Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
File: nVE44frPe2XbtXX6fUckDCeLNN8.mft (raw, json)
Hash identifier: Dw5Xh0iKruBOZXklm7CrLO5+8Xbp7IjFCv8sckG10KQ=
Subject key identifier: 16:78:C9:DF:D8:96:BE:8D:C1:EB:E5:BA:DF:2F:6B:0C:0C:20:D3:E7
Authority key identifier: 9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
Certificate issuer: /CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Certificate serial: 019A26D47D7D895B16C5D0B3235DBAA5B18D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
Manifest number: 1705
Signing time: Mon 27 Oct 2025 18:00:51 +0000
Manifest this update: Mon 27 Oct 2025 18:00:51 +0000
Manifest next update: Tue 28 Oct 2025 18:00:51 +0000
Files and hashes: 1: EOilBiIenaox7njpqs3_DfcHwlA.roa (hash: fzNbr06IBLk41vJ4PfPSo6OIziKfU6CFjSqPnCza+iE=)
2: SrPm1i3skuiVEboXgAOiwvJ0e24.roa (hash: yv8h4FDHS+rMOcdFcyHu/1yEMbW/iUuOt5Oggkr9ddY=)
3: mpLcK6oOkOzJN_8yv56Qh9Pb3jU.roa (hash: xqGJM6N0Wj7tHelbHPs6OohD0rdA/bMhZJppwS9pXD8=)
4: nVE44frPe2XbtXX6fUckDCeLNN8.crl (hash: BtUyQUVCBRgsBnU27KxGwYnythRjbVHYQcA7illsXs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 18:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:d4:7d:7d:89:5b:16:c5:d0:b3:23:5d:ba:a5:b1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Validity
Not Before: Oct 27 18:00:51 2025 GMT
Not After : Oct 28 18:00:51 2025 GMT
Subject: CN=1678c9dfd896be8dc1ebe5badf2f6b0c0c20d3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d3:f8:06:5d:75:69:16:18:f9:51:f1:c1:fe:
a5:bd:45:62:14:57:6d:c3:56:cd:a1:51:1f:82:64:
c0:07:40:b4:db:87:a1:f0:2b:67:aa:17:eb:dc:99:
58:dc:d9:a6:48:db:08:59:e9:a8:26:17:ed:33:98:
3f:8c:9e:29:03:1f:17:41:7b:a5:c4:0d:32:c3:9f:
e6:d2:4b:94:43:43:a5:5e:1e:fb:75:c4:de:39:b3:
7c:44:0f:15:d1:40:04:ef:d1:52:0c:a3:90:b5:5c:
ad:a6:00:48:22:38:25:12:80:11:cb:92:20:20:6d:
13:d5:09:2c:24:3d:21:17:54:17:84:ed:48:af:ca:
ef:7e:9a:65:c6:57:05:d2:01:34:41:17:60:36:47:
60:fb:1a:92:ca:f1:56:33:3b:26:4b:10:f0:a9:06:
88:db:5f:bf:f2:08:a8:92:a3:20:54:a4:23:71:37:
d4:22:af:62:f4:5e:54:28:6d:57:e0:61:65:11:f6:
76:bf:12:ad:ef:53:55:97:f4:eb:f7:8d:a3:7f:e9:
05:17:59:74:90:c6:15:3d:cd:21:19:73:a7:d0:23:
98:91:10:99:25:60:ea:01:8c:9e:cb:eb:74:32:9c:
dc:96:8e:3b:97:06:a1:be:d7:36:ee:1b:15:fb:a7:
68:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:78:C9:DF:D8:96:BE:8D:C1:EB:E5:BA:DF:2F:6B:0C:0C:20:D3:E7
X509v3 Authority Key Identifier:
keyid:9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:eb:ca:f2:55:45:1f:61:ef:31:52:49:90:04:23:57:46:72:
49:ff:59:49:96:52:3f:ab:e4:ed:60:20:9e:8e:5a:b0:79:84:
c9:85:12:ae:03:86:3a:78:3e:54:ce:ff:e7:ac:2a:9d:3f:c3:
02:bf:5a:70:f7:dd:38:5e:b6:45:7e:76:17:72:1a:73:ed:dc:
4e:84:39:3f:e4:50:e1:96:c0:29:df:8b:46:47:29:86:f0:9a:
b4:86:ff:88:ae:9d:6b:72:e3:9c:55:f3:9a:40:58:cf:a1:41:
12:65:04:0e:68:7a:23:82:3a:a2:37:36:14:1a:83:36:04:5c:
8c:56:20:fd:69:4e:03:8a:d6:34:26:9d:30:c5:1c:ec:64:ae:
18:3d:b7:91:89:26:69:91:df:09:de:64:dc:91:9b:ae:bc:55:
e9:3c:15:9d:90:a2:97:10:83:75:4e:ff:d1:de:53:00:34:95:
58:e7:38:ad:b7:85:49:f4:db:2b:0d:0d:ac:4c:80:ec:11:00:
1e:8b:b7:e5:13:2e:3e:a4:48:4f:d2:0b:5e:5a:db:0b:ac:9f:
b2:8e:81:66:de:2d:10:2e:25:cf:83:e8:53:60:77:d8:67:0f:
3b:bf:15:17:97:32:39:b4:fa:6f:f4:a1:4e:08:c6:5e:36:ea:
29:fa:e9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 03:08:04 2025 by rpki-client