Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
File: _nB-d2cwwsLsumue6VchKtWNXNs.mft (raw, json)
Hash identifier: 2wkQqurd20E6+h6/uMbrc1+ABnK3r222Vl6Z8/dfb70=
Subject key identifier: C3:69:2F:CE:14:68:D8:EC:CD:0E:D2:94:F0:63:BB:16:B9:5B:63:F5
Authority key identifier: FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB
Certificate issuer: /CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
Certificate serial: 019A4E862F1C7C54FDC0F43C690989321A91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
Manifest number: 0DE2
Signing time: Tue 04 Nov 2025 11:00:07 +0000
Manifest this update: Tue 04 Nov 2025 11:00:07 +0000
Manifest next update: Wed 05 Nov 2025 11:00:07 +0000
Files and hashes: 1: Puy-0P_jBepIb5u3SpvEh4v47j8.roa (hash: ZN41z34tLWoaRsScijTCdX/mIzcEneubj96rKehXEgw=)
2: _nB-d2cwwsLsumue6VchKtWNXNs.crl (hash: s+bg6YFjl59piLKB/R92swiliMzVFJHbjh96glgzbgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:2f:1c:7c:54:fd:c0:f4:3c:69:09:89:32:1a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
Validity
Not Before: Nov 4 11:00:07 2025 GMT
Not After : Nov 5 11:00:07 2025 GMT
Subject: CN=c3692fce1468d8eccd0ed294f063bb16b95b63f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:77:60:d2:96:69:9a:6a:f9:e0:d6:86:d1:ab:
a6:74:57:53:c7:be:3c:97:d7:52:4a:a1:f2:62:1a:
0f:42:51:19:5d:53:4c:54:2f:99:c8:a1:17:2a:75:
63:47:05:b0:4c:1c:eb:5d:44:85:79:c6:d0:27:f4:
6d:34:92:70:db:46:da:d4:f1:d8:75:ab:00:82:f3:
f6:35:5e:1a:51:8a:a0:ad:38:b0:5f:9b:96:8a:a3:
80:55:fe:e5:36:52:b3:00:42:f9:ee:25:03:56:c7:
9e:b6:70:1d:58:a2:bb:f8:49:25:64:fe:48:be:5c:
4b:a3:19:f8:cd:d2:42:f5:bc:ea:0d:a3:5c:3d:17:
49:02:c0:c1:a0:24:5d:35:3a:9b:67:39:3c:08:8e:
43:ad:d1:bb:db:6e:d8:57:ef:2d:a8:d3:3a:87:c7:
f3:4c:ee:5c:f9:54:95:56:9e:84:c8:67:61:e2:13:
5e:cb:ea:3c:ca:e4:08:0f:b4:67:23:01:e3:ab:47:
3d:d5:d9:b9:ef:9e:91:71:d2:5b:a1:2d:9e:f0:c6:
ef:e3:d6:be:1f:55:cc:29:11:4d:b1:23:5b:c2:78:
6d:be:fc:39:3c:09:fc:c4:42:51:7c:00:7b:8f:d5:
bb:d4:ee:52:12:38:68:a1:4f:72:90:f0:56:33:6c:
18:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:69:2F:CE:14:68:D8:EC:CD:0E:D2:94:F0:63:BB:16:B9:5B:63:F5
X509v3 Authority Key Identifier:
keyid:FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b2:db:bc:ca:b1:0c:52:ea:b6:ca:ac:c5:1f:e7:78:ea:4d:
49:07:c5:88:b2:35:c6:b0:20:82:a8:1b:22:10:bf:d7:65:d8:
89:fa:1c:2a:93:78:90:e0:2f:d9:f5:44:e4:01:7b:90:58:2e:
16:09:5a:6f:d0:ca:8b:5c:52:13:26:0b:1e:14:41:6b:fe:ec:
55:43:72:e8:0f:ff:46:74:c8:e3:02:90:a4:7f:4a:c7:62:c8:
c7:c7:d3:72:19:09:f7:7b:8f:1c:dd:cb:6c:74:3c:a6:7d:17:
1b:73:02:02:2b:af:f4:8e:74:b6:98:b3:ba:11:02:68:53:7b:
ea:16:00:a3:60:3e:c8:23:51:89:87:05:d2:b1:86:2c:99:70:
98:a3:b7:ff:fd:e3:67:b4:cd:83:8c:a2:cf:a9:86:be:fa:d8:
6b:d8:e3:39:e3:46:39:10:02:dc:b0:65:f5:84:ce:15:be:5d:
4a:1a:cf:26:70:18:d7:29:84:9b:f6:eb:2a:f3:68:c1:cb:6e:
85:1e:22:dd:60:ff:bd:49:c7:91:84:3e:fd:41:2c:e9:2b:c4:
ee:a3:6e:ac:38:ce:da:1e:42:bc:50:d0:0a:47:f0:1e:ca:ce:
30:8b:d1:5c:3f:b6:ab:8b:c6:cc:f4:34:44:ab:9c:0b:56:f8:
4e:3b:f6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:34:26 2025 by rpki-client