Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
File: nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft (raw, json)
Hash identifier: tppkNToLA+imeuFJw+BZfxtbPkJh+HMbn9ZCDccwYho=
Subject key identifier: 32:FE:BD:37:29:5E:C8:EA:19:24:5F:49:A9:98:C2:F3:F8:A0:A3:A3
Authority key identifier: 9E:F2:7F:AE:15:30:EA:71:67:07:0C:F1:2C:48:68:11:D8:E0:BA:C5
Certificate issuer: /CN=9ef27fae1530ea7167070cf12c486811d8e0bac5
Certificate serial: 019A7225BBA36D3B2C812AAC1DA5A259D5F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
Manifest number: 07C0
Signing time: Tue 11 Nov 2025 09:01:06 +0000
Manifest this update: Tue 11 Nov 2025 09:01:06 +0000
Manifest next update: Wed 12 Nov 2025 09:01:06 +0000
Files and hashes: 1: 3bmAz9vtv2JfaPatPhAR81BLdD4.roa (hash: pscVtMzNszIXtiYFoQgUwJA4nkNZDSRzSpGrx8TMuU8=)
2: nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl (hash: /b6+mP2dtHpyQj8e8b2UUiEiCS8r+1ewv37KbpdrCz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:bb:a3:6d:3b:2c:81:2a:ac:1d:a5:a2:59:d5:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ef27fae1530ea7167070cf12c486811d8e0bac5
Validity
Not Before: Nov 11 09:01:06 2025 GMT
Not After : Nov 12 09:01:06 2025 GMT
Subject: CN=32febd37295ec8ea19245f49a998c2f3f8a0a3a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:df:b1:59:67:24:18:5d:80:6b:64:72:37:5f:
72:d0:44:96:6c:98:10:85:ad:ac:b0:0a:e0:ef:24:
0b:3f:75:65:fe:78:92:c6:2b:14:d8:b0:78:4c:b1:
0d:00:37:dd:8a:4d:70:97:6f:45:52:6e:ba:de:35:
fd:52:5d:c1:7c:c6:6d:ad:d5:b9:4a:65:2d:f5:02:
8c:7d:87:00:78:a5:00:6c:91:86:3b:d2:d8:ff:86:
df:39:86:e9:96:93:a2:62:b7:eb:37:e1:c0:86:b6:
9f:a6:ff:1c:66:76:78:50:0c:21:0f:b2:06:85:3c:
e1:08:ac:42:4f:96:54:25:88:e2:1c:d9:8c:74:13:
94:d9:ae:d0:2e:c2:f3:af:cd:a1:d8:8e:2d:ef:43:
12:bd:9e:d2:b7:4a:9f:7a:fc:18:0d:7f:99:5e:43:
cf:28:43:99:2d:cb:98:ae:69:44:30:a0:a1:6f:f2:
0d:71:c1:97:af:c8:7f:29:fb:bb:ab:be:19:d8:f7:
70:6f:fe:b3:a0:84:91:4e:f1:40:ca:71:27:34:97:
46:48:b2:4a:32:99:72:71:57:1b:b8:e6:64:cf:93:
03:f4:72:f5:d0:cc:62:73:46:0d:68:2f:ee:8a:aa:
7b:c3:0b:86:72:69:f5:a1:5d:b1:d6:77:43:f0:b4:
4f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FE:BD:37:29:5E:C8:EA:19:24:5F:49:A9:98:C2:F3:F8:A0:A3:A3
X509v3 Authority Key Identifier:
keyid:9E:F2:7F:AE:15:30:EA:71:67:07:0C:F1:2C:48:68:11:D8:E0:BA:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:82:f7:c5:fb:63:51:59:32:a1:cb:30:fc:f7:25:52:3a:3d:
e1:a1:b5:b6:69:d8:51:f8:d0:f3:22:e5:28:0d:a5:9f:f4:43:
1d:a7:67:9d:59:70:0b:de:aa:32:ea:f6:e9:48:61:72:a1:8f:
39:09:19:cc:fd:4b:c8:cd:fd:17:f3:87:c6:12:a1:e8:eb:92:
0c:ba:3c:a1:7c:4a:4a:aa:ac:a8:e0:c6:0f:4a:f4:fa:4b:2c:
7d:c3:f0:d0:9d:93:56:63:0c:35:cf:90:94:b6:fc:d2:12:fe:
d6:89:22:85:d8:f6:b2:38:db:ad:08:55:5f:58:41:19:d0:e4:
4e:fc:f4:eb:00:6a:32:76:8c:67:c3:a6:84:39:a2:73:cd:ec:
c6:b0:7e:09:56:ad:3c:0c:8e:0e:86:c9:20:63:56:92:8c:e7:
f4:ac:d0:79:eb:de:fb:99:49:46:52:8d:5b:a8:d5:04:0c:38:
42:76:ef:58:04:c4:49:4f:5a:a0:ca:e7:f3:de:dd:26:71:a5:
3e:84:57:f7:2c:e5:d6:73:fe:7f:9c:62:83:34:a5:ab:59:81:
59:65:98:b8:6c:49:5e:95:29:3c:6b:9d:33:36:c1:27:e0:0d:
6a:a9:73:60:7d:a7:48:05:f1:90:17:d0:94:4d:cf:7f:f8:60:
2e:2b:5d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:17 2025 by rpki-client