Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
File: nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft (raw, json)
Hash identifier: sf5YBqNmY2g+1J7NmD6VlwKkWyTaPNwhZQT2jp2rC3k=
Subject key identifier: 53:DF:66:9C:DA:95:EA:93:0E:FC:16:94:17:04:2C:3B:CC:26:8F:8E
Authority key identifier: 9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D
Certificate issuer: /CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
Certificate serial: 0199FB45CE9BB8D89110F368AADFB64D10BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
Manifest number: 14BC
Signing time: Sun 19 Oct 2025 07:01:19 +0000
Manifest this update: Sun 19 Oct 2025 07:01:19 +0000
Manifest next update: Mon 20 Oct 2025 07:01:19 +0000
Files and hashes: 1: EovVJfg3z9mSoPRLqdQrySDONz0.roa (hash: oZlmneGtk7nFcNF1eQjRZHNEgK8ZEfrOqUTxDl2I1wI=)
2: nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl (hash: Q8I9140tDc+RCxptMYjHy0saqyr6rwt4+kX9Vgivet4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:ce:9b:b8:d8:91:10:f3:68:aa:df:b6:4d:10:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
Validity
Not Before: Oct 19 07:01:19 2025 GMT
Not After : Oct 20 07:01:19 2025 GMT
Subject: CN=53df669cda95ea930efc169417042c3bcc268f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ec:ff:62:d6:b9:dd:70:3b:17:a8:a6:60:65:
25:2e:db:6a:1a:a8:26:5b:8b:7c:89:4a:de:87:30:
b5:7a:56:99:b4:79:d5:22:b3:95:e5:43:18:3f:bc:
76:25:f7:7d:07:0b:12:3c:40:33:25:52:a5:3c:d5:
4c:97:f3:ac:5d:cd:85:6e:f3:9f:fd:a1:f7:35:85:
84:9f:cf:18:75:65:66:8a:32:3d:35:11:29:fc:d5:
cf:d1:ff:c5:74:3e:c1:82:92:d0:ec:8f:fe:31:af:
bc:32:f6:69:06:4e:99:c5:be:18:40:0e:78:58:6e:
ef:83:93:12:66:7e:f0:02:73:80:be:37:61:fe:b8:
a6:3c:ad:30:ed:89:43:36:b4:62:aa:2d:50:1e:0e:
9c:a2:0e:f4:dc:8c:70:bc:16:54:5e:aa:b7:4c:16:
e7:c9:6c:f9:e0:a3:b6:f2:14:d3:8d:c5:fd:0d:0c:
bb:e2:1d:50:f6:c3:0b:e0:ae:3c:ae:23:00:07:0c:
8a:cb:70:86:30:b9:c9:54:e5:31:1f:2e:b6:e7:f2:
85:37:fa:b8:cb:3a:65:63:40:5f:83:79:3c:7c:fd:
20:7f:2a:ef:9b:d9:2b:bf:0e:af:66:13:85:5a:d5:
df:65:f6:78:49:9a:85:ad:cf:e6:1a:ea:4b:b3:1f:
7b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DF:66:9C:DA:95:EA:93:0E:FC:16:94:17:04:2C:3B:CC:26:8F:8E
X509v3 Authority Key Identifier:
keyid:9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:67:bc:93:cd:36:a9:3c:25:8d:1c:93:e6:6f:45:9a:86:22:
40:6f:74:2b:31:bb:6f:e7:3d:3d:76:2d:cf:76:b5:0e:92:e7:
80:3e:f7:08:12:3f:e3:2a:ff:5d:19:fb:ce:5e:e3:e1:df:97:
ac:fb:95:1e:3f:c5:65:3d:9b:9c:ec:d5:64:86:7a:88:56:0a:
8c:16:1b:50:a9:72:95:b1:82:8b:99:30:86:a6:d4:fb:0a:08:
04:91:82:71:ab:b5:26:94:f2:f6:ce:67:ba:9d:61:ab:38:6e:
6e:e0:bc:e9:81:45:95:bd:9b:6f:d6:d8:98:a1:78:6a:cf:3c:
88:7a:6c:8a:93:b7:26:46:6e:ef:d4:30:03:3c:05:4f:d5:66:
cd:fa:56:93:e6:80:4a:d0:7d:b1:52:b5:f6:80:84:15:44:c5:
c1:a6:7a:62:d9:b2:d2:1d:93:35:df:19:3b:58:38:71:62:54:
ca:5f:54:c7:5e:1e:f2:ed:8d:09:9d:d3:30:47:c5:94:ab:68:
b9:ea:b3:c1:68:b2:ae:1d:b7:0c:7c:a9:db:51:53:2e:6a:64:
14:c5:57:e3:45:c5:d3:d5:e7:6a:21:a9:1f:34:c3:a9:b0:6b:
04:9e:a1:3c:8c:b8:57:a7:a2:a7:28:5a:57:b9:80:db:f8:a9:
f7:75:82:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:33 2025 by rpki-client