Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
File: nzEukpe8HSfr60dt6g7hXddWVC0.mft (raw, json)
Hash identifier: 5VfpKkxh9jyiUFLgoXAAsqi0Fmfl3KtvkES0U+uFLMY=
Subject key identifier: 1D:6A:2A:E0:29:02:DB:65:90:81:2A:FC:C4:E1:CE:9D:B4:F7:57:C2
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 019A50E4384B87D80299D1DF314EAF652973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
Manifest number: 0DA7
Signing time: Tue 04 Nov 2025 22:02:05 +0000
Manifest this update: Tue 04 Nov 2025 22:02:05 +0000
Manifest next update: Wed 05 Nov 2025 22:02:05 +0000
Files and hashes: 1: 1-YKY-kDb-ok-O2t52erxOSFI9tY.roa (hash: Puf+xKue+984oQxVfH82nttD3pZrp9rN15gRLEzYPtg=)
2: 9DNpUDfjfX1cw67GoTejssp0I60.roa (hash: waZpM47Y+Uz4d9MPb5IIUjKVJuGJ/1amyn5dhXRlaKQ=)
3: Aesp-0bkacoacCkCpfhQPmoA2Jo.roa (hash: auTmqPfhdn5WgGssEA4un4kBW/LnIC2gzs/3RcvN434=)
4: BuDcPMwCapskKDGJlWsZctPOBc4.roa (hash: 3bBve525vpAtWU3g8/6VOaPU/EQ0F7VvrXGpa6fOHFk=)
5: bO_WvrYP5ttqrPDJq5s463Nszpo.roa (hash: EspaZPCLRAen7G7qKwAXYq7KwKVTki6xdz4+i5S1a6Q=)
6: nVCJmhFMb83gvB2R2U-hSqvqOrY.roa (hash: /YERfaDChwnXHF/qpIBHQyOtHUuBLeX/WEtxA7mKmAY=)
7: nzEukpe8HSfr60dt6g7hXddWVC0.crl (hash: lBwUViIs0wuJ8Wx5AGw0bAfO0K9iDaTxS5Z34+omgqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:38:4b:87:d8:02:99:d1:df:31:4e:af:65:29:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Nov 4 22:02:05 2025 GMT
Not After : Nov 5 22:02:05 2025 GMT
Subject: CN=1d6a2ae02902db6590812afcc4e1ce9db4f757c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0f:7d:9f:04:af:3d:9c:a1:f0:45:51:34:bd:
55:ea:35:4c:ba:94:65:24:5e:6a:00:87:d0:c8:6f:
38:b4:cb:57:a7:0d:06:4d:7e:2f:ef:c4:20:60:35:
5e:1b:ea:a9:d6:38:52:74:ba:bf:3f:ce:b2:b9:89:
ec:19:65:65:ea:2f:2b:e6:0b:04:50:5e:ae:c3:26:
ef:65:9f:cc:a7:2c:31:9d:70:fb:8a:62:44:fd:a8:
5c:0e:44:dd:06:ca:6f:61:1f:33:ae:52:c2:bb:82:
ea:68:27:0b:20:d8:ef:fc:81:52:69:84:6d:9f:f0:
ea:88:95:cd:1b:94:1b:b3:e5:a9:e9:99:9a:12:c3:
26:97:ba:c9:60:4e:ee:58:94:7e:c3:6b:b2:a1:2f:
2e:b6:0f:e6:0f:81:e7:27:c7:79:7a:d6:cc:29:21:
75:0a:15:83:e8:cf:d3:65:8b:f9:a7:25:8c:8e:4c:
69:68:41:8b:eb:c8:a7:4a:5d:6c:4f:ff:40:1e:59:
f1:98:e1:23:58:03:81:6a:90:51:b6:bb:82:20:ff:
f6:f8:12:5d:ce:a9:ea:fc:79:c5:16:80:22:30:63:
af:8e:ac:fd:94:3d:56:3c:c6:d9:24:b6:0f:db:81:
43:91:f5:c5:d6:44:de:d5:aa:9c:c2:0e:c4:26:5b:
13:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6A:2A:E0:29:02:DB:65:90:81:2A:FC:C4:E1:CE:9D:B4:F7:57:C2
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:4f:bd:72:e0:60:cd:3b:11:8e:fd:a5:db:ea:cd:d0:d9:27:
c8:8b:84:cb:5b:db:63:0e:12:e9:eb:be:75:eb:ea:29:f9:19:
88:41:43:3c:c2:6c:5a:0a:dc:71:64:34:91:56:12:e5:bf:ac:
12:5a:b4:e6:b7:47:79:2f:d0:e0:31:3c:13:38:2a:42:6c:0a:
cd:d4:a0:44:7e:71:13:27:c3:9d:da:33:11:9b:e5:83:61:f4:
5f:87:bd:de:85:b4:9e:c1:6d:25:bd:cc:c2:5d:f0:3b:22:e6:
91:c2:9d:86:1a:b6:51:9f:a8:12:e3:eb:5a:c1:9f:97:8e:d8:
c3:a2:6a:a1:c0:69:2e:be:8b:0e:b7:63:31:45:8f:47:02:8d:
55:1f:f1:d7:94:ae:0c:1b:39:32:c1:92:fe:c7:84:af:63:20:
34:61:54:fa:89:af:36:c6:c6:19:6f:3b:b3:8f:a1:c5:ce:e6:
2d:46:88:4e:b3:0e:28:37:79:fe:d5:7e:6a:86:d7:d7:51:e7:
ed:e1:bb:76:f3:4f:83:0e:97:cb:2d:bc:9e:84:84:75:4c:64:
2a:7e:cd:3d:00:3c:be:26:0f:25:27:22:f4:0a:f8:f2:85:d9:
af:84:c6:97:23:35:35:27:14:d0:47:8c:54:94:17:f9:73:2e:
3b:1b:4e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:17:51 2025 by rpki-client