Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
File: n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft (raw, json)
Hash identifier: 3fIoTqKy5nxIcW0auT5Ns9AmKll8x4TTiuh+t+VSqg4=
Subject key identifier: FC:3C:E6:6D:91:BE:39:B3:C0:C1:9A:77:A8:6C:5F:ED:B5:16:A5:D4
Authority key identifier: 9F:97:4D:A4:5D:59:14:ED:E1:38:1E:EA:F9:C2:BB:16:45:B6:64:3A
Certificate issuer: /CN=9f974da45d5914ede1381eeaf9c2bb1645b6643a
Certificate serial: 019922C39B85E68EF894DBB24741A505FAA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
Manifest number: 05DA
Signing time: Sun 07 Sep 2025 06:01:08 +0000
Manifest this update: Sun 07 Sep 2025 06:01:08 +0000
Manifest next update: Mon 08 Sep 2025 06:01:08 +0000
Files and hashes: 1: FKRN7VX-M9zNuJ0Xi5mXAJ-i93Y.roa (hash: tPWo9Bc4jubOwnfbiLhbqZLh4bX+yga6cCmXXhQ2NPA=)
2: n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl (hash: 3m8iI3awxhI82DEO+igfSk/hZg178Grb41QZngsZUr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:9b:85:e6:8e:f8:94:db:b2:47:41:a5:05:fa:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f974da45d5914ede1381eeaf9c2bb1645b6643a
Validity
Not Before: Sep 7 06:01:08 2025 GMT
Not After : Sep 8 06:01:08 2025 GMT
Subject: CN=fc3ce66d91be39b3c0c19a77a86c5fedb516a5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:df:ef:0d:91:6a:26:98:6c:ed:85:2f:cf:f0:
ce:e0:e6:31:97:da:5c:f8:a2:d3:76:26:90:d7:30:
58:be:3a:ec:7b:c0:51:01:58:e1:02:01:8b:42:0e:
3d:8c:05:9f:2a:b4:e6:e4:3f:b5:15:7f:2c:91:91:
2e:7c:6b:d6:86:48:db:01:a2:4e:58:a1:8c:21:b2:
2a:68:96:2e:ad:2d:79:18:11:ff:a5:b2:93:31:ad:
85:6b:6b:46:26:c0:a5:6b:ed:41:87:62:9c:07:eb:
31:9d:4c:0d:c1:d0:31:30:6c:b8:4a:e7:8a:ae:4c:
0c:46:b3:b2:99:d7:50:c4:60:fd:f2:b0:b2:59:ac:
7a:aa:ca:84:cd:41:c6:70:e6:fd:00:26:fd:8d:b9:
be:9f:e7:fe:5d:2c:5b:e5:92:4c:f4:c8:74:bd:90:
8a:54:31:b6:51:2f:80:e1:39:0e:35:02:d1:25:5c:
2c:66:b9:e1:dc:b1:67:8f:1c:9f:34:14:3f:80:fb:
e9:cc:d8:ee:28:9f:4a:15:f0:8d:7f:fa:e6:dd:2b:
ce:42:3e:dc:5f:0a:94:75:8b:6f:6f:88:3e:db:e7:
2f:24:d2:4e:d0:be:25:3b:ea:b0:ae:f3:51:07:29:
ec:c6:83:59:35:ee:73:eb:b6:ab:d2:fe:fb:9d:86:
bc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3C:E6:6D:91:BE:39:B3:C0:C1:9A:77:A8:6C:5F:ED:B5:16:A5:D4
X509v3 Authority Key Identifier:
keyid:9F:97:4D:A4:5D:59:14:ED:E1:38:1E:EA:F9:C2:BB:16:45:B6:64:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:05:d6:ac:f3:64:5f:28:bf:58:80:09:9e:09:4f:4c:b1:81:
85:0a:95:06:1a:22:84:8d:42:27:39:a4:93:8b:1f:c2:b1:3a:
9c:70:89:bd:74:be:8f:24:07:8f:49:df:55:09:d6:aa:d4:fe:
84:1a:7a:e3:f3:25:60:37:a4:7a:45:28:32:f2:e4:1e:f4:33:
df:ea:29:8a:90:f9:08:40:f2:48:5c:63:65:62:a4:4b:10:b8:
d6:05:6d:3e:bb:12:3b:06:63:bf:d0:61:82:69:70:2f:1d:67:
e5:aa:54:1d:07:f2:1b:c9:c9:38:83:4b:2d:6b:10:62:17:fe:
3d:1a:21:96:f3:2f:0e:83:e9:84:25:c2:37:05:e2:49:39:d2:
84:d7:1d:8e:a5:39:84:2e:7d:85:0d:41:02:b5:35:40:f4:93:
b7:4f:83:91:3c:d8:97:1f:60:30:dd:83:fc:c1:65:f6:24:bd:
9a:29:01:cc:0d:70:6c:39:db:19:52:f8:52:80:1c:b1:00:d0:
e9:6f:a7:1e:96:6d:32:89:41:74:7c:ab:0a:80:f2:06:cd:96:
a6:dd:87:8c:2d:99:80:42:d8:a2:24:d5:9f:4b:db:21:22:ac:
0a:58:ba:93:33:23:84:cc:c1:86:61:72:06:c5:4f:dd:3d:7d:
21:5f:e6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:48 2025 by rpki-client