Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
File: _Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft (raw, json)
Hash identifier: 5bNfEaffSknCR4XFGly+yazQGwQbHfGQL2JtUnvq4EI=
Subject key identifier: 9E:F7:80:51:76:5B:DF:2A:52:E5:C2:FE:5B:E0:C0:D3:C0:8A:BE:31
Authority key identifier: FC:D7:7E:68:77:82:98:33:04:33:33:53:8B:47:F1:26:82:CE:BD:C3
Certificate issuer: /CN=fcd77e6877829833043333538b47f12682cebdc3
Certificate serial: 019A71EEB8C5EC750E09221C25D634CC6182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
Manifest number: 059F
Signing time: Tue 11 Nov 2025 08:01:01 +0000
Manifest this update: Tue 11 Nov 2025 08:01:01 +0000
Manifest next update: Wed 12 Nov 2025 08:01:01 +0000
Files and hashes: 1: _Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl (hash: zsyTbSzWSDkDM44jxLrdFSYlrxfo1q3Ru/utgvJtu/Q=)
2: nVML7LcRQkLl4LsQylRXZkNhkNs.roa (hash: aP+8mW119fycA5Li+oipfw+Kb6S3KHGW180HDqCC2II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:b8:c5:ec:75:0e:09:22:1c:25:d6:34:cc:61:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd77e6877829833043333538b47f12682cebdc3
Validity
Not Before: Nov 11 08:01:01 2025 GMT
Not After : Nov 12 08:01:01 2025 GMT
Subject: CN=9ef78051765bdf2a52e5c2fe5be0c0d3c08abe31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0e:de:96:6a:43:b8:98:d6:da:6d:ff:cc:56:
54:3e:14:8a:ca:56:bb:38:3c:34:c2:52:cf:a1:f0:
62:b6:cf:26:6a:26:c6:dc:75:8d:e9:fb:a2:eb:10:
bc:03:fd:07:1d:ec:35:c8:b4:d3:21:f3:18:00:b9:
24:45:67:26:02:ea:d3:09:b3:af:e2:64:31:26:f6:
5e:00:c6:8a:d8:c9:eb:8f:12:29:ad:a3:a5:9e:59:
f6:ce:8d:22:cf:a3:9d:07:69:e0:db:59:24:e5:29:
db:42:4f:89:05:91:00:bc:43:cb:f3:a8:61:e3:57:
35:fd:6a:44:b8:ac:24:f5:5f:79:97:71:a2:56:96:
29:8f:fd:cd:6d:6d:db:07:5f:fc:92:70:b5:e5:4b:
db:cc:7e:51:f8:ed:42:41:26:32:27:bf:a8:23:4c:
81:d4:6d:ab:2d:e6:25:d0:00:ed:f2:51:ef:68:7b:
cc:eb:c1:4c:0a:2d:30:a5:96:cf:97:bb:21:40:c3:
7b:50:3b:48:ce:82:f5:58:43:4a:f6:ff:27:29:86:
ee:52:c9:17:21:54:45:14:2a:81:af:46:bb:d5:11:
ac:33:bf:1b:1a:ea:19:0f:2c:7c:60:20:85:7d:ab:
81:a1:c3:04:70:20:c8:8c:f3:47:75:b9:b5:52:14:
21:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F7:80:51:76:5B:DF:2A:52:E5:C2:FE:5B:E0:C0:D3:C0:8A:BE:31
X509v3 Authority Key Identifier:
keyid:FC:D7:7E:68:77:82:98:33:04:33:33:53:8B:47:F1:26:82:CE:BD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:93:29:d4:be:2f:d5:af:14:33:bc:09:30:be:d0:d7:54:bf:
a2:6c:ad:9b:42:f5:32:31:a0:21:65:d7:1c:3f:c7:7c:90:f1:
f8:91:46:68:2e:29:e1:41:71:5f:2b:42:ab:fb:6e:1c:17:19:
d8:58:70:16:67:b6:d2:f8:6c:ea:94:e9:34:c3:27:95:0d:68:
fa:d0:8c:38:47:63:41:3b:8f:2a:a5:46:26:f7:55:aa:e8:92:
88:16:70:41:f2:ce:64:6f:d2:ad:85:e9:13:e7:7b:b2:ae:7c:
7d:63:e4:af:04:8a:18:bd:12:96:c4:ca:bb:23:fd:d4:66:fe:
77:af:68:c3:08:92:65:44:c3:0e:c5:57:50:ff:fd:72:be:64:
43:ec:b3:cb:53:f8:18:95:23:7e:60:b6:97:a0:59:2d:e6:19:
49:2c:59:16:bd:87:50:23:76:39:de:e4:81:08:84:ba:6a:bf:
c9:85:4b:09:e6:1c:84:9c:4d:0b:2e:4e:a6:d7:26:47:7d:e9:
86:8b:70:28:ab:e6:8e:6b:80:77:29:c3:c6:3c:2b:c1:ab:62:
22:1e:eb:8b:f1:e5:e0:fe:11:c4:4b:ee:d7:6c:fe:c9:36:78:
be:76:f5:cf:9e:78:b3:15:77:a3:e9:c5:2f:e0:80:fc:0a:0e:
8e:11:c0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:42 2025 by rpki-client