Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
File: _Nbe4Pi6PCIpPWLscB7yULzI0uc.mft (raw, json)
Hash identifier: 2vKIYNmjSJPUAK8/r45db7W2pUxQdEipJByMN9jFDoM=
Subject key identifier: D7:B6:71:01:66:B3:63:8D:6A:22:A8:3D:15:E9:A2:EF:A4:34:0C:98
Authority key identifier: FC:D6:DE:E0:F8:BA:3C:22:29:3D:62:EC:70:1E:F2:50:BC:C8:D2:E7
Certificate issuer: /CN=fcd6dee0f8ba3c22293d62ec701ef250bcc8d2e7
Certificate serial: 019922FA35B6C3E154EDDF8366792BD99CAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
Manifest number: 064C
Signing time: Sun 07 Sep 2025 07:00:47 +0000
Manifest this update: Sun 07 Sep 2025 07:00:47 +0000
Manifest next update: Mon 08 Sep 2025 07:00:47 +0000
Files and hashes: 1: _Nbe4Pi6PCIpPWLscB7yULzI0uc.crl (hash: vrLSyjdGG5LQBQ1vJu7nAILVmxdBA7lN/qSgEdCIRvw=)
2: uDZZBTPRRP5MQogb2OjdT8pUiBA.roa (hash: T9yL9Bw5mv08XIGrA3/0U3W6rC1uZNivZ+GrYQ4KE/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:35:b6:c3:e1:54:ed:df:83:66:79:2b:d9:9c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd6dee0f8ba3c22293d62ec701ef250bcc8d2e7
Validity
Not Before: Sep 7 07:00:47 2025 GMT
Not After : Sep 8 07:00:47 2025 GMT
Subject: CN=d7b6710166b3638d6a22a83d15e9a2efa4340c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cd:a9:da:67:6e:19:c8:01:08:cf:96:e8:10:
96:22:d4:e4:0a:23:3b:a1:74:1c:53:38:b8:81:b3:
2f:c9:0b:0a:f4:86:5c:42:e6:3e:f1:35:6a:69:d6:
55:5a:63:f9:dd:71:6f:f5:1e:19:21:45:9b:13:fe:
ad:59:2a:f9:ec:df:7e:7d:2f:b7:24:5e:cb:02:33:
04:3e:eb:b6:a1:4f:7a:78:b3:ba:4a:2c:74:ab:e1:
65:61:d7:55:71:85:3d:2c:46:29:38:77:ae:14:0a:
6f:e2:6e:bc:07:36:2e:2b:88:f1:44:f7:e6:eb:2f:
e2:20:7d:de:d9:ff:a6:1f:0f:22:29:df:19:36:c9:
5c:79:13:c0:e5:b9:df:39:0c:87:fc:a2:d4:66:04:
d0:af:38:0d:29:40:cb:88:6d:c2:f7:1b:0e:8e:3f:
62:d4:d5:3c:92:31:c1:47:f9:32:da:32:12:88:18:
bc:50:6e:21:3f:64:cb:f5:1f:b6:d5:0a:69:61:0f:
5c:c1:68:03:c1:80:7b:6a:bc:19:d7:2c:5d:92:5b:
2f:1e:d2:33:45:ca:c7:cf:40:b3:70:19:75:4f:9c:
2d:d7:12:1a:9a:13:4b:77:1e:bc:a0:fd:b0:c9:64:
80:b9:52:c3:83:ba:e2:f8:94:8e:00:99:b5:0c:e7:
9e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B6:71:01:66:B3:63:8D:6A:22:A8:3D:15:E9:A2:EF:A4:34:0C:98
X509v3 Authority Key Identifier:
keyid:FC:D6:DE:E0:F8:BA:3C:22:29:3D:62:EC:70:1E:F2:50:BC:C8:D2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:2c:68:bd:32:43:e3:b6:78:68:c0:71:7d:10:7e:8c:8a:39:
b2:d6:dd:73:45:64:e4:8e:de:20:d7:cf:8e:8a:c3:7d:75:4e:
e3:36:c7:92:92:11:2a:77:41:cc:7d:12:17:2b:46:28:45:86:
33:32:b1:db:58:a3:a8:37:fa:b1:d6:84:17:48:20:5a:d0:25:
ed:22:6f:65:8d:2e:6f:19:12:15:fc:cc:42:3e:88:f0:a5:79:
0b:df:89:fd:81:e8:1c:14:2a:da:e0:c5:41:3d:b4:c4:0d:3c:
2f:e9:73:72:c5:70:92:08:b6:d1:93:50:9f:32:37:b2:8b:68:
6a:5d:d1:0f:e6:28:b5:a5:11:22:bb:c9:fc:18:4c:b7:dc:d6:
4f:41:05:32:fa:3f:00:d2:15:9a:78:f7:88:47:b6:dd:06:62:
c1:31:a1:ab:82:6a:08:1d:f0:e6:b1:ac:25:cf:67:9b:87:26:
7b:8c:e2:be:25:1b:ee:cd:c7:80:24:2b:62:6d:c4:f4:cc:ba:
0f:41:17:10:49:37:c1:1a:22:6c:9f:d5:54:e8:ad:50:fe:28:
a6:5c:b3:23:9b:80:1b:e5:1f:25:e3:95:24:86:b6:66:9f:1f:
cc:50:c3:fe:fa:18:a4:60:45:16:01:6c:11:e3:31:a7:1d:5c:
92:31:ff:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:29 2025 by rpki-client