Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
File: nDz83hO2YLXIMdr74b-_aN-fvjk.mft (raw, json)
Hash identifier: NFjvdaiFU2TGxNfUPMificgYhNqKQZ4PMeNxXhfsW6o=
Subject key identifier: E2:8E:04:06:0E:8A:17:C6:CC:1D:56:4C:A8:45:10:25:F0:B3:E8:B2
Authority key identifier: 9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39
Certificate issuer: /CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39
Certificate serial: 019A4BBC674FE0CC74151E0F631755A61040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
Manifest number: 06C8
Signing time: Mon 03 Nov 2025 22:00:29 +0000
Manifest this update: Mon 03 Nov 2025 22:00:29 +0000
Manifest next update: Tue 04 Nov 2025 22:00:29 +0000
Files and hashes: 1: 1-o7g3L28fO-PQjnRpt-UgWkTHQw.roa (hash: eDwV2kux0bA6vYCRB0ZxUOPv76wEVLU7G2rZyoTStqs=)
2: nDz83hO2YLXIMdr74b-_aN-fvjk.crl (hash: uTueEEwloQcVXOJJjN+mwmXmJHrVV8Vx3dXKRiUq3Zw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:bc:67:4f:e0:cc:74:15:1e:0f:63:17:55:a6:10:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39
Validity
Not Before: Nov 3 22:00:29 2025 GMT
Not After : Nov 4 22:00:29 2025 GMT
Subject: CN=e28e04060e8a17c6cc1d564ca8451025f0b3e8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b5:95:51:da:11:bb:b0:26:de:18:2e:eb:b0:
77:7b:04:83:f4:7e:a5:af:b0:73:4b:bc:67:85:79:
2d:1d:c6:11:5b:9a:68:c2:79:fc:24:03:b7:3c:9c:
d2:dd:5a:d1:80:33:e3:71:fe:4e:f6:26:04:4b:c8:
14:ee:97:be:35:93:17:82:9a:94:4a:3e:cd:34:2a:
f3:39:60:90:52:80:b9:51:4c:02:65:81:53:04:81:
fe:56:ce:a0:f8:5b:a3:77:98:3d:af:37:93:30:24:
59:1b:2f:07:f4:fb:38:f6:da:52:f7:fc:9f:58:3b:
f9:3d:53:e9:2a:35:9b:e8:1e:93:b9:b2:44:1b:6b:
93:f9:d6:f6:6a:cd:cc:a9:ff:f2:8b:7a:99:1f:31:
21:60:c2:34:df:21:cd:14:f4:6e:22:61:e3:e0:53:
e4:a5:8c:6a:dc:a6:24:59:bc:79:a4:79:fa:a5:1e:
5d:5d:3d:a9:f8:78:59:ec:08:a0:96:50:2a:18:b0:
ee:51:f0:43:09:d5:02:3b:9a:65:c0:d7:f5:56:18:
6d:f4:ac:3c:d6:bc:56:80:41:be:7a:9d:13:1b:2e:
32:61:c3:09:44:af:78:03:42:82:d9:b3:78:41:2f:
dc:7f:9f:c5:12:4e:d7:65:81:97:0f:93:f4:e2:a9:
6a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8E:04:06:0E:8A:17:C6:CC:1D:56:4C:A8:45:10:25:F0:B3:E8:B2
X509v3 Authority Key Identifier:
keyid:9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:89:57:32:77:21:49:14:67:26:46:39:d0:63:c6:4d:9d:c3:
be:4f:6d:99:9e:a1:72:89:ac:51:98:46:a0:e4:50:60:2e:99:
88:d1:16:11:46:85:f8:67:bc:7a:be:da:95:07:db:67:7e:dc:
a6:c2:34:f6:05:5d:10:ed:d2:ec:9c:db:7c:95:e4:59:58:09:
81:1a:0f:47:7a:e2:24:d8:cd:0f:c6:ab:fd:7f:a2:91:f0:59:
b6:8d:97:c4:d4:5a:d3:8d:28:f6:d5:5e:e7:9f:a8:b4:d1:7c:
f6:d5:f8:66:d0:5d:78:61:01:fa:7e:ea:36:8d:a3:fd:0e:a6:
73:1e:df:d5:80:f8:e5:0e:e1:47:50:48:4d:70:20:bf:fa:f7:
64:ff:ab:3a:8d:d2:6c:18:99:9c:1a:e6:36:9e:4c:97:07:ea:
f5:c0:64:db:4e:30:70:66:bc:ad:4e:e0:f9:3c:14:9c:de:fb:
d1:49:e6:9a:09:2c:98:53:fb:fa:3f:1f:6a:96:0e:1a:a8:fe:
e8:3d:8a:39:bc:fd:06:92:84:08:ad:fb:f0:c7:69:e0:33:cd:
8d:07:32:0b:a6:3b:3c:a7:3c:4f:89:2b:9b:14:e0:2f:0e:ae:
d1:29:41:c9:34:60:01:00:61:85:27:de:9e:f1:cf:fd:71:7b:
9b:22:91:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 06:03:01 2025 by rpki-client