Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
File: nSVxkIIfcFio6v1IGWl0NoutjxQ.mft (raw, json)
Hash identifier: TRMROPh5IVKvOY3KjExqVT+jF4EpNhjy2/lEiRebowE=
Subject key identifier: 5B:C1:6B:69:6F:E1:8D:CC:32:E5:93:E4:DF:35:F7:4C:BA:B2:03:09
Authority key identifier: 9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
Certificate issuer: /CN=9d257190821f7058a8eafd48196974368bad8f14
Certificate serial: 019A71B7C8FA3966DCF2BBA5C720D3DA1F15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 07:01:01 +0000
Manifest this update: Tue 11 Nov 2025 07:01:01 +0000
Manifest next update: Wed 12 Nov 2025 07:01:01 +0000
Files and hashes: 1: S6yD0xSsAdYMuFY-SqJP0As2TGI.roa (hash: NWiZKpb2JP7oKryMsUVnNHlDjQunxGKrj2ir9mx8k8E=)
2: lkhGtmHtTBEdKgsUVjONXoB0iQc.roa (hash: 9yZ07+0QCixTukFaKD5cKhr7FU+NHBM/0FUydctI6gg=)
3: nSVxkIIfcFio6v1IGWl0NoutjxQ.crl (hash: HpgSNheM0TOfTkV8MErOhhpsEzfffQh4F4vFPRvRrxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:c8:fa:39:66:dc:f2:bb:a5:c7:20:d3:da:1f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d257190821f7058a8eafd48196974368bad8f14
Validity
Not Before: Nov 11 07:01:01 2025 GMT
Not After : Nov 12 07:01:01 2025 GMT
Subject: CN=5bc16b696fe18dcc32e593e4df35f74cbab20309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ee:b3:0c:38:43:7d:5b:ef:92:6c:d1:be:ab:
15:dc:e7:0d:10:10:f4:fc:eb:fd:d7:56:be:f9:30:
c9:32:7b:41:f7:2b:74:b4:a7:32:ac:52:5f:18:fb:
5a:e5:f3:7c:00:a3:81:1e:9c:13:32:7c:be:2a:c8:
a8:7b:3e:3f:f1:44:d3:da:30:a4:ef:a6:95:e3:90:
5a:3a:86:f1:b5:7c:df:df:1d:93:23:98:53:20:37:
88:0e:57:99:f3:16:cc:6c:72:70:8f:fb:85:79:02:
b9:2d:ba:10:1d:6b:62:5d:4b:02:d4:4e:b4:b1:ea:
d1:9c:e8:5e:1c:69:a4:b3:0a:a1:3e:91:67:a2:42:
3a:2d:a1:11:53:d5:ac:07:d6:a2:ff:0e:d5:95:da:
f7:6e:16:bf:97:26:b9:7e:19:6a:c6:35:22:e4:4e:
48:e4:17:38:34:45:5b:c2:31:66:00:2a:d2:d5:d8:
bd:d7:2a:b8:8f:4f:ba:52:c0:d8:13:2f:dd:83:13:
d1:8f:35:11:a6:d4:71:81:a4:1a:80:97:bb:88:ee:
f5:c2:f3:e2:7b:62:17:58:94:55:fa:17:29:bc:ad:
35:6a:a5:cf:83:31:dc:dc:49:e2:3e:58:47:72:46:
30:09:d6:e1:04:8e:ab:c9:10:83:9f:30:b5:c1:e6:
09:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C1:6B:69:6F:E1:8D:CC:32:E5:93:E4:DF:35:F7:4C:BA:B2:03:09
X509v3 Authority Key Identifier:
keyid:9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:b8:2d:d5:7b:1c:8d:bb:37:c7:a4:c3:ea:11:cf:b8:ce:60:
10:8a:47:81:16:dc:0c:5c:ee:21:a6:9b:d9:6c:9d:28:10:77:
53:98:64:45:54:e5:0e:79:48:84:aa:71:96:7e:a0:af:43:b8:
43:c8:84:18:f3:fc:ed:5a:d4:30:5c:d7:ee:0a:36:50:2e:bb:
ab:f3:a5:40:65:15:0d:f9:54:55:f4:4e:c9:ad:c9:cb:0b:c0:
bd:04:e5:c7:53:c5:4a:9f:75:55:d0:67:a8:8c:48:de:45:fb:
c3:c9:ae:ed:4f:75:a6:eb:05:2d:89:48:9a:f8:33:90:1d:80:
a4:01:b6:ac:cf:bb:b4:f2:5d:72:77:a9:59:d7:75:56:89:7a:
41:cc:14:10:cc:78:3c:4a:01:a0:8b:4c:08:a7:34:df:b5:47:
fc:d3:29:ec:fd:99:85:ba:65:54:85:c3:6a:a2:5a:a4:c3:a7:
7b:08:17:40:22:48:de:23:41:bf:97:b0:a2:ca:14:38:bd:66:
cc:48:16:75:e8:91:9f:b7:c2:7d:64:bf:c7:58:34:9b:f2:d0:
1b:eb:e8:e6:5a:7d:71:ed:e2:f5:09:c5:98:8f:10:a9:f6:47:
23:b3:5f:17:5f:83:cc:09:7a:dc:07:09:50:ce:f3:47:3d:3d:
8f:a1:48:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:51 2025 by rpki-client