Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
File: _nB-d2cwwsLsumue6VchKtWNXNs.mft (raw, json)
Hash identifier: 3iPkWUP1PBxvzgbBb5W/UuZFzu63R7hW+cSmFgfCgEM=
Subject key identifier: C5:73:A8:39:61:78:2A:CB:88:9D:08:12:AC:A5:24:81:C1:BF:A2:E5
Authority key identifier: FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB
Certificate issuer: /CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
Certificate serial: 019A1E3E8198030CDB69ED7916116BBE8CD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
Manifest number: 0DC9
Signing time: Sun 26 Oct 2025 02:00:04 +0000
Manifest this update: Sun 26 Oct 2025 02:00:04 +0000
Manifest next update: Mon 27 Oct 2025 02:00:04 +0000
Files and hashes: 1: Puy-0P_jBepIb5u3SpvEh4v47j8.roa (hash: ZN41z34tLWoaRsScijTCdX/mIzcEneubj96rKehXEgw=)
2: _nB-d2cwwsLsumue6VchKtWNXNs.crl (hash: IVNZU5bxD4T0WM+GgSv/WyDmhMa0EXbRUB8AW217FCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:3e:81:98:03:0c:db:69:ed:79:16:11:6b:be:8c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
Validity
Not Before: Oct 26 02:00:04 2025 GMT
Not After : Oct 27 02:00:04 2025 GMT
Subject: CN=c573a83961782acb889d0812aca52481c1bfa2e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:80:b3:e0:d2:e5:ad:ec:53:b4:e3:72:cf:90:
c1:1b:37:34:f6:fa:36:1a:fe:14:d4:77:bb:c1:af:
58:02:dc:fa:53:fc:c9:0b:76:ad:9a:1b:87:8a:9b:
b8:ee:a2:db:03:e6:d0:40:82:a8:c8:57:91:15:a7:
9e:57:25:22:3c:fc:6c:44:95:fa:69:a6:5a:75:ab:
6d:1d:e0:43:87:12:67:0c:9f:4a:36:39:26:5d:3d:
d7:f9:73:82:af:95:0e:88:9f:c8:91:e5:af:1a:f6:
42:c7:3d:6f:19:f2:7f:eb:10:f9:c5:c0:89:67:7c:
be:8e:b1:93:cc:c1:c9:83:bc:48:00:b7:59:42:7c:
d3:54:1c:5d:97:ed:fa:10:cf:00:fd:4e:3a:2f:61:
ad:8c:e0:ad:07:8d:49:d9:86:7f:a5:d8:a4:34:d4:
df:45:87:23:7b:b0:58:b6:39:e0:ac:1c:54:86:d5:
89:2b:fd:7f:ce:40:f2:4f:c7:d9:16:ef:fe:eb:1b:
5d:43:bf:af:cf:a8:a8:11:3a:f5:3d:83:21:ff:b8:
a1:3a:c6:02:e6:a6:11:f1:98:ce:6c:5d:48:7e:6a:
3f:2d:58:03:b9:b4:da:36:b4:bf:5b:a2:47:d4:b7:
46:69:dd:e4:67:b2:4d:c4:19:23:4d:cf:54:e6:a5:
6c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:73:A8:39:61:78:2A:CB:88:9D:08:12:AC:A5:24:81:C1:BF:A2:E5
X509v3 Authority Key Identifier:
keyid:FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:6e:2d:d3:41:83:fe:c5:e4:7e:f7:bf:f3:62:3e:60:8e:99:
65:0a:bd:a7:e2:0e:bb:b4:05:2f:cd:18:0c:4e:a3:42:9c:b6:
17:01:c3:d4:18:a3:3c:25:cd:fa:dc:ca:50:a8:ee:0b:f8:41:
2a:fe:00:77:9b:d7:68:1e:2b:90:4c:3c:2d:6a:2a:1f:b5:94:
1f:67:d0:5c:a5:ca:d8:fe:a1:62:7d:58:3b:c2:ae:4b:b9:a8:
34:ee:39:d2:02:9c:76:79:82:4d:12:46:ab:72:92:3f:90:48:
10:78:2a:22:93:79:8a:a5:cf:a3:0e:72:8d:7d:2c:cf:40:da:
5c:83:89:5f:27:ac:d7:0f:50:d9:3b:87:15:84:6f:13:e5:e5:
73:d4:a4:07:70:e3:ad:d5:fa:0d:09:66:32:81:81:7f:06:cf:
59:4e:a9:b5:d0:c5:9e:24:21:42:5d:ba:56:ac:29:75:ef:ca:
3f:60:c9:ea:1a:6e:83:ff:1c:f8:a1:76:95:e0:07:9c:40:ae:
23:2a:62:bc:b7:4c:62:d0:fa:86:b2:c4:6d:3d:5c:18:62:05:
22:24:14:b7:39:39:8f:61:ec:d3:78:ce:79:00:c0:ed:d7:9f:
bb:2e:f7:17:3e:d7:c6:f6:7d:12:5b:60:0a:05:be:87:84:a1:
3c:ca:1e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 04:26:09 2025 by rpki-client