Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
File: NmIEOjHdm9K3yxhifrS6wRhAzhY.mft (raw, json)
Hash identifier: n0A31zGMxK7/QYYyuB2lmiNOWyWVmTzueNtPdmLch0Y=
Subject key identifier: 28:78:DE:67:96:B2:EA:CC:2E:AB:EC:2B:8D:09:02:99:3A:DE:7E:AE
Authority key identifier: 36:62:04:3A:31:DD:9B:D2:B7:CB:18:62:7E:B4:BA:C1:18:40:CE:16
Certificate issuer: /CN=3662043a31dd9bd2b7cb18627eb4bac11840ce16
Certificate serial: 0199FD6AF2C7E8A58472687407687BAEE596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
Manifest number: 13F2
Signing time: Sun 19 Oct 2025 17:01:08 +0000
Manifest this update: Sun 19 Oct 2025 17:01:08 +0000
Manifest next update: Mon 20 Oct 2025 17:01:08 +0000
Files and hashes: 1: NmIEOjHdm9K3yxhifrS6wRhAzhY.crl (hash: W6RfgeKctGDSTkbimEuzpk37V5Xg4EdjmGwcu9fl6Nk=)
2: WD0FQcbHEB-uoxf6girnu5JNKHw.roa (hash: iXRex71CWC3wFm8Z6DiGxb32qluuOPal75ek37KzREs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:f2:c7:e8:a5:84:72:68:74:07:68:7b:ae:e5:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3662043a31dd9bd2b7cb18627eb4bac11840ce16
Validity
Not Before: Oct 19 17:01:08 2025 GMT
Not After : Oct 20 17:01:08 2025 GMT
Subject: CN=2878de6796b2eacc2eabec2b8d0902993ade7eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f8:4e:83:ea:a8:65:71:0b:c2:15:f6:ce:41:
2f:1d:51:51:e9:94:01:65:f2:ba:5c:cc:6e:a9:a1:
41:99:b7:db:56:9b:06:4a:53:22:12:cc:f1:d2:a6:
79:2d:e8:b0:e1:95:40:df:a9:9c:03:21:ab:50:66:
b3:4e:0d:4a:3d:d3:94:74:db:fa:39:73:cf:c6:31:
bb:49:70:1a:9a:a0:0f:28:79:a7:21:4c:85:7f:96:
34:cc:63:48:e1:3d:9a:43:9b:03:95:78:f0:a2:8b:
d4:b2:91:9b:11:65:8d:23:be:6f:2d:b1:71:44:f9:
31:03:13:8a:f7:cf:5a:06:29:b4:d4:59:5f:48:40:
d1:65:d8:06:de:6a:02:e2:44:5a:ae:9e:0f:6f:ba:
f8:57:40:2b:bd:ca:91:de:4f:cc:bf:af:d2:f4:93:
8b:3c:ed:79:92:46:ae:34:46:c5:7d:03:af:b0:c8:
01:e9:b8:87:3f:89:02:25:53:8b:dc:bd:c8:91:08:
ed:c6:e0:3a:65:6e:d4:d9:0c:13:f1:5b:d1:3b:b7:
a8:9e:3c:6e:5b:b8:d8:d5:e8:8c:e6:c0:12:5d:3b:
68:a3:8e:f4:c7:46:e8:86:ed:51:d7:88:dc:89:ec:
21:68:4b:ec:b6:09:83:63:40:50:b7:3f:28:2b:1e:
ce:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:78:DE:67:96:B2:EA:CC:2E:AB:EC:2B:8D:09:02:99:3A:DE:7E:AE
X509v3 Authority Key Identifier:
keyid:36:62:04:3A:31:DD:9B:D2:B7:CB:18:62:7E:B4:BA:C1:18:40:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ea:ba:20:e7:bd:d7:76:cf:cd:a6:2c:fe:2b:c9:d6:93:19:
ea:d1:e9:ea:17:52:e2:86:3b:9d:7c:6f:a6:30:23:96:a9:79:
74:e0:1e:0f:49:b6:65:99:ec:d2:19:06:e0:5a:8a:d8:ac:cb:
2f:42:9d:98:f5:a6:ca:61:f8:c7:41:40:ab:50:30:9e:84:05:
73:f1:21:8f:55:e1:66:b1:61:b4:d9:8d:52:8f:90:47:a0:b3:
a6:0a:d6:06:0d:95:22:57:20:90:e8:35:6f:f5:47:d0:00:ef:
76:71:f8:93:6b:ef:ee:b2:d1:71:d0:32:ea:2d:84:93:fc:94:
49:15:04:a0:8b:b4:11:5a:41:4c:06:4e:cc:de:3c:2c:e1:4c:
95:d5:21:72:81:c3:7e:8c:42:d3:c8:25:03:72:db:93:e0:02:
10:5b:1f:be:1a:df:08:a8:67:63:26:eb:bf:40:7a:78:ab:c3:
9b:fb:af:d5:f3:9b:0b:86:4e:e9:77:00:83:a6:d3:c7:0a:6c:
17:4c:35:7d:92:b7:96:9b:3f:19:2d:19:fa:9a:63:36:33:2a:
b2:78:8f:7f:ba:a2:8f:59:57:89:65:8e:df:31:a7:3d:8b:26:
b5:81:87:0c:70:05:ad:b0:a5:56:fe:58:41:d2:bd:d4:2e:c6:
7c:e9:5f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:13 2025 by rpki-client