Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
File: nksygbCOa17B_esNBEBSjtk03D8.mft (raw, json)
Hash identifier: iiIpCtK8KdE70au0MjyDddXdrGW7KTfH5MSvrq0CEuQ=
Subject key identifier: 6B:3A:40:A6:4E:68:D7:A9:F4:06:12:2C:D0:7F:51:1D:DC:BD:FA:D5
Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
Certificate issuer: /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Certificate serial: 019A70A4DBA18B405C2C04FE324E7DD3BF08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
Manifest number: 1729
Signing time: Tue 11 Nov 2025 02:00:43 +0000
Manifest this update: Tue 11 Nov 2025 02:00:43 +0000
Manifest next update: Wed 12 Nov 2025 02:00:43 +0000
Files and hashes: 1: L1HdFt_deyOuIyEh6ohLDMoi2Hk.roa (hash: 5OEmyz/JOCY7uzs6X4meQ1O5LJEXih2dkz+QsDhsQ6g=)
2: atuec3UTPwJqa2nbFVc6PceCm_U.roa (hash: mxjn4P2BAxt4/rhflGcv4gtLgmXNo6T8LNPaEGy8CeQ=)
3: kg9t18MET9vHkp7c3ZCFI-WKvIA.roa (hash: ATnWiMlDUB6UoUtR8mC5SAsRs5s+5t+PXg+EI7niqTU=)
4: lnxBICiuOhb0S2Ss6UKdeHcB0oo.roa (hash: hdI3xj2P7Sjw6pCwaS0Na+6UrppqSPkWbMvSGZ4mxkQ=)
5: nksygbCOa17B_esNBEBSjtk03D8.crl (hash: 95qbu1rUAx30XXoWRr7dtbr8bqXDvsgOOLTsBmBpxeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:db:a1:8b:40:5c:2c:04:fe:32:4e:7d:d3:bf:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Validity
Not Before: Nov 11 02:00:43 2025 GMT
Not After : Nov 12 02:00:43 2025 GMT
Subject: CN=6b3a40a64e68d7a9f406122cd07f511ddcbdfad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:18:3f:83:d8:12:cc:e9:77:48:84:a6:81:10:
3c:fa:9a:2f:40:08:5b:e6:5d:c8:5e:37:ed:1f:27:
41:b3:1e:b8:ff:25:59:e5:1f:d9:d7:53:94:c0:79:
8c:2b:d2:af:33:b6:5e:67:43:39:57:a9:7b:8f:6a:
9a:e6:8a:e8:fe:4a:71:5e:d4:db:57:a6:eb:2b:15:
fa:e1:f1:1f:dc:5b:88:b5:13:f9:0f:3e:6f:de:a1:
a1:94:87:8e:87:05:44:73:61:51:ee:27:35:3c:a8:
bb:d5:71:ab:81:fe:cf:bf:be:76:8b:9d:bb:61:24:
f0:ab:3d:bf:0e:df:ba:e7:70:86:93:ef:00:01:29:
2e:f6:5f:32:4a:85:f3:d0:a1:9e:25:f6:9f:4f:0e:
0c:79:89:08:5c:4a:82:ef:ca:0e:96:9b:c6:ce:9a:
2e:e2:9c:88:7e:52:32:67:5f:d6:7e:ff:c2:1f:5a:
20:51:a6:2b:dc:20:60:35:5b:eb:e7:4f:ad:3b:3b:
20:ec:b6:05:a5:97:ee:ff:73:03:fc:09:28:d1:37:
75:aa:36:9b:0e:d8:b8:20:34:ff:08:2a:b4:76:e3:
1f:85:2e:83:2f:ce:1f:08:b0:79:36:7d:10:9d:ca:
76:1c:be:1f:9a:db:a0:7f:9b:ac:86:85:33:59:d7:
33:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3A:40:A6:4E:68:D7:A9:F4:06:12:2C:D0:7F:51:1D:DC:BD:FA:D5
X509v3 Authority Key Identifier:
keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:35:ed:97:55:42:10:1b:1c:7f:c8:95:0e:58:70:60:4c:42:
a5:e6:6e:07:89:c7:75:c9:2f:2c:45:a4:9a:72:a8:0d:43:e2:
6e:b8:54:0e:cd:07:0a:51:b9:58:da:39:27:45:a4:3c:6a:28:
85:f3:0b:43:d3:94:33:ca:a9:47:cf:1e:07:8a:bf:31:cb:3d:
d3:a3:8a:1c:6d:7c:fc:6a:73:77:ee:c6:69:48:de:39:22:89:
b4:19:86:82:01:44:b7:b5:e4:e0:3e:c7:df:31:ee:f6:bf:32:
89:94:b1:ac:df:56:e3:09:be:a4:e6:c1:01:86:47:d0:87:40:
01:be:92:39:60:7b:1a:9f:fc:a2:ed:68:0c:7f:50:4d:f8:74:
fb:f8:c6:1f:54:53:aa:93:c7:a1:d5:25:18:ab:f3:23:14:42:
21:e9:23:d7:a3:bb:33:73:44:60:89:7f:f1:25:08:1b:47:0e:
47:23:d8:07:d7:8a:7a:38:db:2c:e6:d7:e4:c9:2f:ca:74:ff:
1f:5d:00:c2:4f:54:b3:e2:51:66:d7:bf:fc:36:3e:97:98:50:
12:61:cb:62:a9:8e:2a:25:f7:86:4d:b3:44:e6:e6:c2:04:ce:
c5:67:7e:75:9f:25:14:16:2f:7e:ea:94:b6:fc:f9:89:67:9d:
d3:38:fb:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:16 2025 by rpki-client