Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
File: _Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft (raw, json)
Hash identifier: qTJU5sEpdGYU7P4LgRnUq+1mMmo5NNWnQVko63JSnVY=
Subject key identifier: B1:A7:73:7C:0A:6C:6A:41:45:45:2D:6A:D1:78:8E:DA:76:DE:90:AD
Authority key identifier: FC:D7:7E:68:77:82:98:33:04:33:33:53:8B:47:F1:26:82:CE:BD:C3
Certificate issuer: /CN=fcd77e6877829833043333538b47f12682cebdc3
Certificate serial: 019923D6337566907898AC73A370AC06F83E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
Manifest number: 04F2
Signing time: Sun 07 Sep 2025 11:01:04 +0000
Manifest this update: Sun 07 Sep 2025 11:01:04 +0000
Manifest next update: Mon 08 Sep 2025 11:01:04 +0000
Files and hashes: 1: _Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl (hash: p31ZD0VyO+R/ISak2ysII/RqP5EF5SlfeF5qeJKt3j0=)
2: nVML7LcRQkLl4LsQylRXZkNhkNs.roa (hash: aP+8mW119fycA5Li+oipfw+Kb6S3KHGW180HDqCC2II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:33:75:66:90:78:98:ac:73:a3:70:ac:06:f8:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd77e6877829833043333538b47f12682cebdc3
Validity
Not Before: Sep 7 11:01:04 2025 GMT
Not After : Sep 8 11:01:04 2025 GMT
Subject: CN=b1a7737c0a6c6a4145452d6ad1788eda76de90ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:36:e9:5b:c0:e3:c9:2e:f6:84:29:bd:e4:d8:
5f:be:a5:3e:16:a5:7a:20:38:66:b0:d4:f9:6c:89:
f1:a1:95:b9:38:80:19:f7:34:1e:df:f2:8c:93:51:
8b:d5:9a:f6:02:9b:10:0d:40:2a:99:8e:3c:a8:7c:
1e:da:f5:a0:71:41:7f:40:74:2b:3d:bf:2c:2f:1b:
ce:1d:cf:28:fa:5e:77:34:06:15:0f:a2:fe:b7:1c:
f6:d0:40:ed:0b:96:b8:16:32:a6:48:cd:81:da:d4:
4c:04:1c:4a:47:1e:bf:82:72:a6:e3:aa:35:5f:f4:
77:aa:6c:64:f7:8b:7b:01:5d:3c:5a:27:a2:24:56:
aa:d8:8d:28:8e:09:72:e6:06:46:bf:f6:b7:a8:cb:
0d:8e:1e:a3:03:3e:f9:f0:da:a6:5f:b2:89:87:ef:
f8:8c:67:49:6b:f8:7c:79:11:1b:ac:96:b8:ca:83:
f0:94:c1:17:1c:87:69:21:5e:38:e1:98:ea:b7:de:
d3:37:4b:ec:e0:35:81:a4:be:df:64:0e:7e:c3:a1:
8f:d1:0a:c0:fa:80:81:d8:30:5b:8a:86:97:10:c2:
38:2b:73:7b:53:5a:38:55:96:f1:ec:c8:fe:dd:2b:
55:e4:b7:f4:a0:87:1a:32:45:40:e0:0e:fc:fa:16:
2c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A7:73:7C:0A:6C:6A:41:45:45:2D:6A:D1:78:8E:DA:76:DE:90:AD
X509v3 Authority Key Identifier:
keyid:FC:D7:7E:68:77:82:98:33:04:33:33:53:8B:47:F1:26:82:CE:BD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:72:f4:ec:86:d7:16:85:6d:a1:de:55:00:a8:5e:24:80:84:
