:E2:BD:02:6F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a3:3d:11:95:98:4a:18:17:69:0e:bc:8d:2a:9e:a6:ba:49:
8e:e5:4b:b7:2d:bf:9d:96:fe:5f:02:d8:af:7f:d6:e9:da:1a:
e9:20:eb:19:67:72:a7:d7:9a:2e:3e:0c:e7:bb:fb:bb:de:34:
1b:c9:28:da:26:06:5d:9c:a4:4f:dd:78:24:d1:21:48:c4:8b:
1f:cf:24:5d:15:ea:2d:ca:40:ae:dd:80:9c:e4:80:22:7d:3c:
15:98:10:85:bf:c0:8e:ab:82:e0:e8:58:c2:37:67:03:28:5c:
f9:9e:09:3d:28:bb:68:db:d4:28:1d:1e:e9:e1:0b:34:50:36:
f8:00:65:5e:13:d1:69:ad:16:8a:8c:55:94:7b:b1:8d:bf:b7:
e9:75:ca:1a:08:4a:e2:f0:de:e2:74:92:a8:b7:80:3e:13:f8:
20:3f:8a:67:35:fa:da:9f:b3:ee:dd:2f:82:1f:b6:dd:23:f3:
b5:75:c8:c2:61:db:d7:0d:d4:f7:58:c7:78:f7:ba:e2:47:57:
a0:81:82:f4:ed:da:ba:8a:f4:a0:2f:41:0d:64:ea:5a:4f:0f:
6d:f7:0c:02:69:b6:ae:67:1e:34:34:ac:5c:47:54:18:b5:31:
48:6c:37:1a:dd:b3:b3:b3:4b:7d:d6:09:98:ba:3f:17:b5:da:
0e:86:e4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:14:15 2025 by rpki-client