Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
File: _nzo-_uEec-5drRDzDx84vcDq34.mft (raw, json)
Hash identifier: gqjcK5eFDnSvZjVSu0xIl5UMbdKtP3nxA3S6MG82xBs=
Subject key identifier: 9A:35:E6:40:99:D7:89:00:3F:69:35:EF:70:79:96:F3:7A:CD:BA:6E
Authority key identifier: FE:7C:E8:FB:FB:84:79:CF:B9:76:B4:43:CC:3C:7C:E2:F7:03:AB:7E
Certificate issuer: /CN=fe7ce8fbfb8479cfb976b443cc3c7ce2f703ab7e
Certificate serial: 019A2289256832198739D04FB635B176F5C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
Manifest number: 0DD7
Signing time: Sun 26 Oct 2025 22:00:04 +0000
Manifest this update: Sun 26 Oct 2025 22:00:04 +0000
Manifest next update: Mon 27 Oct 2025 22:00:04 +0000
Files and hashes: 1: _nzo-_uEec-5drRDzDx84vcDq34.crl (hash: KTmMcAA3bbYC4yEoNBSyeZ6PMI6GTBsREJyTPjBqGBI=)
2: beiUjzIIFq8lUZEsjU5aHKjNnJA.roa (hash: mFm580c3qaH3SmCWZbvTiuZ0e3oedku3mVQP4lTuq5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:89:25:68:32:19:87:39:d0:4f:b6:35:b1:76:f5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe7ce8fbfb8479cfb976b443cc3c7ce2f703ab7e
Validity
Not Before: Oct 26 22:00:04 2025 GMT
Not After : Oct 27 22:00:04 2025 GMT
Subject: CN=9a35e64099d789003f6935ef707996f37acdba6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8b:fc:50:1c:0a:f2:35:47:d8:ce:75:23:25:
63:35:51:58:3d:5e:39:21:24:a9:4a:15:3f:53:8a:
12:ac:eb:7f:d2:73:5d:da:4d:e9:06:e2:bc:2f:6d:
8b:27:e3:c0:ed:ca:40:08:48:62:98:cc:25:be:60:
24:53:2b:52:8c:93:3c:08:c3:9a:0b:62:25:93:bb:
03:7d:d5:e9:19:06:71:03:16:40:f7:99:6d:85:04:
5a:27:78:92:fc:b9:29:a2:f8:f6:89:58:bf:d7:36:
ab:7b:9c:85:4b:25:b7:b4:5f:94:c6:a4:2b:0e:d0:
0d:0c:59:19:e8:d6:f4:8a:41:e7:e7:73:a1:2d:35:
d5:00:e6:5c:f3:e3:8e:aa:d9:3c:78:ff:fa:d4:2a:
bb:86:ea:98:55:ab:f2:1b:3b:d8:03:6a:08:8c:68:
9d:34:ec:58:dd:d8:58:8c:62:7d:22:75:4d:06:53:
e2:c4:1a:f2:6c:71:e3:46:2f:c7:84:1c:4e:ea:ca:
20:a0:10:fe:6d:33:78:cf:a7:af:c9:a7:3b:f6:c2:
7e:42:45:41:1d:23:ae:fd:75:12:ec:3a:99:eb:64:
7c:98:a6:1f:13:17:4f:6d:20:0d:b8:5a:99:21:5a:
ff:15:a4:8e:61:7b:7c:2a:b2:77:20:70:83:5e:75:
e4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:35:E6:40:99:D7:89:00:3F:69:35:EF:70:79:96:F3:7A:CD:BA:6E
X509v3 Authority Key Identifier:
keyid:FE:7C:E8:FB:FB:84:79:CF:B9:76:B4:43:CC:3C:7C:E2:F7:03:AB:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:4e:fc:c3:2c:b9:05:ef:35:90:86:60:24:c1:8a:eb:83:53:
54:8e:ac:ba:8b:fa:92:cf:30:20:15:31:d5:4b:3b:59:e7:d5:
f1:65:83:78:ef:cb:0d:5f:ce:85:3d:da:63:16:78:2a:dd:9e:
20:76:98:c7:62:12:bb:a7:56:b8:58:c4:da:74:d8:09:e9:ff:
a6:88:36:cf:ac:b1:78:2c:fa:5e:49:93:c1:8a:17:87:9c:4f:
41:fa:24:03:89:af:1b:bd:01:99:6c:6e:4e:42:78:7d:ee:d4:
39:e1:07:91:62:c6:57:75:8e:04:86:1a:fc:cf:da:42:9a:02:
10:4b:8c:a4:e4:c9:86:49:a1:9c:30:a1:4f:38:76:ff:89:2b:
97:d8:3c:50:13:be:12:a6:9d:b8:32:88:77:d7:b3:7e:05:62:
45:2e:de:ca:d5:bf:64:5f:20:35:eb:a1:38:53:77:ef:59:45:
8d:ca:f8:a8:c4:6d:db:4b:04:3a:8b:8a:26:36:b5:8a:b9:a9:
09:dc:48:0e:d5:55:07:98:95:37:7e:00:ad:3f:1b:8f:69:a0:
53:95:3a:3e:e9:81:6c:09:05:46:89:07:47:17:7d:f4:9f:20:
67:b6:8d:cc:bb:57:3c:3d:39:d8:56:3e:b8:3f:7f:41:b1:3d:
52:68:47:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:40:58 2025 by rpki-client