Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
File: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft (raw, json)
Hash identifier: t3V22FNR7wqGyvvWDYfLtKTQZt9lok6coh4tTriQMxk=
Subject key identifier: F2:EE:3F:85:A3:66:AE:9E:3F:F3:8E:31:84:CF:01:E2:11:8D:A2:98
Authority key identifier: F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
Certificate issuer: /CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
Certificate serial: 019A4DAA7D645666AB3998A3491620F0C43A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
Manifest number: 0464
Signing time: Tue 04 Nov 2025 07:00:09 +0000
Manifest this update: Tue 04 Nov 2025 07:00:09 +0000
Manifest next update: Wed 05 Nov 2025 07:00:09 +0000
Files and hashes: 1: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl (hash: 6v2wQFnfjmSNThRPqtaHuo6SRRHu5DGgE5QlawQSuks=)
2: HexBDB0ALKRx19vAL_olvRM_0pc.roa (hash: ajSzA7jvEEstqpYQIZuBqV7eWXJVONLQH581vvaQYJc=)
3: PrcLqHgKnfIRGf3YM80gSjoYr6I.roa (hash: ZkwH8oTWm6e+gIX3jU/BvkpmjX7EH4UuYT++yIKL1DQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:7d:64:56:66:ab:39:98:a3:49:16:20:f0:c4:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
Validity
Not Before: Nov 4 07:00:09 2025 GMT
Not After : Nov 5 07:00:09 2025 GMT
Subject: CN=f2ee3f85a366ae9e3ff38e3184cf01e2118da298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cf:84:24:29:ab:d7:bd:a7:0b:56:ad:71:1f:
72:ea:fe:b5:4d:3d:35:ed:07:f5:87:5b:12:76:0c:
13:3b:f0:a1:a2:8c:7b:df:0b:5c:1e:ec:7e:80:b6:
64:be:ba:57:2e:30:f8:80:d0:0f:45:df:7f:b5:38:
ce:87:71:27:42:5e:91:98:6b:bb:87:74:1b:84:ba:
70:92:c4:ab:c6:db:2c:7a:6e:12:30:5a:2f:30:76:
f7:49:e4:ea:32:bc:e5:1c:fa:25:07:cf:45:6f:05:
76:88:ed:91:eb:b9:f3:a5:7c:6b:dc:bf:e9:02:5f:
14:71:39:8a:d9:e7:47:a5:fd:f6:22:3a:5d:0b:da:
78:67:ee:a6:17:fa:e0:1b:ee:81:47:cd:7f:2d:03:
1c:76:ef:7c:8e:5f:7f:f3:8b:18:e5:20:8f:fb:1d:
d2:32:8d:8a:ee:ab:b8:b2:4e:b0:ef:b7:09:6e:14:
a9:de:db:b8:a3:66:cc:a3:5a:4b:1e:69:31:6a:5b:
d2:e5:82:24:0d:70:65:9f:15:80:c1:aa:7a:02:67:
0b:64:c5:9a:4a:95:43:8d:8a:e2:10:bc:53:3f:cf:
1a:df:22:ea:7a:ea:44:7e:92:70:c0:f1:d8:eb:93:
08:0c:9e:8e:18:31:1d:42:6f:02:90:5c:ec:da:1f:
a4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:EE:3F:85:A3:66:AE:9E:3F:F3:8E:31:84:CF:01:E2:11:8D:A2:98
X509v3 Authority Key Identifier:
keyid:F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ce:b1:4a:7b:c4:60:64:06:1f:49:6e:19:bd:8e:e6:e5:f6:
fa:9c:99:83:37:80:b2:85:7f:f1:99:9e:d7:02:38:77:ba:3c:
3e:bb:a4:5f:15:f5:1b:f4:6b:60:c6:cf:0d:95:b7:f8:d0:91:
48:36:93:ee:58:d5:18:94:5f:3c:58:c8:31:ee:25:bb:a3:11:
54:7a:c8:69:fe:88:45:a4:65:59:30:63:57:72:5a:01:c1:1b:
4f:06:18:c7:09:56:e6:41:a7:ad:b2:a8:32:9d:de:5a:d7:ce:
9b:c1:54:ef:87:4c:4f:ca:c1:bd:0f:f7:a3:71:65:30:ea:54:
3b:3e:13:13:fb:33:1f:77:28:1b:7d:a0:39:4e:19:2c:d7:f4:
46:f6:39:b5:bd:fb:ff:0a:06:06:4a:46:a0:b8:f6:08:c0:af:
57:00:fe:aa:01:13:e9:8e:94:b1:f2:c1:6d:f1:34:27:13:f5:
d5:af:06:c0:89:89:9c:46:24:bb:0e:16:49:d2:61:c5:08:90:
e8:bd:30:74:44:a9:ec:a7:ad:f3:16:f9:e2:e9:5c:04:1d:a8:
7b:99:ed:c2:34:03:5d:76:b4:14:19:a6:27:4f:a8:cb:3a:f3:
36:c6:74:4e:26:4b:3e:d5:4e:4e:6c:dc:6a:a3:dc:5c:1d:3f:
3b:7f:09:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:13 2025 by rpki-client