Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
File: nSZknk8seV_-VA-dl_JumcXF4_8.mft (raw, json)
Hash identifier: 0c30YRKFFo7uoC+hJkR63qCH/B/CntCKWs3GlgfKqOI=
Subject key identifier: A1:78:CA:52:01:5C:94:5A:78:C3:7E:95:F5:9C:76:4F:B1:3E:04:D6
Authority key identifier: 9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
Certificate issuer: /CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Certificate serial: 019A2478E549DC97821153FB47B013111906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
Manifest number: 16FB
Signing time: Mon 27 Oct 2025 07:01:33 +0000
Manifest this update: Mon 27 Oct 2025 07:01:33 +0000
Manifest next update: Tue 28 Oct 2025 07:01:33 +0000
Files and hashes: 1: KCBbNGS1YVW1hBxpXGDK5vFmb2s.roa (hash: 5Zdj42abBdFlW3cL9DY3OZbKnuKmXjtJAYCIOqBuBo0=)
2: UHBBgUNLNn1iHI9e-EGjjOzBhFw.roa (hash: BSvm991wTIbEUV5S7qd3FSoLfpa8IYB6IeFe483AVIY=)
3: YulnYlbf3_p4_qdtilX3A7GCTS4.roa (hash: 9jhnLDTHr1+aTiwSRhcVHPAQnY8jnY4svd3BxfDOy3k=)
4: nSZknk8seV_-VA-dl_JumcXF4_8.crl (hash: 9u6CP83a+xxUNwis/9+wAtPZZJd9I5DCWXI9RRmWUKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:e5:49:dc:97:82:11:53:fb:47:b0:13:11:19:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Validity
Not Before: Oct 27 07:01:33 2025 GMT
Not After : Oct 28 07:01:33 2025 GMT
Subject: CN=a178ca52015c945a78c37e95f59c764fb13e04d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ea:c6:2e:8d:11:37:6b:e8:5f:74:3b:3c:a0:
6c:69:67:41:49:0c:10:de:ad:0d:98:3a:37:88:e7:
b7:31:f0:9c:12:ef:06:7e:d3:1f:df:32:8d:56:07:
41:ef:6d:b6:25:8f:4c:35:a7:83:2b:f4:c3:4b:53:
ab:00:a1:1e:9a:14:89:58:94:8a:d6:88:02:08:35:
ae:51:20:df:89:81:85:75:2a:ab:13:92:d1:f2:58:
d6:19:f7:fc:56:2a:8a:5e:b1:ab:25:4d:64:4d:fa:
66:aa:a1:01:9b:ba:1f:dd:b7:d1:be:46:e9:c6:67:
31:73:bf:73:c5:39:c2:d6:c9:26:aa:92:df:b6:72:
e7:9f:4e:b3:75:2f:1d:56:2c:03:9b:88:6f:39:66:
51:59:e9:cb:85:61:68:c1:1a:85:8a:36:1f:8f:37:
60:ff:20:7a:89:96:b1:9c:69:15:f7:99:f0:bd:ec:
0c:f8:6e:ce:08:93:78:3d:88:3d:77:f8:b4:c0:4e:
9a:00:68:2a:b2:d4:fa:8f:1b:1a:ca:ca:bf:5c:ee:
3f:23:6c:a0:c0:b4:78:9c:72:c5:d4:ed:6f:a3:36:
0c:70:68:fc:f7:c1:64:35:36:9c:74:15:34:52:aa:
1f:93:f3:32:de:71:09:72:d4:a0:b0:43:b9:f9:d8:
d9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:78:CA:52:01:5C:94:5A:78:C3:7E:95:F5:9C:76:4F:B1:3E:04:D6
X509v3 Authority Key Identifier:
keyid:9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:27:9b:99:88:d1:f0:2f:22:01:91:7f:2c:5c:50:63:26:cf:
36:91:cc:24:69:6c:d6:db:7a:33:96:bc:04:36:09:dc:71:41:
67:8b:9c:fa:80:60:22:50:7e:45:7f:39:0b:46:cc:84:46:a7:
c6:4d:98:3e:46:5d:aa:75:6d:e6:bb:95:46:61:e2:ec:05:d3:
44:7d:91:e7:2b:ba:bf:f9:84:7f:8e:f4:70:be:89:a9:1f:ca:
60:32:b5:34:50:4c:68:f9:c8:20:6d:e5:58:81:85:2f:76:a5:
a7:ab:81:25:6b:71:95:2f:97:19:2e:97:f7:3c:2e:b2:dd:af:
bd:22:07:b5:2c:2e:5e:2c:01:ef:30:28:98:57:58:31:ac:36:
de:a5:af:2d:73:74:3a:8c:10:2a:28:26:31:ca:63:5b:f2:bf:
06:0b:58:bf:2e:c0:63:a0:2a:37:e7:db:3a:2d:99:c6:86:dc:
72:55:eb:3f:53:da:22:4f:a7:bd:6a:95:8e:96:5d:b8:90:5c:
05:91:b9:5e:4d:42:d9:74:63:1f:ce:a6:50:0a:3e:3a:53:d1:
3f:7d:b4:9e:36:c9:ce:8e:48:a4:b2:1a:af:16:aa:ab:16:d4:
15:9c:91:09:1d:13:91:07:70:de:12:8e:82:a1:32:18:ea:14:
cf:a3:dd:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:10:57 2025 by rpki-client