Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
File: NcClulvILiDgRvu1TAZYBvTHtqE.mft (raw, json)
Hash identifier: fZ9X5KtNbUmPx0ebrjL0XmpLlVECg7OvsaedFJgowO8=
Subject key identifier: FC:C9:FB:56:4D:E1:86:16:1A:96:6F:48:77:AB:0E:3A:C1:CC:BC:EA
Authority key identifier: 35:C0:A5:BA:5B:C8:2E:20:E0:46:FB:B5:4C:06:58:06:F4:C7:B6:A1
Certificate issuer: /CN=35c0a5ba5bc82e20e046fbb54c065806f4c7b6a1
Certificate serial: 0199FC21CA39C3F0C8615F2B5C6EA85B3971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 11:01:36 +0000
Manifest this update: Sun 19 Oct 2025 11:01:36 +0000
Manifest next update: Mon 20 Oct 2025 11:01:36 +0000
Files and hashes: 1: H8j-KlQfL6AGuM7lJr3knJUrtEo.roa (hash: 1uefLTqkvz0OqXFo/HdbBytkVHKTsftF+EzOemS3iXc=)
2: NcClulvILiDgRvu1TAZYBvTHtqE.crl (hash: taEHXbgaIq254yMdTOne6Om6mOLZZW6H5tSQmG+V/hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:ca:39:c3:f0:c8:61:5f:2b:5c:6e:a8:5b:39:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35c0a5ba5bc82e20e046fbb54c065806f4c7b6a1
Validity
Not Before: Oct 19 11:01:36 2025 GMT
Not After : Oct 20 11:01:36 2025 GMT
Subject: CN=fcc9fb564de186161a966f4877ab0e3ac1ccbcea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c0:59:92:63:f4:57:5f:a9:34:a2:84:cf:24:
df:76:4b:8b:77:35:16:ad:b4:00:4b:46:3c:45:40:
b3:44:82:0d:34:6b:af:f8:5e:e5:dd:9e:83:3c:ea:
c8:80:76:e0:9b:72:62:41:38:07:d8:17:6e:26:0a:
0e:60:66:8c:bc:56:71:fa:83:61:d1:a3:6d:b3:c8:
63:38:e2:7f:67:89:d5:37:d0:5b:ca:b0:92:a9:64:
a2:25:95:ee:eb:a0:0c:97:e1:fe:51:46:d5:86:f5:
65:97:28:45:ab:14:22:26:df:16:20:73:f4:59:6e:
a2:e3:f8:57:1c:c2:4c:62:93:07:fe:38:88:77:cb:
0c:d8:e7:60:80:8b:d3:fd:21:19:ee:a8:73:a8:70:
b6:b9:0d:08:73:09:88:d6:90:e4:60:5e:8a:60:fc:
e0:ba:c8:7d:5c:ce:a8:99:bb:47:75:1f:11:30:d2:
1f:f8:a1:56:98:ff:ca:78:ee:e8:44:a7:8e:10:de:
26:b7:e4:cd:13:9d:73:cd:20:2a:10:15:57:8b:f8:
e7:63:bc:2e:f1:62:c6:8c:29:34:26:e5:10:46:a5:
d2:ef:5c:e3:5e:65:7e:39:f7:4f:13:23:f3:90:ff:
73:06:79:5c:c1:04:8d:c2:fb:98:37:e2:1c:22:83:
06:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C9:FB:56:4D:E1:86:16:1A:96:6F:48:77:AB:0E:3A:C1:CC:BC:EA
X509v3 Authority Key Identifier:
keyid:35:C0:A5:BA:5B:C8:2E:20:E0:46:FB:B5:4C:06:58:06:F4:C7:B6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a5:d6:af:27:99:64:72:e9:1f:91:71:d6:cf:ff:0b:ae:e7:
42:02:a0:5f:4b:c1:fb:43:71:9d:93:22:fd:10:15:57:ab:76:
9e:eb:04:fc:d5:d6:ed:4a:8a:a2:a5:60:09:5c:9e:1e:08:44:
66:7d:96:45:d3:81:0f:d0:51:13:d8:9e:be:d8:1b:7d:51:91:
f1:51:25:f4:ec:6b:01:42:44:09:64:88:29:d0:84:22:48:05:
b3:22:cb:04:c3:5b:88:e7:10:e5:cf:45:dd:6d:32:87:28:b8:
c0:47:0e:8c:dc:78:e3:23:e5:e1:c9:63:37:ac:87:7e:a4:ad:
42:8a:a5:74:87:89:cf:e0:15:9b:a2:5e:4b:b0:53:3d:7d:21:
a3:8b:23:97:bc:6c:18:42:9f:42:2c:75:62:cd:6a:6e:a8:b1:
aa:73:6c:df:10:88:72:57:83:d7:fc:00:5d:e0:e7:ca:0b:bd:
09:8f:13:01:5c:d1:22:be:48:90:e5:79:12:77:25:69:f6:19:
13:d1:b0:ee:b5:a1:c0:f8:7f:1f:f6:b4:bd:b5:5a:7e:bf:04:
67:4a:29:67:9d:4e:bc:e9:27:65:01:b9:c9:93:88:fd:36:3e:
ea:f7:af:2f:f3:f4:a0:f2:b4:19:79:77:43:9a:5f:00:36:c2:
83:0b:db:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:22:54 2025 by rpki-client