
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft
File: _Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft (raw, json)
Hash identifier: lQzPVpQTs2dF2fLDG52sCcbO/oV2OHZr/zWHi8Kut6A=
Subject key identifier: 40:62:5F:76:01:28:02:31:25:49:EB:14:56:37:2D:04:D3:63:91:C7
Authority key identifier: FC:D7:39:9F:87:47:0C:3E:A4:E4:DF:D6:97:A9:8A:E2:BD:02:6F:9C
Certificate issuer: /CN=fcd7399f87470c3ea4e4dfd697a98ae2bd026f9c
Certificate serial: 0199180922B9FDF94A727D4615DFF09439E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft
Manifest number: 0120
Signing time: Fri 05 Sep 2025 04:01:15 +0000
Manifest this update: Fri 05 Sep 2025 04:01:15 +0000
Manifest next update: Sat 06 Sep 2025 04:01:15 +0000
Files and hashes: 1: _Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.crl (hash: gvvbK9lZZ1WvwNpPHJ1Ozpk1V2buVP352EywCk3hRDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:09:22:b9:fd:f9:4a:72:7d:46:15:df:f0:94:39:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd7399f87470c3ea4e4dfd697a98ae2bd026f9c
Validity
Not Before: Sep 5 04:01:15 2025 GMT
Not After : Sep 6 04:01:15 2025 GMT
Subject: CN=40625f76012802312549eb1456372d04d36391c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:82:de:0f:2c:42:2e:81:0f:e4:b1:a1:49:59:
15:27:56:50:c8:c8:49:f4:c3:04:00:27:cf:f0:9c:
c0:5d:8e:c5:8e:a6:a6:09:69:ce:c4:74:2b:6d:97:
da:21:54:4e:50:b4:07:d7:92:8f:4c:b1:34:6f:2d:
d6:2a:ce:59:1b:a2:3d:b6:07:ef:26:7b:52:8a:6e:
61:b2:28:87:44:93:e6:27:60:02:2a:e3:9c:d6:3c:
cb:84:3e:55:eb:fd:21:d1:61:79:68:cd:20:f1:99:
2a:2b:8c:98:ad:fc:e1:ff:0c:42:25:b5:0a:32:a3:
a7:2f:ec:9b:fe:af:63:01:2e:02:db:03:a5:d7:b9:
72:25:dc:0f:0b:4a:f0:95:68:a0:bf:5d:11:6b:5f:
e0:15:97:a2:ff:d6:28:7c:7a:76:1a:4d:2a:03:03:
2c:05:a5:52:44:81:ed:d9:eb:9c:46:28:7c:2a:c7:
f1:76:c5:85:37:10:21:83:2a:1b:02:e7:ad:6b:24:
06:c2:8e:c3:f1:a8:da:11:22:be:13:93:4c:4c:18:
a2:23:61:b2:31:81:bd:c5:c7:b6:d2:20:de:3f:4d:
d8:06:b2:0e:b1:6f:97:2e:36:da:d1:5f:45:e3:b8:
33:9b:0b:bf:01:85:61:6d:4a:0c:e3:06:a4:d0:57:
ec:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:62:5F:76:01:28:02:31:25:49:EB:14:56:37:2D:04:D3:63:91:C7
X509v3 Authority Key Identifier:
keyid:FC:D7:39:9F:87:47:0C:3E:A4:E4:DF:D6:97:A9:8A:E2:BD:02:6F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:bd:d8:90:4d:a6:c0:b4:be:90:39:83:03:b3:4d:a3:95:9f:
1f:89:df:8e:7f:d7:56:02:2f:6a:80:10:2a:93:f9:63:09:d4:
f0:6a:1b:f6:25:a1:7e:e9:2c:eb:0a:6d:bf:56:58:f1:a8:28:
69:3e:0b:3a:2b:b2:bb:cd:3d:5c:62:80:fc:8c:04:09:57:81:
bd:44:19:c0:4e:75:7c:38:8c:09:63:50:a5:48:ec:99:53:bf:
bd:5b:e9:87:b6:57:d5:54:0c:0b:5b:ec:6c:bd:84:7e:d7:87:
cf:2e:95:d9:13:29:c8:1d:f1:c0:b7:21:b5:ab:f2:4a:ff:dc:
85:d6:3b:a6:78:75:91:43:1c:f4:83:e4:32:a3:95:91:b8:03:
8f:b1:6f:e2:65:30:32:f3:9f:04:8e:3d:20:24:1f:d6:9d:b9:
72:01:1e:ea:91:c3:fe:09:2d:47:1f:c0:af:a4:43:67:43:86:
ff:2d:58:25:3e:9b:97:f7:73:63:f2:ad:6b:0e:b7:e9:e6:7b:
0a:ab:9d:02:cd:da:aa:2d:c5:f0:d7:db:f0:21:6e:a6:a2:8b:
f4:cd:71:60:a1:bf:17:d5:b9:92:56:0a:d7:55:7a:18:77:c2:
a6:8a:85:50:5a:b0:50:b6:a6:7a:79:99:66:ba:87:7f:7b:d0:
36:5d:24:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:39:26 2025 by rpki-client