Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
File: nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft (raw, json)
Hash identifier: 0hOXVQpw+vr+0YKuNY7EGkZXMlpqtulabwW42thzzZE=
Subject key identifier: 01:39:70:62:61:14:96:66:12:05:B5:1D:05:74:A9:C0:B2:56:F8:82
Authority key identifier: 9D:5A:17:27:1D:99:CF:15:B7:3E:CC:65:86:73:14:3C:28:E2:07:ED
Certificate issuer: /CN=9d5a17271d99cf15b73ecc658673143c28e207ed
Certificate serial: 019A0290EE6D1B8A91CC88E97E7A6A6AE9CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
Manifest number: 02EB
Signing time: Mon 20 Oct 2025 17:00:43 +0000
Manifest this update: Mon 20 Oct 2025 17:00:43 +0000
Manifest next update: Tue 21 Oct 2025 17:00:43 +0000
Files and hashes: 1: MaMIYt08Tc0Dvw5CdW33aL4DYlE.roa (hash: 1yCq3fhsKBl5S18vVeljQHZ1fPWzPn1J4kkG7WWFZZc=)
2: jzoaRST14iVv_bSGhulsr5_HKjg.roa (hash: eDucU+vORvsLhsrcVm/yMIU0JKeTCq2CqXsu5GoLiJA=)
3: nVoXJx2ZzxW3PsxlhnMUPCjiB-0.crl (hash: 1ovku4K6UqgCcfI5gAeX9hlq6lueyQ1m+JKI9rz9zYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 17:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:90:ee:6d:1b:8a:91:cc:88:e9:7e:7a:6a:6a:e9:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5a17271d99cf15b73ecc658673143c28e207ed
Validity
Not Before: Oct 20 17:00:43 2025 GMT
Not After : Oct 21 17:00:43 2025 GMT
Subject: CN=01397062611496661205b51d0574a9c0b256f882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e8:9f:83:da:a8:37:53:6b:96:0c:f9:26:16:
01:c8:e6:45:cd:82:b2:f2:7b:62:7b:81:5d:48:cb:
4f:9f:54:d8:72:e5:61:a1:10:57:59:09:20:3e:67:
67:90:60:c0:f2:e9:da:33:63:7b:ed:8f:e4:a1:39:
52:dc:61:bd:b1:e3:39:b3:3e:32:7d:7e:73:6f:8c:
73:ce:e0:19:d0:85:47:05:06:9c:7c:6f:d0:77:62:
cd:04:0a:11:1f:67:0c:d0:a3:e5:d2:ed:bc:e0:03:
26:dd:9b:0c:ad:73:43:96:f4:fe:5a:f7:6c:df:77:
73:63:9e:9e:3c:4b:2c:f4:e9:d6:39:4f:50:75:80:
49:f0:49:4e:73:0f:8f:fb:b8:6e:9c:1d:15:95:0d:
f7:11:f2:37:3f:91:16:60:c5:eb:de:07:00:78:06:
d3:46:1b:ea:69:16:ba:be:df:00:d5:9e:22:d3:a3:
57:aa:95:d8:6e:58:c3:62:ae:0d:4b:2b:a0:49:14:
13:0b:98:2e:6f:f1:68:e7:d2:ce:15:2e:c4:4f:54:
71:dc:d4:3a:dd:ab:5e:84:ac:40:9d:70:2a:8c:0a:
9b:65:cd:01:54:fb:94:3a:03:7c:4d:67:a1:60:63:
9d:8e:39:c5:a1:0f:1d:b2:ca:1c:1f:1f:a7:50:e6:
e4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:39:70:62:61:14:96:66:12:05:B5:1D:05:74:A9:C0:B2:56:F8:82
X509v3 Authority Key Identifier:
keyid:9D:5A:17:27:1D:99:CF:15:B7:3E:CC:65:86:73:14:3C:28:E2:07:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:bc:ec:f0:3e:e9:8d:4b:59:e2:19:d5:59:5d:33:a4:27:3b:
11:32:d9:f2:a0:18:90:22:62:63:5d:d4:06:30:dc:ba:e3:db:
9b:1b:67:59:db:74:d1:bd:fe:af:87:c4:86:3f:37:a1:34:7d:
8f:1b:37:8e:ec:78:65:90:25:db:7e:2a:ba:62:26:00:b6:b4:
d5:72:63:ed:9b:9a:f8:c0:57:fe:fb:78:54:05:21:64:5d:57:
ed:57:13:88:34:b0:50:bd:4c:f9:a2:88:58:7e:f5:f0:76:94:
cc:19:7d:46:30:80:29:6a:b9:fb:f3:13:c3:2a:ab:64:b9:54:
8d:11:d8:ce:24:af:ec:dd:f8:d1:f7:34:11:a3:cf:59:91:43:
df:88:92:4e:a9:c5:25:d1:81:e9:d8:e9:7d:a0:46:d6:32:44:
76:9e:d0:c6:c2:05:42:87:e6:51:f0:e2:1c:da:3b:66:d8:2c:
a8:7b:08:b7:8b:0d:1c:86:3e:89:76:24:c4:36:d3:e5:69:14:
5c:99:6b:4a:53:ac:aa:4b:6e:cb:b0:1d:2c:3e:14:4c:9b:8e:
d0:ba:9d:a4:c9:5c:6e:e6:dd:60:74:38:c5:76:36:5b:42:b6:
ca:d9:cf:3a:a9:ed:ae:3d:3c:2f:79:52:5c:bb:df:e4:03:64:
b9:82:0a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:03:37 2025 by rpki-client