Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
File: _Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft (raw, json)
Hash identifier: +FZeJas9sSQSaxwJNhkmn5hk+9JlZNwaNM/IJ88eRRE=
Subject key identifier: 99:09:D4:F5:28:3E:02:8D:04:42:77:E3:5D:5A:50:F7:A6:2E:16:20
Authority key identifier: FC:D7:7E:68:77:82:98:33:04:33:33:53:8B:47:F1:26:82:CE:BD:C3
Certificate issuer: /CN=fcd77e6877829833043333538b47f12682cebdc3
Certificate serial: 019748C30D7A3D6C0A52F0B1C807CF79A263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
Manifest number: 03FC
Signing time: Sat 07 Jun 2025 05:00:31 +0000
Manifest this update: Sat 07 Jun 2025 05:00:31 +0000
Manifest next update: Sun 08 Jun 2025 05:00:31 +0000
Files and hashes: 1: _Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl (hash: /YsZTb6jbfawAEUaTYN6KHeG4Oa59u7LO1XLJHPE9Gg=)
2: nVML7LcRQkLl4LsQylRXZkNhkNs.roa (hash: aP+8mW119fycA5Li+oipfw+Kb6S3KHGW180HDqCC2II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:0d:7a:3d:6c:0a:52:f0:b1:c8:07:cf:79:a2:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd77e6877829833043333538b47f12682cebdc3
Validity
Not Before: Jun 7 05:00:31 2025 GMT
Not After : Jun 8 05:00:31 2025 GMT
Subject: CN=9909d4f5283e028d044277e35d5a50f7a62e1620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:dc:20:1c:e9:42:7f:ea:da:6b:b0:42:cb:e5:
48:09:b8:f9:7f:67:1e:99:d0:6b:83:30:ca:75:1b:
26:20:f7:a8:a5:95:ec:4c:83:07:19:fe:e0:b3:21:
ed:28:51:7a:31:13:b3:d1:a5:68:5b:49:55:9d:13:
3a:a7:30:25:20:c4:08:e8:cd:33:8b:e4:98:a6:bb:
e8:b2:d8:41:6a:2a:2d:2c:2d:a1:91:11:1d:4e:53:
d9:c8:58:12:26:86:0f:05:87:4f:3f:e7:64:47:b9:
a0:80:7c:52:6c:42:62:ea:9f:b7:1c:ca:69:85:f0:
af:fd:1f:53:c0:17:e6:2f:77:0b:bc:39:a5:fc:be:
28:b0:a6:74:22:cb:d3:4e:3e:0d:35:67:09:25:53:
33:a3:92:ec:95:51:76:c3:d2:30:a5:c1:7e:3d:b5:
e1:32:17:f5:9f:69:a7:0f:df:9c:4f:2f:19:74:bf:
12:40:3e:4d:9b:eb:75:a5:8d:52:98:5c:6e:5a:84:
4a:bc:6a:b5:ee:e5:83:78:70:76:bf:68:fa:8b:cc:
3c:5a:4f:78:42:4b:92:13:2a:d1:b4:5a:fb:0e:d5:
26:8e:08:8b:74:03:39:a8:27:a7:6e:69:92:4a:8b:
8b:ea:89:1b:ab:ca:82:67:63:2d:ef:00:06:96:3e:
23:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:09:D4:F5:28:3E:02:8D:04:42:77:E3:5D:5A:50:F7:A6:2E:16:20
X509v3 Authority Key Identifier:
keyid:FC:D7:7E:68:77:82:98:33:04:33:33:53:8B:47:F1:26:82:CE:BD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:7e:e3:b5:71:d9:d1:07:3a:84:de:7c:91:0a:5e:0c:f0:50:
f4:b7:39:47:33:53:a5:a2:07:eb:d7:81:7b:26:52:de:c9:74:
48:e5:e0:69:2a:34:cd:90:f6:00:60:db:eb:d2:18:dc:7d:c9:
bd:71:c6:4d:59:aa:18:ec:1a:d9:a4:61:91:21:6b:14:8c:8d:
64:18:b7:ff:4d:e7:4b:1e:bf:6b:8f:81:a4:4c:b4:77:86:fa:
a8:44:66:c5:8d:5f:73:0f:f7:9e:a3:82:32:29:59:1e:d4:a3:
14:7c:48:62:df:fe:9b:e7:6f:be:eb:e6:9e:6d:bb:61:93:dc:
5d:76:a3:d7:36:d5:a9:e7:8c:af:30:6a:6b:ce:70:58:49:0e:
5d:a1:b8:ac:1b:20:38:eb:e7:f0:04:ce:51:f4:91:38:ff:43:
9e:13:8e:6a:2f:68:18:2f:5f:ca:f2:1c:a9:54:8a:cd:98:73:
d1:ca:36:87:75:24:fe:7e:16:f2:0e:a7:bc:b4:d3:a7:7f:26:
62:48:28:47:c0:90:b8:06:15:8e:ac:8f:80:39:5d:7a:a9:d7:
5b:0b:64:63:94:4c:b3:f4:20:ac:ef:d5:a4:52:76:fc:02:59:
16:77:a2:e1:0c:1f:3c:11:fa:25:12:61:63:91:aa:84:18:41:
2e:0c:84:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:38:43 2025 by rpki-client