Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
File: _-rFP47j7k0UPHDf9nNVIDheTNE.mft (raw, json)
Hash identifier: NWdl0NQ17wHXt78uZRd5NJT6g0fyeRrV0TPADgum3I0=
Subject key identifier: F1:2E:EC:0F:02:00:9E:B1:D0:87:B7:1A:B9:6A:30:55:A8:6E:CD:FE
Authority key identifier: FF:EA:C5:3F:8E:E3:EE:4D:14:3C:70:DF:F6:73:55:20:38:5E:4C:D1
Certificate issuer: /CN=ffeac53f8ee3ee4d143c70dff6735520385e4cd1
Certificate serial: 019921B0E4B043F43A8FDCA621A263F63BDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
Manifest number: 166D
Signing time: Sun 07 Sep 2025 01:01:04 +0000
Manifest this update: Sun 07 Sep 2025 01:01:04 +0000
Manifest next update: Mon 08 Sep 2025 01:01:04 +0000
Files and hashes: 1: _-rFP47j7k0UPHDf9nNVIDheTNE.crl (hash: dgHWa/AF/HFxejGSJbFLMp02niud92urWjuppYBr/fA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:e4:b0:43:f4:3a:8f:dc:a6:21:a2:63:f6:3b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffeac53f8ee3ee4d143c70dff6735520385e4cd1
Validity
Not Before: Sep 7 01:01:04 2025 GMT
Not After : Sep 8 01:01:04 2025 GMT
Subject: CN=f12eec0f02009eb1d087b71ab96a3055a86ecdfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6e:53:69:68:31:ad:2d:d4:48:29:cf:40:f3:
e8:4e:97:a2:2f:8b:eb:ec:c9:82:cc:66:27:00:7d:
f2:03:de:25:10:9e:aa:2f:21:85:f5:22:0e:93:d9:
07:d7:cd:a0:ed:a1:c3:6d:03:65:6b:aa:30:a7:da:
c6:e8:63:1e:d7:08:a5:4d:b0:05:ac:a9:43:44:27:
12:66:19:f1:9b:10:c2:82:e7:cc:eb:a6:1b:52:cc:
25:05:1e:73:37:26:47:01:6b:aa:a2:04:88:9d:ff:
cd:03:f5:7a:99:8f:22:f6:17:b7:92:90:59:bf:ab:
2d:60:aa:e3:c3:58:60:3c:5a:e0:f2:19:7f:e9:5b:
05:f0:90:23:9c:65:11:27:28:32:f8:84:72:ed:d7:
a9:89:0a:db:e6:45:9c:90:bf:f9:d7:72:ec:b7:29:
ea:f1:e7:3d:a5:99:0e:8c:26:13:12:59:87:84:4d:
44:ba:8e:e7:a2:51:dd:b4:e0:5a:af:06:c9:52:1d:
71:32:aa:09:68:24:c4:c5:99:8b:6f:42:64:95:8a:
19:11:2d:5b:1d:5d:41:19:d4:95:eb:e2:59:92:e4:
a2:56:49:48:6d:0b:2a:f5:d2:6b:2e:d2:40:59:6e:
5c:f6:26:1d:cc:46:f8:bc:ab:a4:b1:b7:84:2b:34:
62:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2E:EC:0F:02:00:9E:B1:D0:87:B7:1A:B9:6A:30:55:A8:6E:CD:FE
X509v3 Authority Key Identifier:
keyid:FF:EA:C5:3F:8E:E3:EE:4D:14:3C:70:DF:F6:73:55:20:38:5E:4C:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d1:1c:3e:85:37:3b:80:26:0d:26:70:74:24:73:17:15:cf:
ae:64:0f:87:3e:41:c9:c8:26:c3:c4:2e:46:df:3b:05:b7:94:
49:34:a4:bc:aa:ec:46:13:b3:ea:f5:a6:e0:7a:0d:72:75:08:
e9:d8:f5:d1:94:81:64:8b:5a:a5:2c:c7:33:a0:58:92:f6:41:
cf:c8:96:ae:63:81:da:f8:12:e8:41:c3:90:fb:7d:d8:9d:f8:
70:b7:bc:7f:4b:8f:ad:b0:d2:f5:90:5c:73:bc:09:0b:af:e8:
ed:d8:a7:07:e4:af:a2:66:42:69:77:c2:25:40:87:da:08:08:
8d:7b:c5:3d:02:77:c2:0c:42:62:8d:7d:f4:13:47:2c:6b:92:
00:49:fc:f3:85:ea:d2:52:27:f6:56:66:bc:6d:3d:8f:53:fc:
98:7e:3e:ad:f9:0d:61:1a:44:0a:77:3f:2a:25:7e:74:db:59:
f4:f1:f8:89:81:47:bd:31:ac:9e:82:83:d3:a9:39:74:63:19:
62:5d:1a:fa:27:6d:23:d9:30:50:5b:5c:51:27:76:33:df:e3:
36:f8:ae:46:81:bf:9b:fc:df:59:c2:e3:f1:d3:1d:b6:01:61:
10:38:25:b8:13:7a:da:e0:9b:eb:bf:78:5d:c6:8d:78:98:48:
47:a3:56:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:53 2025 by rpki-client