
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
File: _nB-d2cwwsLsumue6VchKtWNXNs.mft (raw, json)
Hash identifier: pNtfqguyl1uifnu6gV29tp3kDqChddXSbY2Mgba8yYc=
Subject key identifier: 89:FA:DB:D1:EA:13:A3:0B:F4:EE:A2:CB:40:12:4B:BE:33:8E:2E:67
Authority key identifier: FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB
Certificate issuer: /CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
Certificate serial: 019930B5B446A8C289B62A1E1F6922324379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
Manifest number: 0D4E
Signing time: Tue 09 Sep 2025 23:00:38 +0000
Manifest this update: Tue 09 Sep 2025 23:00:38 +0000
Manifest next update: Wed 10 Sep 2025 23:00:38 +0000
Files and hashes: 1: Puy-0P_jBepIb5u3SpvEh4v47j8.roa (hash: ZN41z34tLWoaRsScijTCdX/mIzcEneubj96rKehXEgw=)
2: _nB-d2cwwsLsumue6VchKtWNXNs.crl (hash: 9EoOKJnKbya8l9p0WR7LZWqdWNI1G6CbpSicD8EevPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:b5:b4:46:a8:c2:89:b6:2a:1e:1f:69:22:32:43:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
Validity
Not Before: Sep 9 23:00:38 2025 GMT
Not After : Sep 10 23:00:38 2025 GMT
Subject: CN=89fadbd1ea13a30bf4eea2cb40124bbe338e2e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:74:2f:99:db:87:04:36:ef:ed:f4:c6:36:c7:
71:e6:66:3e:fd:9e:65:8b:83:50:be:b9:dc:59:6c:
18:6c:ac:12:b7:90:8e:c9:1b:56:8f:6c:04:c9:2d:
6d:3b:87:d2:dd:3b:a0:a0:8f:3b:40:dc:d5:c8:82:
4e:45:20:26:c9:c7:aa:60:0e:66:ec:43:21:52:e1:
27:4c:95:c5:9a:1b:b0:35:b7:6b:30:46:b8:71:69:
08:ce:17:6f:ff:1b:cd:56:db:15:44:7b:fb:21:33:
e7:e2:96:90:5f:84:b3:6f:fe:1a:8b:77:bc:04:71:
3c:13:ae:08:af:97:ba:83:74:84:34:34:5f:ad:4e:
07:bb:ee:45:75:51:f1:e7:f0:c2:72:c8:ec:37:c5:
7e:0a:34:e6:43:63:7f:b4:52:65:a5:dd:1c:ed:56:
cb:f3:36:89:c2:bc:62:7c:ca:9c:37:ae:9d:07:26:
8c:81:15:0e:1e:a6:08:41:f0:9c:58:40:55:e1:19:
4d:b4:c6:5b:de:48:a7:a1:b8:16:52:46:aa:41:ef:
0a:4b:06:ef:0a:5d:08:0f:5c:80:7d:62:7e:82:5e:
97:bc:7c:d6:eb:e7:d1:9a:b9:ba:17:ac:3e:05:07:
08:87:17:2b:e6:eb:aa:da:b7:02:1b:94:fc:d0:7b:
ad:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FA:DB:D1:EA:13:A3:0B:F4:EE:A2:CB:40:12:4B:BE:33:8E:2E:67
X509v3 Authority Key Identifier:
keyid:FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:58:1f:95:69:ff:32:9b:f4:82:40:15:0b:8e:2e:73:98:43:
5e:71:da:2b:fe:17:c6:a3:32:48:47:e3:f7:70:03:10:ba:e9:
d4:f5:11:b5:bc:ad:5f:84:d2:88:c3:ad:3b:f7:94:0f:7a:ce:
1b:10:51:8a:de:82:fd:82:a1:47:80:f4:3b:5d:22:01:f3:40:
a8:f6:65:50:12:2f:ce:8e:f2:00:f0:13:c6:24:31:dc:5b:dc:
a8:e5:08:83:8a:bb:ff:a5:75:9c:76:70:95:9d:db:db:42:14:
1a:01:32:14:b9:67:55:bc:70:1c:5b:61:40:6e:61:bd:17:3d:
38:42:ea:72:a6:f9:27:8f:e1:73:a6:44:39:64:94:46:50:55:
56:38:37:64:f7:70:f2:68:e1:e6:a0:11:2b:a4:55:62:1d:47:
4f:65:16:c2:92:7a:77:7d:ce:50:a5:a6:a1:82:df:5a:de:4b:
91:d5:4f:4e:92:3c:5d:39:d5:b5:6f:90:90:ed:35:39:70:22:
dc:e7:6a:0c:2b:df:7c:d3:09:79:31:59:65:6d:26:87:17:ca:
27:55:eb:62:2b:28:b8:c5:fa:14:97:27:42:ca:fb:8e:74:3c:
eb:b5:cd:da:eb:5f:6d:64:9d:a6:80:7e:5a:09:01:58:44:8e:
77:ff:c9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 04:01:11 2025 by rpki-client