Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
File: _Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft (raw, json)
Hash identifier: FDE/BOLtOQVIQ+ckq7IyUsgQPTtHASNjH/mo/iE3RAE=
Subject key identifier: 52:DF:68:2D:D9:BF:02:23:00:AA:A9:7D:4A:19:4B:F2:04:75:B9:91
Authority key identifier: FC:D7:7E:68:77:82:98:33:04:33:33:53:8B:47:F1:26:82:CE:BD:C3
Certificate issuer: /CN=fcd77e6877829833043333538b47f12682cebdc3
Certificate serial: 019A4F2AF4B7BDD458C18D6C93F009AE82B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
Manifest number: 058D
Signing time: Tue 04 Nov 2025 14:00:06 +0000
Manifest this update: Tue 04 Nov 2025 14:00:06 +0000
Manifest next update: Wed 05 Nov 2025 14:00:06 +0000
Files and hashes: 1: _Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl (hash: sTGNgL6o88l0yE4UFV/eB6cIztilsQgLHncbSTx+uUA=)
2: nVML7LcRQkLl4LsQylRXZkNhkNs.roa (hash: aP+8mW119fycA5Li+oipfw+Kb6S3KHGW180HDqCC2II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2a:f4:b7:bd:d4:58:c1:8d:6c:93:f0:09:ae:82:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd77e6877829833043333538b47f12682cebdc3
Validity
Not Before: Nov 4 14:00:06 2025 GMT
Not After : Nov 5 14:00:06 2025 GMT
Subject: CN=52df682dd9bf022300aaa97d4a194bf20475b991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:62:5b:3e:4f:38:85:18:4c:0e:61:75:2e:2e:
db:b9:70:86:cb:5d:df:6d:7c:2e:80:4f:16:14:9c:
9f:06:34:bb:87:2e:5b:27:b9:29:99:80:a0:fd:30:
2a:35:26:9e:91:f0:05:66:22:8c:bb:c9:c1:44:e4:
66:ec:5e:55:5c:7e:20:84:fc:72:4f:ce:55:d7:a9:
02:c4:7c:06:b3:b8:15:cd:41:a3:16:3a:05:0d:19:
a2:70:7f:76:4a:00:3c:d6:40:2e:0a:61:ad:10:b0:
be:ef:1a:fe:58:c9:aa:c1:d2:bc:71:e7:10:b2:92:
b7:b3:6f:36:e2:e4:0e:76:ff:5f:d0:7f:aa:cf:7a:
bf:fe:7e:7e:f6:73:f6:ea:27:49:9e:d3:bf:3d:dc:
64:e0:e0:7f:0e:c2:f4:c4:47:2c:da:21:9a:c1:12:
ed:59:01:9c:ea:84:12:60:2c:c4:76:df:33:82:c7:
30:8a:c6:e2:dc:fe:44:e0:b5:3a:67:38:69:35:9d:
f6:4a:6b:cc:23:a1:1e:a6:04:fc:66:b3:8c:6b:31:
17:64:73:0f:fb:10:44:9c:00:d9:8a:06:07:05:9c:
99:c8:eb:6d:52:a6:52:6a:ab:af:71:b1:9d:11:05:
aa:30:6f:7d:e6:11:14:f2:89:d0:dd:f5:ec:ea:6d:
19:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:DF:68:2D:D9:BF:02:23:00:AA:A9:7D:4A:19:4B:F2:04:75:B9:91
X509v3 Authority Key Identifier:
keyid:FC:D7:7E:68:77:82:98:33:04:33:33:53:8B:47:F1:26:82:CE:BD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:54:35:9d:27:59:02:ab:55:24:09:c0:dc:e3:18:76:c7:e0:
