Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
File: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft (raw, json)
Hash identifier: zHBANW5QfReA/t3rxSZY9jZPowkr9vKY9wqdeitndwU=
Subject key identifier: 5C:CF:95:5E:70:F9:EF:AB:CD:64:64:E1:FD:DD:F0:21:A0:AC:5B:70
Authority key identifier: F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
Certificate issuer: /CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
Certificate serial: 0199FC8F315FF803A7F3FC6668212B706420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
Manifest number: 043A
Signing time: Sun 19 Oct 2025 13:01:06 +0000
Manifest this update: Sun 19 Oct 2025 13:01:06 +0000
Manifest next update: Mon 20 Oct 2025 13:01:06 +0000
Files and hashes: 1: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl (hash: OECCQVenq9wNTxTy+TpMuFFfo9z6brfk7JMJWF4EAbw=)
2: HexBDB0ALKRx19vAL_olvRM_0pc.roa (hash: ajSzA7jvEEstqpYQIZuBqV7eWXJVONLQH581vvaQYJc=)
3: PrcLqHgKnfIRGf3YM80gSjoYr6I.roa (hash: ZkwH8oTWm6e+gIX3jU/BvkpmjX7EH4UuYT++yIKL1DQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:31:5f:f8:03:a7:f3:fc:66:68:21:2b:70:64:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
Validity
Not Before: Oct 19 13:01:06 2025 GMT
Not After : Oct 20 13:01:06 2025 GMT
Subject: CN=5ccf955e70f9efabcd6464e1fdddf021a0ac5b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:10:47:36:b8:48:7d:0f:ed:f8:ac:4c:86:c1:
5a:ae:0b:e0:20:a7:7a:ec:96:28:7e:ff:26:4d:bf:
20:c0:ea:81:12:5d:84:bc:15:2c:00:e0:a1:fb:27:
2e:d9:af:b0:79:26:93:7c:60:0f:f4:0e:e7:a1:fd:
e4:30:9c:41:72:67:60:8c:8b:0e:6c:08:92:88:8a:
7d:af:b0:84:71:aa:df:64:7f:9e:6e:63:f9:21:e0:
84:73:f1:69:3a:c4:bd:22:d1:6c:f2:e0:48:9b:4d:
02:fc:35:8c:d2:84:64:05:6e:1c:71:67:e3:07:7d:
f7:77:31:99:38:40:23:f8:f4:b1:74:da:77:b6:8d:
9e:b6:15:d0:35:4c:64:2f:5e:49:e9:ff:0c:77:d2:
40:45:6b:20:13:10:7f:dd:34:76:eb:60:91:b7:ce:
84:1b:e9:fe:03:15:23:3a:82:85:67:c7:26:83:65:
83:00:34:5a:a8:58:2d:73:4b:a3:52:03:4d:2f:ee:
e9:53:44:9f:27:f5:34:3b:b3:33:7f:60:69:f0:22:
11:92:fe:73:c1:92:ae:c2:97:3a:2d:3f:36:96:e1:
cf:fc:21:73:cd:7d:0e:54:d7:37:dc:37:bd:47:c8:
0d:cd:08:ae:ad:9d:78:c8:a8:cb:92:02:85:d2:a0:
41:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CF:95:5E:70:F9:EF:AB:CD:64:64:E1:FD:DD:F0:21:A0:AC:5B:70
X509v3 Authority Key Identifier:
keyid:F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:09:9b:21:8c:29:ac:de:5e:58:de:69:7b:31:90:94:45:56:
0a:a0:42:51:39:4d:ed:2e:ac:fc:96:fe:2a:5a:32:15:87:2a:
61:84:0a:e4:14:50:2a:18:2a:78:e3:cd:a2:b0:df:d1:b3:f1:
f2:73:41:52:44:9f:20:33:73:cf:6e:51:e4:d0:c0:08:2b:46:
43:f8:c1:ba:f3:fd:dc:1d:97:52:73:46:1c:f8:f3:c9:12:dd:
f4:b5:59:d4:23:c4:af:ac:21:67:aa:fe:f8:9a:68:04:a8:85:
1f:37:24:4a:c7:4f:94:25:ba:60:75:56:6e:a4:5f:e8:e1:ae:
65:13:98:30:ca:41:00:a8:b5:24:f8:be:92:53:68:a3:dc:6b:
28:dc:ba:28:cb:f1:55:80:f1:5d:f7:c2:73:4e:78:71:f9:1b:
33:4b:e0:95:15:51:1a:de:2b:3d:fe:25:d8:e4:ea:a3:56:69:
d2:20:e1:b3:f4:9d:2d:4f:79:63:87:52:37:9b:4f:f3:4a:71:
c4:70:28:ab:9f:d3:fe:64:03:1d:aa:0f:00:22:84:a5:b7:15:
3a:6b:28:61:4e:88:2f:11:85:a5:e9:31:36:ef:11:d1:91:61:
13:42:98:07:a2:c0:7a:ef:da:54:9d:be:4b:40:0d:77:fb:b4:
53:1e:a8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:09 2025 by rpki-client