Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
File: _Nbe4Pi6PCIpPWLscB7yULzI0uc.mft (raw, json)
Hash identifier: XAW3M2TEJbav4jNrAgPPuDBPqI0nX67sU0pclqcqnhc=
Subject key identifier: A1:06:0A:A9:3E:BC:1E:DA:18:E3:CF:0E:58:7B:C6:70:8D:9E:91:2A
Authority key identifier: FC:D6:DE:E0:F8:BA:3C:22:29:3D:62:EC:70:1E:F2:50:BC:C8:D2:E7
Certificate issuer: /CN=fcd6dee0f8ba3c22293d62ec701ef250bcc8d2e7
Certificate serial: 0198D5BBC28DF1BAE2AC8D6B86F4187E2CBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
Manifest number: 0624
Signing time: Sat 23 Aug 2025 07:01:48 +0000
Manifest this update: Sat 23 Aug 2025 07:01:48 +0000
Manifest next update: Sun 24 Aug 2025 07:01:48 +0000
Files and hashes: 1: _Nbe4Pi6PCIpPWLscB7yULzI0uc.crl (hash: b6RYZhGjKm6L47tT+85Uil8P/haDnedqIUB6aDmdRfs=)
2: uDZZBTPRRP5MQogb2OjdT8pUiBA.roa (hash: T9yL9Bw5mv08XIGrA3/0U3W6rC1uZNivZ+GrYQ4KE/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:c2:8d:f1:ba:e2:ac:8d:6b:86:f4:18:7e:2c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd6dee0f8ba3c22293d62ec701ef250bcc8d2e7
Validity
Not Before: Aug 23 07:01:48 2025 GMT
Not After : Aug 24 07:01:48 2025 GMT
Subject: CN=a1060aa93ebc1eda18e3cf0e587bc6708d9e912a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f8:11:a6:f7:8e:87:1e:0b:b0:21:ec:c3:dc:
69:83:22:19:0a:49:67:6a:3c:6e:ca:73:ae:59:ec:
3f:7b:34:2f:91:d0:e1:ef:14:fc:0c:cf:1d:f9:e0:
be:c9:da:09:83:ef:14:2e:7c:d2:7e:c5:53:c0:b9:
7f:de:bc:26:6c:ff:a0:34:4d:7e:4f:9f:ba:26:cc:
c6:bc:d6:22:b8:81:89:bd:a7:6e:7c:17:0e:d4:92:
d8:b6:21:9e:11:4a:9b:d4:94:96:60:83:72:27:a2:
f7:cc:f9:47:74:b1:95:bc:f0:3e:91:37:e3:d7:57:
69:a6:82:cd:8f:ad:06:14:81:85:a5:da:74:80:3b:
31:bf:82:fe:72:dd:fd:35:1b:59:45:97:22:8e:3d:
0d:8f:57:3b:41:f7:03:b2:2e:77:54:d1:80:bb:51:
4a:a0:9d:66:18:7d:18:6d:76:c4:08:46:a4:62:aa:
e2:9e:63:31:99:d7:a3:cd:84:22:13:cc:86:0b:69:
19:7e:3c:c1:1d:33:38:8d:84:5f:9f:8e:ae:6e:9b:
f7:ca:dc:9d:5d:17:18:4e:73:36:1e:e9:3b:dd:54:
1c:1e:90:60:42:34:4f:25:87:b1:a6:09:86:14:95:
e2:65:1b:fa:47:0f:1a:a3:9a:a0:fa:c8:a1:c3:03:
d2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:06:0A:A9:3E:BC:1E:DA:18:E3:CF:0E:58:7B:C6:70:8D:9E:91:2A
X509v3 Authority Key Identifier:
keyid:FC:D6:DE:E0:F8:BA:3C:22:29:3D:62:EC:70:1E:F2:50:BC:C8:D2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ba:56:f1:30:70:31:a2:93:f6:66:3e:5f:45:66:bd:73:71:
1e:6f:ed:7c:7a:35:8c:d8:b6:3e:67:8a:c0:ba:7e:6b:9e:cc:
e0:68:0a:52:d3:81:f8:0a:07:f2:11:07:a7:8a:d9:dd:7d:f0:
19:56:1f:c1:84:41:14:9e:25:c1:89:4a:98:9c:ba:11:f2:8c:
03:7f:53:53:e3:29:44:68:64:c9:4d:98:cb:c4:02:b1:35:33:
dc:46:7a:c9:0e:b4:af:5a:04:2d:b3:0a:cb:7d:91:7b:68:ef:
2e:1c:9c:ea:f3:db:8b:95:0a:c2:9d:2b:68:09:e2:26:de:04:
48:c1:f7:d9:01:c4:b5:4b:78:4f:a6:9a:c6:a9:55:f7:9b:84:
68:86:d6:bb:f2:b8:6e:2e:51:83:41:e3:f0:54:0f:17:48:83:
96:62:9a:50:a7:fd:b4:70:21:9d:ca:bd:0e:de:17:c0:cb:5d:
4a:73:7b:85:73:0a:66:f9:8c:fc:70:f6:9d:04:85:1f:a0:e5:
03:ed:14:0b:26:54:b9:30:ab:65:4d:ca:5e:af:c9:80:87:46:
9f:78:41:1b:c9:eb:2c:6d:5e:60:8d:77:bd:0c:c5:6e:d6:2b:
c9:14:fc:dc:6d:13:66:d6:92:1f:57:3d:70:fa:0f:c3:6e:7d:
9d:fc:80:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:27:27 2025 by rpki-client