Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
File: _Nbe4Pi6PCIpPWLscB7yULzI0uc.mft (raw, json)
Hash identifier: KykegohLI+zCUUO4DvEPM9b7tNTBu5P1F/78qSPjQYs=
Subject key identifier: 71:6A:32:CE:4A:E0:9C:64:3B:50:99:35:7B:23:8D:EC:32:D0:2E:A6
Authority key identifier: FC:D6:DE:E0:F8:BA:3C:22:29:3D:62:EC:70:1E:F2:50:BC:C8:D2:E7
Certificate issuer: /CN=fcd6dee0f8ba3c22293d62ec701ef250bcc8d2e7
Certificate serial: 0199FF22C0FF431D83558E9B417069BC3999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
Manifest number: 06BE
Signing time: Mon 20 Oct 2025 01:01:31 +0000
Manifest this update: Mon 20 Oct 2025 01:01:31 +0000
Manifest next update: Tue 21 Oct 2025 01:01:31 +0000
Files and hashes: 1: _Nbe4Pi6PCIpPWLscB7yULzI0uc.crl (hash: 82ZsyUm1hHsGNzKzCh0Jd/iWFyCz4Xkdiu6ie84KM4M=)
2: uDZZBTPRRP5MQogb2OjdT8pUiBA.roa (hash: T9yL9Bw5mv08XIGrA3/0U3W6rC1uZNivZ+GrYQ4KE/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:c0:ff:43:1d:83:55:8e:9b:41:70:69:bc:39:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd6dee0f8ba3c22293d62ec701ef250bcc8d2e7
Validity
Not Before: Oct 20 01:01:31 2025 GMT
Not After : Oct 21 01:01:31 2025 GMT
Subject: CN=716a32ce4ae09c643b5099357b238dec32d02ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7d:c8:50:43:14:fc:0e:df:9c:5d:f7:72:39:
0b:ae:a5:a1:91:29:33:55:8c:0d:39:71:ef:da:99:
18:f6:6b:e4:2a:45:b3:fd:ca:ba:f9:67:88:17:01:
1c:58:6c:f2:ae:05:7e:4b:5f:1d:29:a4:98:f4:4a:
e7:72:40:83:e2:ff:a0:03:f3:09:95:bb:f8:a1:e3:
af:4b:79:2c:a9:b3:54:7a:82:f1:3e:e8:72:20:68:
47:5d:fa:64:9d:c4:40:bd:f9:e8:6a:f0:e8:14:25:
4e:f9:71:4a:50:ec:2c:e0:39:ad:72:97:6b:c2:29:
ea:34:6c:e3:98:96:75:dc:65:ff:58:8d:fa:2d:1d:
a4:20:dd:bc:ed:57:4c:11:8b:39:06:43:fa:59:b4:
15:ce:60:37:0b:37:95:d1:16:4f:e5:9f:23:66:3d:
5e:cc:2a:2f:74:0f:33:83:e1:46:f3:d8:fe:c6:30:
46:08:a4:db:d6:35:a3:0a:fa:ab:84:10:fd:96:b6:
ec:c5:cf:d6:4a:b0:9c:79:7d:40:69:19:41:3c:5a:
99:25:75:a8:46:63:59:97:f7:d3:ab:89:91:63:46:
4b:f2:87:00:ad:ed:7b:05:9c:0f:16:52:6b:80:bc:
ef:6a:3d:05:f4:4d:a6:9c:f1:23:7b:79:76:92:e5:
7f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6A:32:CE:4A:E0:9C:64:3B:50:99:35:7B:23:8D:EC:32:D0:2E:A6
X509v3 Authority Key Identifier:
keyid:FC:D6:DE:E0:F8:BA:3C:22:29:3D:62:EC:70:1E:F2:50:BC:C8:D2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:9e:a4:89:d0:80:cd:09:8c:5f:b8:07:8a:16:96:b8:87:58:
e2:8c:10:b2:7a:a7:5e:fa:6e:cd:e0:2d:b7:54:c5:81:0a:d2:
43:f6:52:76:f5:4a:40:11:be:af:4c:11:09:e0:31:aa:05:a2:
2e:e9:6d:fb:6b:67:dc:71:67:3c:0c:ea:46:68:25:59:fa:88:
46:b6:7b:04:0e:3b:7e:ff:74:94:77:12:14:97:49:dd:24:89:
b3:76:d2:eb:30:ad:0c:dc:cf:fd:aa:99:6e:12:77:62:c3:c3:
f2:07:08:e7:0f:8a:11:12:46:a5:30:f0:c1:80:84:fd:73:53:
16:d4:d7:54:bd:ca:15:a6:68:33:1c:a2:3b:1b:82:2e:16:10:
41:62:41:85:c5:63:9b:e1:26:6f:81:67:a9:5a:08:02:62:ea:
42:89:56:ef:25:40:d3:1a:cc:ef:24:d6:37:d2:21:78:7f:1d:
64:dd:46:84:63:09:1d:6c:57:9f:39:de:79:09:20:f8:6e:3c:
34:15:98:96:90:13:bf:9d:4f:22:fe:43:b8:67:37:22:39:2b:
4f:1a:99:26:f6:d2:5b:96:74:f2:39:2b:78:d8:49:dd:da:d9:
99:50:4c:68:02:68:bf:40:e3:47:22:be:ca:da:25:51:43:cf:
1f:5c:9a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:00:08 2025 by rpki-client