Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft
File: _Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft (raw, json)
Hash identifier: V9d/H9xNfQ7je9edOwAUCjEp+SvJ/XglOe8ebXDaRoU=
Subject key identifier: 78:6B:D4:0E:62:47:21:8A:4D:59:C9:57:EE:8F:59:33:B4:F1:3F:CE
Authority key identifier: FC:D7:39:9F:87:47:0C:3E:A4:E4:DF:D6:97:A9:8A:E2:BD:02:6F:9C
Certificate issuer: /CN=fcd7399f87470c3ea4e4dfd697a98ae2bd026f9c
Certificate serial: 019A73A6AF4AA081E0E8D0C06C608393F2B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft
Manifest number: 01D4
Signing time: Tue 11 Nov 2025 16:01:34 +0000
Manifest this update: Tue 11 Nov 2025 16:01:34 +0000
Manifest next update: Wed 12 Nov 2025 16:01:34 +0000
Files and hashes: 1: _Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.crl (hash: BhR1I6+DqEJQ6e8brY9jbKBpZ8abnNUYzSmTcXzce50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a6:af:4a:a0:81:e0:e8:d0:c0:6c:60:83:93:f2:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd7399f87470c3ea4e4dfd697a98ae2bd026f9c
Validity
Not Before: Nov 11 16:01:34 2025 GMT
Not After : Nov 12 16:01:34 2025 GMT
Subject: CN=786bd40e6247218a4d59c957ee8f5933b4f13fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2e:d1:6c:0d:0e:7c:54:a5:ad:3e:7c:21:62:
a6:08:83:24:ed:e3:4c:54:62:9e:60:3b:e4:81:99:
e5:4b:d4:2c:a4:eb:88:42:2a:9a:08:f2:cc:0f:45:
be:60:1f:9e:7b:94:a8:d1:e9:63:53:f6:ad:c2:e8:
ec:00:22:eb:16:0e:47:3d:a1:f9:37:73:cd:1f:ad:
4c:aa:54:16:88:65:a0:98:cd:1e:15:f5:88:31:13:
7f:69:61:0c:7a:7f:9c:73:19:7c:0d:ce:b4:37:15:
79:90:e4:ee:5c:72:a6:5d:3d:6d:8d:3a:3d:7e:9d:
1c:3f:64:7b:6a:59:2c:30:7b:66:49:c5:21:d9:77:
3c:13:91:4a:37:85:b0:93:47:7d:ea:4f:77:e9:6b:
42:0a:44:08:ff:6b:8b:a7:02:c8:fe:fc:c3:1e:25:
41:a3:9c:ca:67:f2:4a:b0:25:6c:9a:3c:73:b8:ba:
63:96:89:28:58:95:ae:fc:5f:38:22:78:d5:0d:b8:
fe:a8:62:ca:68:8d:dd:39:c4:16:b5:f2:39:65:af:
a0:2b:d0:34:fd:e1:76:9f:34:c8:1c:42:7c:90:c4:
bb:e7:24:ff:2f:27:42:cb:40:8b:60:63:c1:0e:de:
3f:70:a0:7d:c5:28:b8:d9:0d:a9:fd:85:c9:4d:bb:
bc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6B:D4:0E:62:47:21:8A:4D:59:C9:57:EE:8F:59:33:B4:F1:3F:CE
X509v3 Authority Key Identifier:
keyid:FC:D7:39:9F:87:47:0C:3E:A4:E4:DF:D6:97:A9:8A:E2:BD:02:6F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:3a:be:87:32:e6:70:9b:e9:4c:ca:99:54:73:0b:f0:42:8d:
48:ff:42:ce:42:ee:6c:53:61:0f:4a:9c:65:86:e2:23:df:c2:
08:60:68:5b:c2:2d:0e:b5:05:56:2c:a0:43:48:ba:4e:e9:41:
e4:b1:96:9b:9c:dc:5d:ef:d1:7d:aa:00:20:34:82:0f:94:51:
b2:b0:e1:93:13:cf:90:27:07:0f:44:ee:20:f9:ac:b4:af:77:
ad:b4:5e:50:cc:6e:c1:0e:f7:a7:88:40:ad:d9:e6:b3:09:2d:
39:9e:c7:89:2c:b5:04:c4:77:ad:2e:d1:53:c1:7f:f8:b5:f3:
33:09:e0:dd:81:19:bc:aa:f4:98:e0:c7:ed:ef:3d:fd:28:30:
e1:91:65:5f:4b:df:5b:fe:6e:3e:3c:a0:73:35:53:c5:d8:6f:
27:5a:e1:33:3d:38:1a:0b:24:9b:b2:97:40:97:5c:ff:54:bc:
0d:7a:46:30:ac:df:ed:3c:a1:d2:82:84:61:21:33:a4:3a:9a:
bc:93:41:51:d3:9e:05:63:77:c6:17:41:13:99:9d:87:5f:2e:
64:95:d5:33:94:2e:f1:1c:78:fc:7e:de:63:ae:e7:96:4a:fa:
4c:de:48:41:fa:fc:59:65:da:05:cc:c5:d0:21:83:04:bf:d4:
9f:54:0f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:13:49 2025 by rpki-client