Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft
File: _Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft (raw, json)
Hash identifier: 4z64y/mrXdFS+CzRH3RVxpm+OHDhSLIVqrDp9yc5/f8=
Subject key identifier: 2D:0E:90:8F:F9:13:13:53:87:25:2F:46:67:31:3F:88:A5:12:CB:1A
Authority key identifier: FC:D7:39:9F:87:47:0C:3E:A4:E4:DF:D6:97:A9:8A:E2:BD:02:6F:9C
Certificate issuer: /CN=fcd7399f87470c3ea4e4dfd697a98ae2bd026f9c
Certificate serial: 01987D8A0ABE1D3E148D8E7024489ECDCF6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft
Manifest number: D0
Signing time: Wed 06 Aug 2025 04:00:55 +0000
Manifest this update: Wed 06 Aug 2025 04:00:55 +0000
Manifest next update: Thu 07 Aug 2025 04:00:55 +0000
Files and hashes: 1: _Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.crl (hash: RaF2Dlzr0eZMr3WBXtJUk01jJ+PNIR5sFJVKtvWbsXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:0a:be:1d:3e:14:8d:8e:70:24:48:9e:cd:cf:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd7399f87470c3ea4e4dfd697a98ae2bd026f9c
Validity
Not Before: Aug 6 04:00:55 2025 GMT
Not After : Aug 7 04:00:55 2025 GMT
Subject: CN=2d0e908ff913135387252f4667313f88a512cb1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0a:aa:96:79:99:2f:ae:81:90:56:73:92:ab:
5f:1f:6f:2a:e8:4b:33:de:c1:dd:ad:6f:13:a0:a0:
39:7f:6d:29:e2:c1:b7:54:79:5d:0b:ec:d9:bc:02:
47:71:11:51:9e:bf:8b:3b:e2:0f:9b:c3:3d:82:9c:
61:6b:f4:56:5e:2d:66:54:9a:0e:e4:e4:e9:06:0a:
72:3b:c6:3e:78:8a:8b:e2:06:e7:f1:e4:77:92:00:
ce:9f:2f:c9:b9:5c:30:7f:78:20:96:2f:65:e5:b3:
5c:98:d0:bb:c8:ef:ca:07:c1:c3:d2:00:83:56:bb:
32:66:fc:ed:12:16:7d:20:53:cc:ad:9f:e0:5e:30:
d7:14:6c:6b:23:dc:7b:9d:3e:d5:1e:67:81:cc:22:
fd:63:30:c1:d5:4b:d2:37:94:8d:ec:92:71:3f:32:
df:04:fb:eb:63:03:b9:a9:a9:f4:c8:3b:8f:dd:0f:
de:a1:ad:d0:c8:b9:48:8a:9f:25:2c:bb:55:13:e8:
c1:c8:61:4a:74:aa:c0:44:2f:64:a5:89:1b:7c:fe:
fe:ac:d1:a5:f7:e1:ac:48:d2:0d:2b:00:1f:f1:8d:
56:da:43:9a:40:11:28:e1:5e:38:c3:72:ef:18:1d:
a8:4e:2a:76:9e:ac:d3:bc:b0:30:82:ce:a9:ad:58:
5a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0E:90:8F:F9:13:13:53:87:25:2F:46:67:31:3F:88:A5:12:CB:1A
X509v3 Authority Key Identifier:
keyid:FC:D7:39:9F:87:47:0C:3E:A4:E4:DF:D6:97:A9:8A:E2:BD:02:6F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:07:fa:fd:1e:2d:f2:84:66:79:4d:4d:9a:5e:0f:60:5c:1d:
a7:f3:6e:51:84:53:2e:f3:1d:16:ad:eb:94:23:16:d9:95:87:
