Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
File: _-rFP47j7k0UPHDf9nNVIDheTNE.mft (raw, json)
Hash identifier: QcB9D+KN7V46nvmGLLlWEN5Qfp7cssUUBPfHO9OOZSM=
Subject key identifier: 76:C4:25:B5:D8:1E:73:F3:DE:43:64:DD:90:43:80:92:1F:4B:38:53
Authority key identifier: FF:EA:C5:3F:8E:E3:EE:4D:14:3C:70:DF:F6:73:55:20:38:5E:4C:D1
Certificate issuer: /CN=ffeac53f8ee3ee4d143c70dff6735520385e4cd1
Certificate serial: 0199FBEB98FD65EEE42FC20E87FA8FB5277B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 10:02:25 +0000
Manifest this update: Sun 19 Oct 2025 10:02:25 +0000
Manifest next update: Mon 20 Oct 2025 10:02:25 +0000
Files and hashes: 1: _-rFP47j7k0UPHDf9nNVIDheTNE.crl (hash: 2uk5gRugVNs2JjpL4Rk7MAjs+a1mkzXrii+nc4SA6nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:98:fd:65:ee:e4:2f:c2:0e:87:fa:8f:b5:27:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffeac53f8ee3ee4d143c70dff6735520385e4cd1
Validity
Not Before: Oct 19 10:02:25 2025 GMT
Not After : Oct 20 10:02:25 2025 GMT
Subject: CN=76c425b5d81e73f3de4364dd904380921f4b3853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:37:78:c7:08:c3:3b:50:df:18:57:07:3d:24:
cb:ff:49:db:a2:b0:23:10:e7:1a:a4:e8:d6:7b:d4:
62:78:c4:57:de:ce:aa:bf:f6:bd:20:9a:1e:ae:09:
5e:c3:ce:8a:f3:01:db:d0:61:8d:18:ee:0c:55:56:
e8:aa:29:53:51:c1:11:20:cb:7a:b7:08:b5:24:61:
bf:74:9a:e3:1c:74:67:25:dc:e1:c0:55:88:fd:d8:
c9:8c:ac:7f:22:6f:b5:de:7f:a3:4a:0f:83:2a:90:
45:81:54:59:fc:86:54:91:a3:46:57:ac:e4:b6:95:
c9:72:20:e7:1c:b4:22:61:f7:61:88:ea:db:c0:ac:
eb:6e:ef:ee:ad:ac:76:4a:6d:99:62:38:17:f3:46:
b5:80:3e:d3:fa:7e:e5:f4:28:48:27:79:79:b4:3f:
b7:81:d4:fa:ac:bc:3a:5b:22:b5:e2:25:0c:fa:05:
24:75:c3:c3:6f:59:b8:22:df:7b:a1:90:c4:70:dc:
e6:f5:5d:14:34:2b:eb:a6:3d:5e:34:89:52:1b:04:
3a:76:b9:73:10:3f:88:0c:fe:86:fc:1d:a4:3d:e7:
c5:ef:f1:2e:6a:82:92:70:7f:8b:ee:92:a6:95:bf:
c7:f9:63:52:39:90:e2:f0:69:c6:8d:81:d9:03:16:
c2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C4:25:B5:D8:1E:73:F3:DE:43:64:DD:90:43:80:92:1F:4B:38:53
X509v3 Authority Key Identifier:
keyid:FF:EA:C5:3F:8E:E3:EE:4D:14:3C:70:DF:F6:73:55:20:38:5E:4C:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:7e:b9:27:f7:8e:d2:f6:ec:77:42:53:a3:1f:a4:6e:5d:d2:
c1:60:43:34:b1:44:d5:33:16:88:f2:c5:00:57:70:5a:f3:8b:
09:67:20:9d:da:c5:c8:ee:ce:91:fa:8f:c0:87:78:7b:d8:54:
3f:05:d1:c2:b9:f5:c4:ed:6c:03:e3:94:67:2c:ff:af:57:5c:
cf:f2:24:16:63:63:35:96:10:68:e5:8a:23:b4:c8:28:1c:e5:
e6:53:6a:9a:2c:0c:6f:ee:62:3b:f9:0e:b1:08:82:98:34:da:
1d:23:5e:94:b9:4c:33:a7:75:f2:51:4b:52:af:39:38:6b:8d:
08:0e:5d:01:37:71:ab:02:03:95:ba:e7:bf:64:19:0e:9d:9a:
4c:4b:80:77:8d:d0:9d:5a:75:f8:02:cd:31:38:fb:08:8b:d9:
11:48:0c:c0:dd:0c:d7:80:2e:17:6e:d6:eb:fe:d7:cf:ea:30:
94:f6:fc:1f:1e:6b:10:5e:c5:3d:fb:0d:e6:0d:1e:de:cb:34:
f4:7f:61:fd:af:b9:71:4f:9f:b2:32:ee:cf:65:79:f1:f4:f8:
ec:ac:c3:52:e9:3e:e3:f0:83:bd:40:ba:89:fe:25:e9:70:1a:
61:03:f5:b3:34:bb:38:56:53:ec:66:03:8a:cc:fc:0b:8f:a4:
39:b5:53:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:43 2025 by rpki-client