Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
File: _nB-d2cwwsLsumue6VchKtWNXNs.mft (raw, json)
Hash identifier: L+vi3Ke4TCvKf4yHUfNVRi9BQsFGKdNwhkp0Dq/1UIs=
Subject key identifier: 84:F8:03:F9:E8:56:22:25:D8:B2:40:2C:5C:DE:9F:64:91:BA:F4:E7
Authority key identifier: FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB
Certificate issuer: /CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
Certificate serial: 0199FF596260BE139634E1CC47CC47ADA0BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
Manifest number: 0DB9
Signing time: Mon 20 Oct 2025 02:01:11 +0000
Manifest this update: Mon 20 Oct 2025 02:01:11 +0000
Manifest next update: Tue 21 Oct 2025 02:01:11 +0000
Files and hashes: 1: Puy-0P_jBepIb5u3SpvEh4v47j8.roa (hash: ZN41z34tLWoaRsScijTCdX/mIzcEneubj96rKehXEgw=)
2: _nB-d2cwwsLsumue6VchKtWNXNs.crl (hash: wJlWJEQUqzlOdWThYLn9KwKBkL+U0f31cJU6wL2QssE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 02:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:62:60:be:13:96:34:e1:cc:47:cc:47:ad:a0:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
Validity
Not Before: Oct 20 02:01:11 2025 GMT
Not After : Oct 21 02:01:11 2025 GMT
Subject: CN=84f803f9e8562225d8b2402c5cde9f6491baf4e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:38:8d:8e:51:1c:18:1d:3a:32:3e:13:5f:3f:
af:87:79:26:2e:4f:7a:ab:ba:b9:96:ba:fb:08:c8:
ae:63:12:8a:2d:a3:58:ec:c2:56:30:56:8c:8e:4c:
4b:cb:17:9d:e4:d2:83:44:1f:c1:cf:55:78:aa:5f:
c2:24:d8:8b:17:bc:b5:79:f3:89:8e:b5:4b:31:76:
af:21:9e:67:6f:0f:ac:27:61:01:0b:40:56:7e:2d:
80:c0:65:15:9b:7e:65:03:bf:60:79:b0:63:05:df:
e5:99:ad:6c:61:ce:a8:c6:bd:17:8f:8c:45:ba:78:
af:b0:ea:b2:cc:41:c6:e2:0a:c2:57:55:ef:ab:18:
cf:19:09:9a:f0:d7:87:2b:fb:f6:99:c6:59:05:a9:
b8:1c:03:8f:34:f1:09:a1:93:22:46:5d:3a:53:6a:
84:78:c0:cb:83:68:56:1c:65:c5:01:f2:5f:96:39:
08:61:0e:ab:a4:8d:4f:67:6e:7e:2f:f7:42:b3:c7:
3b:65:fc:e7:a0:40:a2:5d:71:74:22:c2:c0:20:cf:
60:17:cb:4f:c8:66:a2:3f:90:86:7a:8d:60:7a:23:
6b:b8:86:2c:84:23:91:f2:a3:04:8e:7c:de:a3:17:
5e:a6:00:f9:21:4d:93:17:ce:a6:ce:2f:c2:dd:31:
23:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F8:03:F9:E8:56:22:25:D8:B2:40:2C:5C:DE:9F:64:91:BA:F4:E7
X509v3 Authority Key Identifier:
keyid:FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:54:ac:60:b3:30:d4:3d:63:ae:55:4d:c8:1e:01:7a:93:1c:
5e:22:40:97:c3:b0:75:d9:ef:99:40:1b:45:fc:3a:ab:aa:6d:
63:32:0b:1c:fd:14:4b:00:71:4b:29:3b:1a:39:27:2d:8e:9e:
e6:88:2f:4e:f2:42:7c:82:19:00:be:ef:71:3a:83:d0:ec:eb:
f7:82:60:19:12:a5:64:d3:81:89:14:7d:89:67:27:84:3c:99:
07:42:f3:81:85:cc:41:56:c5:ff:cb:ce:9d:05:d1:91:c0:d2:
e9:6f:c4:f1:26:5a:d6:bb:dd:a1:21:2a:e6:d9:22:b5:db:ba:
45:cc:46:a0:76:f1:99:4b:fd:56:f5:e3:cf:94:8e:97:cf:77:
5f:d9:ed:82:c4:a7:e3:2a:6a:69:14:73:cc:0f:fe:d5:d4:e3:
cd:34:39:84:34:c9:42:1f:4d:e5:81:8b:fe:cd:fa:c4:c7:13:
0f:3c:96:2d:ca:bd:78:d2:8e:5a:62:66:fd:96:61:a2:f8:63:
5d:0f:0d:b5:c6:7c:03:11:f1:59:14:48:3f:30:8f:2b:33:67:
63:24:cd:47:d7:74:72:c3:6d:36:a1:03:19:50:99:b7:cd:2b:
77:8b:10:e2:0f:0f:c1:5f:58:4e:d8:7a:8f:d7:68:b5:d3:7f:
8f:aa:49:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:07:17 2025 by rpki-client