b5:a2:bf:83:28:cc:50:5a:81:a3:85:8f:b3:b1:d5:e3:d7:5c:
73:34:c4:5a:94:d8:79:e7:ba:4d:7e:a7:23:bf:cc:a8:ee:31:
97:eb:23:41:49:b0:f4:f9:cf:ec:ae:fb:3c:e7:99:7f:c6:f7:
d1:6d:76:bb:08:89:25:8d:62:5b:31:9f:92:da:6f:c3:1e:e9:
5b:e3:98:d7:f1:06:55:85:7f:65:3e:a5:17:85:67:71:4f:08:
46:a0:6b:36:94:c0:82:6b:fc:6e:9e:86:90:e3:23:4b:13:d6:
f3:9a:f4:25:a0:36:8a:f3:38:be:e8:01:5d:7a:dc:a2:ab:19:
3c:d9:b0:ff:5c:1c:c6:e2:9b:9f:f2:40:33:fd:05:23:b0:df:
f8:87:b1:af:81:c0:36:67:35:dc:f5:ec:6e:7d:ee:ac:81:ef:
c6:60:c8:a2:5c:d5:71:92:e8:95:b5:3f:4d:17:7d:2c:75:4d:
3c:00:d0:57:8c:2e:be:0a:0a:bc:ab:d0:31:4a:1c:0a:25:56:
fa:72:f4:9a:b8:98:df:c2:22:3c:33:3d:74:ba:fd:7f:57:bd:
df:81:40:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9igq+HT4UjY5wJEiezc9tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZDczOTlmODc0NzBjM2VhNGU0ZGZkNjk3YTk4YWUyYmQw
MjZmOWMwHhcNMjUwODA2MDQwMDU1WhcNMjUwODA3MDQwMDU1WjAzMTEwLwYDVQQD
EygyZDBlOTA4ZmY5MTMxMzUzODcyNTJmNDY2NzMxM2Y4OGE1MTJjYjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAqqlnmZL66BkFZzkqtfH28q6Esz
3sHdrW8ToKA5f20p4sG3VHldC+zZvAJHcRFRnr+LO+IPm8M9gpxha/RWXi1mVJoO
5OTpBgpyO8Y+eIqL4gbn8eR3kgDOny/JuVwwf3ggli9l5bNcmNC7yO/KB8HD0gCD
VrsyZvztEhZ9IFPMrZ/gXjDXFGxrI9x7nT7VHmeBzCL9YzDB1UvSN5SN7JJxPzLf
BPvrYwO5qan0yDuP3Q/eoa3QyLlIip8lLLtVE+jByGFKdKrARC9kpYkbfP7+rNGl
9+GsSNINKwAf8Y1W2kOaQBEo4V44w3LvGB2oTip2nqzTvLAwgs6prVha2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC0OkI/5ExNThyUvRmcxP4ilEssaMB8GA1UdIwQY
MBaAFPzXOZ+HRww+pOTf1pepiuK9Am+cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX05jNW40ZEhERDZrNU5fV2w2bUs0cjBDYjV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi82ZTg4MTYtNTUyYi00OTk2LTlmYzQt
ZGU5MGU5ZTNjYzMyLzEvX05jNW40ZEhERDZrNU5fV2w2bUs0cjBDYjV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi82ZTg4MTYtNTUyYi00OTk2LTlmYzQtZGU5MGU5ZTNjYzMy
LzEvX05jNW40ZEhERDZrNU5fV2w2bUs0cjBDYjV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANAf6/R4t
8oRmeU1Nml4PYFwdp/NuUYRTLvMdFq3rlCMW2ZWHtaK/gyjMUFqBo4WPs7HV49dc
czTEWpTYeee6TX6nI7/MqO4xl+sjQUmw9PnP7K77POeZf8b30W12uwiJJY1iWzGf
ktpvwx7pW+OY1/EGVYV/ZT6lF4VncU8IRqBrNpTAgmv8bp6GkOMjSxPW85r0JaA2
ivM4vugBXXrcoqsZPNmw/1wcxuKbn/JAM/0FI7Df+Iexr4HANmc13PXsbn3urIHv
xmDIolzVcZLolbU/TRd9LHVNPADQV4wuvgoKvKvQMUocCiVW+nL0mriY38IiPDM9
dLr9f1e934FA3Q==
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:22:04 2025 by rpki-client