Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.mft
File: _Nq63VYraOxeFY4easdvfalucyM.mft (raw, json)
Hash identifier: W9XjhKeJUAuv7c/UjLazJLTm0qW8kJJXX4WrwJaBlBs=
Subject key identifier: D5:96:BF:1F:73:EA:74:3C:F1:75:20:2F:FB:F9:76:46:26:80:55:66
Authority key identifier: FC:DA:BA:DD:56:2B:68:EC:5E:15:8E:1E:6A:C7:6F:7D:A9:6E:73:23
Certificate issuer: /CN=fcdabadd562b68ec5e158e1e6ac76f7da96e7323
Certificate serial: 019A72267AA915580A6DF44331219A4A5FD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nq63VYraOxeFY4easdvfalucyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 09:01:55 +0000
Manifest this update: Tue 11 Nov 2025 09:01:55 +0000
Manifest next update: Wed 12 Nov 2025 09:01:55 +0000
Files and hashes: 1: _Nq63VYraOxeFY4easdvfalucyM.crl (hash: C/lT9B422bH0Fj+0b8qz773IZ6lLkduqPpMIqi7KXik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Nq63VYraOxeFY4easdvfalucyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:7a:a9:15:58:0a:6d:f4:43:31:21:9a:4a:5f:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcdabadd562b68ec5e158e1e6ac76f7da96e7323
Validity
Not Before: Nov 11 09:01:55 2025 GMT
Not After : Nov 12 09:01:55 2025 GMT
Subject: CN=d596bf1f73ea743cf175202ffbf9764626805566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fa:b9:28:89:f6:b6:b3:ee:87:2d:a1:53:3d:
4c:6c:9a:9c:09:1b:0b:88:2c:1f:52:89:92:4f:d0:
5c:47:2f:78:81:e6:0c:b6:9b:2e:77:65:ac:35:8b:
2f:d5:02:4d:8f:25:8a:c6:27:a8:98:9a:71:19:75:
bc:23:50:d1:12:7f:f0:e0:6e:5d:c7:9c:2b:51:f1:
c6:b5:4a:d6:3f:81:45:f8:39:bd:c3:bb:92:5a:dc:
11:fe:5b:29:bb:ea:33:e0:df:19:28:ff:42:10:39:
f0:ce:7e:96:a7:81:6f:77:8f:30:ad:a1:16:6d:b3:
2d:90:37:6e:e7:69:be:db:ce:f7:4c:28:0a:8b:ad:
9b:78:b5:96:8c:92:00:e9:b4:d1:33:ea:59:fc:9b:
6e:88:f0:38:4d:22:12:2a:9b:49:48:be:19:f2:6f:
40:19:23:75:7c:58:38:39:07:ef:9c:37:60:24:2b:
2a:06:7d:5c:81:e2:e5:03:fd:3d:4a:32:b4:df:4f:
8a:45:de:1d:09:97:40:99:c9:92:25:19:aa:64:3d:
6e:8e:95:19:7e:f1:40:27:3d:7c:0e:9a:89:c4:f4:
4a:7e:be:2e:f2:44:dc:60:9c:e3:d2:82:f4:55:e4:
4f:be:ab:09:01:b3:c1:94:11:69:48:9c:e0:77:bc:
f6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:96:BF:1F:73:EA:74:3C:F1:75:20:2F:FB:F9:76:46:26:80:55:66
X509v3 Authority Key Identifier:
keyid:FC:DA:BA:DD:56:2B:68:EC:5E:15:8E:1E:6A:C7:6F:7D:A9:6E:73:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nq63VYraOxeFY4easdvfalucyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e8bb13-9f89-40ca-8a6b-a394e866b37c/1/_Nq63VYraOxeFY4easdvfalucyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:8b:50:a9:0a:6e:ee:91:37:ab:65:97:95:ba:4d:6b:47:73:
6f:68:5d:1d:d4:92:7d:ea:40:36:ec:00:ac:2f:f4:00:ba:4f:
6b:db:a5:3a:0b:be:5f:ec:45:8f:a3:4b:80:5c:5d:17:e4:f1:
18:8f:ea:1e:af:b9:1d:f8:50:28:64:62:04:eb:8e:fd:2e:4a:
f9:1f:83:55:6e:83:25:ed:ff:ec:5b:99:1e:59:42:42:5d:9b:
97:97:b6:95:30:79:30:87:bf:1f:f3:dc:49:11:87:ed:e6:7e:
3e:8e:4f:ec:ab:28:8e:9d:3f:4c:1f:04:bf:ef:f0:eb:17:fb:
a5:ea:ed:92:86:92:8b:06:aa:63:9d:e7:72:54:be:7c:6a:66:
09:78:7e:4c:37:e5:c9:bb:92:f2:ae:c4:39:96:33:5f:3e:77:
c2:e3:c2:04:fe:47:e8:32:34:91:67:83:c0:67:10:07:2c:c6:
c6:28:7a:7b:0e:30:0f:4b:13:81:71:73:b8:e3:93:57:72:b0:
6d:c5:c7:d5:67:11:4c:e1:c4:af:00:31:b3:f6:de:1f:b2:76:
96:e9:2c:da:3a:10:f0:85:88:e2:33:ea:d9:f0:d0:4c:3d:56:
7a:1a:75:db:b7:f7:09:91:b3:45:1f:52:d1:63:cd:9b:88:aa:
0c:73:65:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:44 2025 by rpki-client