32:bb:f2:5a:80:25:89:42:a8:67:76:d7:35:a1:a6:93:62:48:
83:78:78:44:6c:3b:34:26:62:81:04:f1:78:db:a2:3d:1d:6f:
b7:25:cf:05:71:05:f7:58:2b:06:82:0d:4f:14:13:44:67:2d:
1b:e4:aa:44:4c:89:b7:0b:55:b0:40:a5:d1:8e:6a:5b:d9:50:
63:55:e6:34:c2:0c:e6:ae:9a:d9:22:a8:01:e1:eb:5b:bb:65:
78:08:9c:18:14:70:57:fd:65:af:d8:39:b3:7c:7a:71:ac:99:
7f:2f:01:02:ab:ec:29:d1:aa:95:15:81:33:d8:30:86:75:9b:
5f:45:2a:f1:b4:af:20:57:eb:af:91:c2:61:c5:78:a9:2c:9b:
68:97:f3:78:4e:cd:7a:4b:fa:87:3c:d7:d8:c1:46:8e:6f:59:
35:64:c4:65:aa:84:e2:4a:74:fc:7b:fe:64:15:9f:01:71:b4:
c7:2c:f5:dd:a0:ed:f9:c9:bd:76:65:c1:d1:ce:cf:53:1c:db:
e0:26:ab:44:ea:03:ab:bb:8a:6d:05:75:98:1e:4d:e4:1c:56:
20:54:58:af:53:d5:7d:6e:65:fa:6d:51:0f:3b:43:05:25:0b:
08:f3:1f:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPKvS3vdRYwY1sk/AJroKwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZDc3ZTY4Nzc4Mjk4MzMwNDMzMzM1MzhiNDdmMTI2ODJj
ZWJkYzMwHhcNMjUxMTA0MTQwMDA2WhcNMjUxMTA1MTQwMDA2WjAzMTEwLwYDVQQD
Eyg1MmRmNjgyZGQ5YmYwMjIzMDBhYWE5N2Q0YTE5NGJmMjA0NzViOTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGJbPk84hRhMDmF1Li7buXCGy13f
bXwugE8WFJyfBjS7hy5bJ7kpmYCg/TAqNSaekfAFZiKMu8nBRORm7F5VXH4ghPxy
T85V16kCxHwGs7gVzUGjFjoFDRmicH92SgA81kAuCmGtELC+7xr+WMmqwdK8cecQ
spK3s2824uQOdv9f0H+qz3q//n5+9nP26idJntO/Pdxk4OB/DsL0xEcs2iGawRLt
WQGc6oQSYCzEdt8zgscwisbi3P5E4LU6ZzhpNZ32SmvMI6EepgT8ZrOMazEXZHMP
+xBEnADZigYHBZyZyOttUqZSaquvcbGdEQWqMG995hEU8onQ3fXs6m0ZywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFLfaC3ZvwIjAKqpfUoZS/IEdbmRMB8GA1UdIwQY
MBaAFPzXfmh3gpgzBDMzU4tH8SaCzr3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX05kLWFIZUNtRE1FTXpOVGkwZnhKb0xPdmNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xZWQxZjYtMDlkNy00Mjk0LTkyYjQt
ZTU1MTc0NWQyNzZlLzEvX05kLWFIZUNtRE1FTXpOVGkwZnhKb0xPdmNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8xZWQxZjYtMDlkNy00Mjk0LTkyYjQtZTU1MTc0NWQyNzZl
LzEvX05kLWFIZUNtRE1FTXpOVGkwZnhKb0xPdmNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUFQ1nSdZ
AqtVJAnA3OMYdsfgMrvyWoAliUKoZ3bXNaGmk2JIg3h4RGw7NCZigQTxeNuiPR1v
tyXPBXEF91grBoINTxQTRGctG+SqREyJtwtVsECl0Y5qW9lQY1XmNMIM5q6a2SKo
AeHrW7tleAicGBRwV/1lr9g5s3x6cayZfy8BAqvsKdGqlRWBM9gwhnWbX0Uq8bSv
IFfrr5HCYcV4qSybaJfzeE7Nekv6hzzX2MFGjm9ZNWTEZaqE4kp0/Hv+ZBWfAXG0
xyz13aDt+cm9dmXB0c7PUxzb4CarROoDq7uKbQV1mB5N5BxWIFRYr1PVfW5l+m1R
DztDBSULCPMfuA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:32 2025 by rpki-client