Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
File: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft (raw, json)
Hash identifier: crO6KJDRBxcKDgbdGCNMga6Kk6Qb8HWOZo141JwWEcY=
Subject key identifier: 38:29:96:9B:50:79:FA:2C:6E:C4:76:07:53:6A:BA:6B:E3:2F:FC:DD
Authority key identifier: 9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32
Certificate issuer: /CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
Certificate serial: 0199FC8FB3BB25CCF20C9950EF1A05298032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
Manifest number: 0207
Signing time: Sun 19 Oct 2025 13:01:40 +0000
Manifest this update: Sun 19 Oct 2025 13:01:40 +0000
Manifest next update: Mon 20 Oct 2025 13:01:40 +0000
Files and hashes: 1: W1gtHYOxkSQKrOdwkNpP1ZoMoUY.roa (hash: 5S4JEcGJktduCewz9POQY0aRBOXQzpGOLodHYl3CjqI=)
2: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl (hash: /IYL7AfNYKAKvbD+aIkcJJotRrf18A0CTbEF8WkuiBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:b3:bb:25:cc:f2:0c:99:50:ef:1a:05:29:80:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
Validity
Not Before: Oct 19 13:01:40 2025 GMT
Not After : Oct 20 13:01:40 2025 GMT
Subject: CN=3829969b5079fa2c6ec47607536aba6be32ffcdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:07:ab:92:ee:27:99:ca:0f:60:90:ca:79:ff:
84:8c:94:86:5d:87:36:5d:c0:7d:b2:d9:b6:a9:a5:
88:26:d0:31:10:cd:34:e7:6d:d8:24:4f:fb:cb:00:
95:01:09:06:5a:6d:68:11:61:3d:24:21:ba:fa:60:
7b:25:1a:6b:d5:27:34:f0:e5:05:6a:8b:24:36:59:
5d:5e:d9:5f:d6:3c:f7:dc:16:bd:9b:ed:5a:d5:8d:
4d:49:d6:10:d0:51:11:0f:13:d3:23:dc:7b:12:d9:
40:38:16:fa:41:7c:50:ec:a6:5e:9e:f4:a1:60:d1:
f8:df:f2:96:fa:e9:46:cb:ee:c7:60:6b:58:1f:42:
dd:2e:c8:14:b2:67:de:cf:a8:88:fb:e3:2d:d0:11:
aa:68:ed:6c:48:fb:4a:26:c4:8a:7b:e4:18:0b:d2:
97:57:60:34:73:86:dc:5f:c8:df:14:03:d5:fa:db:
31:82:d1:d5:fc:77:83:8e:86:68:46:dd:5a:cc:ff:
85:52:9f:29:90:36:8d:e5:e8:64:f8:93:ee:ef:47:
a9:2b:69:77:fa:b1:6b:d6:20:20:17:87:0e:cb:84:
01:70:63:dd:5e:94:96:c8:6f:99:be:66:84:4c:fe:
da:e7:6f:46:7e:fe:25:29:28:5a:69:9e:ad:f3:32:
8a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:29:96:9B:50:79:FA:2C:6E:C4:76:07:53:6A:BA:6B:E3:2F:FC:DD
X509v3 Authority Key Identifier:
keyid:9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ac:1f:9d:e2:f1:8d:4f:ee:c8:b6:ec:70:7b:4b:84:4b:75:
15:68:1a:da:c1:63:dc:60:92:b4:70:29:67:4c:af:04:ea:0f:
fe:65:df:da:af:6b:c0:46:61:9d:6d:2b:48:c4:96:7b:bb:13:
f9:9f:1b:5f:4f:8f:67:ce:54:16:e3:84:07:7b:9e:64:e8:40:
69:8f:7d:08:44:74:14:ef:f0:3a:6d:36:56:ce:2a:0c:71:88:
ac:ae:a4:fe:d6:e5:39:e4:a8:70:01:2f:ca:b0:a7:27:39:83:
43:38:8a:a2:76:b2:fb:5b:c5:5f:ed:99:dd:49:b0:1e:95:91:
08:ac:df:29:db:bf:34:f0:03:3d:bd:a3:83:e6:f2:f8:d6:78:
ea:ee:35:0e:e7:0e:e9:6e:bb:db:dd:4d:07:84:77:08:d7:11:
c8:b4:75:dd:99:73:d2:2a:ea:b5:64:f0:d7:21:30:f6:34:52:
f2:24:6c:18:a9:52:e8:4f:be:1c:95:41:55:b5:7a:39:56:3c:
ea:6e:f9:ca:71:38:a9:69:f7:16:57:cf:7f:28:0d:c5:7c:36:
ce:44:f6:b4:f1:1b:8e:ce:ea:6c:11:f2:25:ad:47:6d:06:37:
2c:8c:01:55:c7:33:ef:8b:7e:a2:bc:fa:fa:96:3c:05:b6:4e:
05:11:1f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:16 2025 by rpki-client