d4:d8:8c:74:a7:51:0e:8d:bf:c5:10:85:a2:b2:f0:92:12:7b:
29:88:9c:5e:0c:26:e1:1b:4f:71:74:fd:ec:97:1d:fa:ea:21:
22:ff:d1:39:d8:f3:44:d7:57:ad:75:26:2b:98:40:28:a9:93:
87:72:77:b8:12:cc:94:bf:f5:8a:7d:25:d8:ac:0f:5c:93:99:
be:f3:f5:24:e5:ea:d8:52:c2:9a:59:50:06:c3:0d:cc:c6:41:
07:1d:5d:bd:aa:d3:c6:ce:64:2f:e6:65:d9:5b:87:f3:44:b7:
b3:d1:fe:df:24:9b:bd:15:23:06:7c:03:f1:bf:93:f4:f0:6b:
83:ae:be:2b:04:ef:44:0f:c6:16:96:14:1e:0f:e4:51:9a:07:
15:b5:6e:a0:0a:14:60:f8:30:fd:ee:66:d9:0c:c5:8d:ab:94:
50:d8:b5:b7:a7:15:6c:53:c6:5f:f8:fc:6e:08:fe:28:ae:00:
33:25:2f:eb:13:f2:13:74:a9:27:11:3a:b7:fd:f2:37:fc:49:
c3:bb:67:36:ae:34:46:7f:e4:1f:b2:0a:cf:d5:de:e8:d6:22:
94:7d:bf:e6:55:ca:df:5c:fd:e7:be:12:e6:4a:27:2e:3d:a7:
7e:1d:e6:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkj1jN1ZpB4mKxzo3CsBvg+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZDc3ZTY4Nzc4Mjk4MzMwNDMzMzM1MzhiNDdmMTI2ODJj
ZWJkYzMwHhcNMjUwOTA3MTEwMTA0WhcNMjUwOTA4MTEwMTA0WjAzMTEwLwYDVQQD
EyhiMWE3NzM3YzBhNmM2YTQxNDU0NTJkNmFkMTc4OGVkYTc2ZGU5MGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTbpW8DjyS72hCm95NhfvqU+FqV6
IDhmsNT5bInxoZW5OIAZ9zQe3/KMk1GL1Zr2ApsQDUAqmY48qHwe2vWgcUF/QHQr
Pb8sLxvOHc8o+l53NAYVD6L+txz20EDtC5a4FjKmSM2B2tRMBBxKRx6/gnKm46o1
X/R3qmxk94t7AV08WieiJFaq2I0ojgly5gZGv/a3qMsNjh6jAz758NqmX7KJh+/4
jGdJa/h8eREbrJa4yoPwlMEXHIdpIV444Zjqt97TN0vs4DWBpL7fZA5+w6GP0QrA
+oCB2DBbioaXEMI4K3N7U1o4VZbx7Mj+3StV5Lf0oIcaMkVA4A78+hYshwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLGnc3wKbGpBRUUtatF4jtp23pCtMB8GA1UdIwQY
MBaAFPzXfmh3gpgzBDMzU4tH8SaCzr3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX05kLWFIZUNtRE1FTXpOVGkwZnhKb0xPdmNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xZWQxZjYtMDlkNy00Mjk0LTkyYjQt
ZTU1MTc0NWQyNzZlLzEvX05kLWFIZUNtRE1FTXpOVGkwZnhKb0xPdmNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8xZWQxZjYtMDlkNy00Mjk0LTkyYjQtZTU1MTc0NWQyNzZl
LzEvX05kLWFIZUNtRE1FTXpOVGkwZnhKb0xPdmNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvXL07IbX
FoVtod5VAKheJICE1NiMdKdRDo2/xRCForLwkhJ7KYicXgwm4RtPcXT97Jcd+uoh
Iv/ROdjzRNdXrXUmK5hAKKmTh3J3uBLMlL/1in0l2KwPXJOZvvP1JOXq2FLCmllQ
BsMNzMZBBx1dvarTxs5kL+Zl2VuH80S3s9H+3ySbvRUjBnwD8b+T9PBrg66+KwTv
RA/GFpYUHg/kUZoHFbVuoAoUYPgw/e5m2QzFjauUUNi1t6cVbFPGX/j8bgj+KK4A
MyUv6xPyE3SpJxE6t/3yN/xJw7tnNq40Rn/kH7IKz9Xe6NYilH2/5lXK31z9574S
5konLj2nfh3mSA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:47:42 2025 by rpki-client