Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
File: nDz83hO2YLXIMdr74b-_aN-fvjk.mft (raw, json)
Hash identifier: THcVTgc1Qf41puAOO22vQ5jaI1mMka2TYDS25+ZkXb4=
Subject key identifier: 55:C2:BA:B6:A9:69:B2:27:43:DE:0B:1B:24:1D:60:A2:98:3B:AC:48
Authority key identifier: 9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39
Certificate issuer: /CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39
Certificate serial: 019950AE2C2414933AC6E975B2E4988CFE89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
Manifest number: 0646
Signing time: Tue 16 Sep 2025 04:00:15 +0000
Manifest this update: Tue 16 Sep 2025 04:00:15 +0000
Manifest next update: Wed 17 Sep 2025 04:00:15 +0000
Files and hashes: 1: 1-o7g3L28fO-PQjnRpt-UgWkTHQw.roa (hash: eDwV2kux0bA6vYCRB0ZxUOPv76wEVLU7G2rZyoTStqs=)
2: nDz83hO2YLXIMdr74b-_aN-fvjk.crl (hash: gHAZmg3PruKgXeMWIB+DsJGAJR0s23Bp6HnsXvgMN0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:50:ae:2c:24:14:93:3a:c6:e9:75:b2:e4:98:8c:fe:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c3cfcde13b660b5c831dafbe1bfbf68df9fbe39
Validity
Not Before: Sep 16 04:00:15 2025 GMT
Not After : Sep 17 04:00:15 2025 GMT
Subject: CN=55c2bab6a969b22743de0b1b241d60a2983bac48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3a:5f:03:11:ae:3e:18:e6:af:01:cf:7b:9e:
96:99:54:34:25:ea:1e:4e:04:2c:95:d0:5a:84:3d:
11:20:8a:3a:ff:25:04:d0:08:5b:f9:b1:3a:94:ce:
43:7f:02:4a:fc:e5:77:96:f3:ff:d6:83:16:78:2f:
ab:8a:a0:1c:9a:5a:fe:70:94:b1:56:ef:c3:93:b4:
3e:cb:80:fa:5c:70:37:c4:42:7c:01:ec:38:c2:cb:
58:39:da:5b:72:c0:ae:88:60:ea:21:34:53:e7:0e:
6b:a3:c7:93:a3:5c:ee:0b:22:c0:33:06:31:a4:7b:
60:40:af:f9:2b:77:d6:21:ba:65:ce:8d:bf:c1:aa:
8c:5b:db:92:b2:9e:51:46:01:1d:52:64:dc:fd:51:
36:5d:59:65:1b:a6:c1:28:58:22:e9:b1:5a:c3:8d:
7c:f5:3b:b4:07:6d:97:a8:67:2d:97:4b:d0:aa:93:
8c:6d:90:ad:fc:49:b3:f9:55:9b:e8:53:e7:dd:55:
b5:d3:84:3e:1f:58:f8:23:25:3e:95:f8:70:4d:c6:
65:a1:29:54:6f:9c:32:38:7c:3c:95:d5:29:94:51:
70:12:69:c5:aa:6c:ea:de:a0:2c:08:d2:a0:51:ec:
5f:4d:76:12:d7:82:7c:e7:44:b3:ae:ff:0d:43:f2:
96:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C2:BA:B6:A9:69:B2:27:43:DE:0B:1B:24:1D:60:A2:98:3B:AC:48
X509v3 Authority Key Identifier:
keyid:9C:3C:FC:DE:13:B6:60:B5:C8:31:DA:FB:E1:BF:BF:68:DF:9F:BE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nDz83hO2YLXIMdr74b-_aN-fvjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3c034f-c243-4a88-9070-6879cc26d7b6/1/nDz83hO2YLXIMdr74b-_aN-fvjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ef:38:09:fa:f9:a4:6e:fd:53:5a:90:44:e4:80:29:89:b9:
75:31:43:f9:f2:9f:9e:2d:02:7c:f3:43:a2:cf:ca:f8:dc:7a:
f8:f2:a5:51:77:5d:ee:5e:0e:d2:67:40:b8:0b:2e:71:3b:f0:
f1:26:fd:f1:38:c3:b6:2f:20:77:15:33:81:61:e5:af:43:b2:
1e:8b:fa:2a:85:85:c2:0f:63:03:c2:4e:d9:d7:77:a2:b3:f5:
35:ed:8e:25:89:22:72:57:86:46:ec:db:d8:38:df:9a:93:f8:
b1:6b:ba:79:ef:9f:ce:02:7b:ae:de:73:46:eb:7a:fd:47:fd:
b5:f0:51:11:36:2b:73:a7:ed:6f:1e:72:90:4d:90:cd:00:38:
9d:07:2a:5d:dc:97:22:ad:d2:f4:7f:48:3b:6f:df:bd:de:0b:
cc:3a:de:44:b5:63:5d:ed:96:59:aa:5f:6c:87:73:e3:50:06:
3f:c3:e5:e1:86:b1:d0:64:7c:12:11:85:7d:4f:22:88:55:93:
22:23:15:9e:d7:be:b1:17:92:91:a6:b1:3c:d4:06:ad:84:50:
06:30:f4:14:24:91:c3:fe:ad:2d:13:d7:7b:da:bc:66:14:03:
4c:41:b1:bc:ff:80:be:ac:0a:79:8e:a0:ad:21:a9:be:d5:1c:
f7:33:a4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 08:15:44 2025 by rpki-client