Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
File: _-rFP47j7k0UPHDf9nNVIDheTNE.mft (raw, json)
Hash identifier: WnfNFevDWRMZW3mHTrJfFAHrr4D2a+Oih5wQvA2yeEM=
Subject key identifier: 12:C2:0E:87:C8:80:C5:5C:B6:51:80:09:82:93:0F:26:F1:6A:F5:1A
Authority key identifier: FF:EA:C5:3F:8E:E3:EE:4D:14:3C:70:DF:F6:73:55:20:38:5E:4C:D1
Certificate issuer: /CN=ffeac53f8ee3ee4d143c70dff6735520385e4cd1
Certificate serial: 019A71B7B9E60997C5E06B4A8567D1A5EACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:00:57 +0000
Manifest this update: Tue 11 Nov 2025 07:00:57 +0000
Manifest next update: Wed 12 Nov 2025 07:00:57 +0000
Files and hashes: 1: _-rFP47j7k0UPHDf9nNVIDheTNE.crl (hash: OsQ54e0kvIZwuQ6XQvvWlYiD0VQHiWUq7IhswrMO3BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:b9:e6:09:97:c5:e0:6b:4a:85:67:d1:a5:ea:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffeac53f8ee3ee4d143c70dff6735520385e4cd1
Validity
Not Before: Nov 11 07:00:57 2025 GMT
Not After : Nov 12 07:00:57 2025 GMT
Subject: CN=12c20e87c880c55cb651800982930f26f16af51a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:25:58:31:6a:e5:81:0d:50:72:cb:97:25:19:
d6:7b:6d:36:9c:ed:e6:c5:67:ce:62:d5:91:69:cf:
c9:e9:00:55:dd:43:3f:4b:a1:51:98:22:4d:3e:b3:
84:e4:90:75:35:86:6a:5f:26:f2:73:ed:6b:b5:82:
6b:62:bf:da:9f:ab:47:b5:79:45:58:f3:29:83:56:
cf:df:e9:94:8e:e8:33:0f:12:33:24:f8:9b:7e:2e:
5d:54:f2:64:c0:82:64:e9:58:57:2d:29:af:0e:06:
eb:d3:39:4e:b6:24:3a:59:8b:e5:a3:5c:16:e8:c4:
16:28:b2:16:81:5c:01:66:2e:f2:03:65:b9:e7:b1:
2e:98:4b:7a:3e:f1:42:af:ad:f3:75:78:c4:90:76:
8e:f1:a2:a0:0d:58:a4:f6:60:d8:73:52:b2:ae:d4:
b8:6d:6d:7a:c3:3b:b3:35:a9:7c:88:5a:ea:f0:70:
14:48:fc:51:68:3e:2c:ad:f4:33:2f:a3:88:53:53:
99:11:c1:af:d9:36:dd:7c:e5:51:ad:fa:d7:99:4d:
75:58:82:34:34:55:2a:34:2e:dc:16:c5:8e:bf:65:
30:a3:21:71:df:d1:f6:80:1c:17:ac:60:63:df:41:
5f:83:0b:80:bb:30:ff:96:ba:8c:b3:a1:7b:8e:91:
49:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C2:0E:87:C8:80:C5:5C:B6:51:80:09:82:93:0F:26:F1:6A:F5:1A
X509v3 Authority Key Identifier:
keyid:FF:EA:C5:3F:8E:E3:EE:4D:14:3C:70:DF:F6:73:55:20:38:5E:4C:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f5:a6:7c:3d:20:6b:69:1c:52:a0:2b:3c:26:57:40:fb:70:
2a:05:a9:6e:c3:6a:ad:94:7b:b6:0f:49:69:74:a1:47:68:88:
7a:dc:1a:b9:b9:10:9e:ef:a5:f1:6f:72:7f:5c:53:50:f6:58:
4a:52:43:94:20:89:36:2c:eb:39:bb:c3:db:fe:de:dc:43:3f:
c7:58:a0:1e:4b:f4:61:4f:51:f3:6b:9c:fe:7f:3c:2a:4b:42:
99:a3:b0:e6:13:9a:78:c5:6d:2e:a7:b5:d3:ac:e2:8a:cd:49:
50:7b:d7:96:db:16:ed:61:eb:12:ef:aa:45:e6:7f:d6:07:cf:
32:94:ac:f2:e1:c4:3e:5e:3c:2a:e0:5e:e0:7b:8c:f9:1f:80:
1d:41:74:be:47:c2:68:ad:65:3b:3b:8c:8f:d2:8e:4b:f5:dc:
8d:be:a1:e5:b6:09:f7:e6:ae:85:ea:7c:92:d2:01:71:0a:8b:
3a:fb:77:7b:e2:f1:5a:c9:db:a9:6e:0a:da:52:df:9f:d7:67:
a8:bb:54:60:f0:cb:30:e3:66:00:c8:25:04:77:2d:6b:7c:5d:
54:5c:9b:4c:8f:52:fb:db:7c:05:21:33:b8:f4:a3:17:6c:4a:
b7:e7:40:d2:31:ef:8b:89:34:e7:a1:c0:a0:e9:6e:85:96:ac:
3e:2f:7a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:28 2025 by rpki-client