Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft
File: Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft (raw, json)
Hash identifier: BPmHS0ocfhBPqMQDcaNlE8EiRf1IHgo9Vx7TNdE+sME=
Subject key identifier: 4B:5E:3C:4D:23:F8:8A:37:FF:9A:D8:29:AC:54:5C:75:2F:ED:96:83
Authority key identifier: 36:CF:AF:FC:9C:78:68:70:8F:3C:81:EE:5C:0D:64:C3:5A:C1:BE:F1
Certificate issuer: /CN=36cfaffc9c7868708f3c81ee5c0d64c35ac1bef1
Certificate serial: 019A225235D79B60E90EA6789C3D5747EDEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft
Manifest number: 05D6
Signing time: Sun 26 Oct 2025 21:00:04 +0000
Manifest this update: Sun 26 Oct 2025 21:00:04 +0000
Manifest next update: Mon 27 Oct 2025 21:00:04 +0000
Files and hashes: 1: Hl7hSFZEHZrA1_ugH1WvtUr7hTI.roa (hash: uywWwGCKWj+Fn6qNY8dmQ39B3/vU6rK6HYsO/2wacYs=)
2: Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.crl (hash: H4AZ6a80IJL5KgN0gejuVTKOaAD7rButNswP2KaaHsw=)
3: cekUNXzTWTu4gnxTXJJQQyW61Cg.roa (hash: ZDt6OkPV5Ex3Yi3FM3u0/RzjrLejRDKeTGQEGbNL8iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:52:35:d7:9b:60:e9:0e:a6:78:9c:3d:57:47:ed:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cfaffc9c7868708f3c81ee5c0d64c35ac1bef1
Validity
Not Before: Oct 26 21:00:04 2025 GMT
Not After : Oct 27 21:00:04 2025 GMT
Subject: CN=4b5e3c4d23f88a37ff9ad829ac545c752fed9683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:95:8f:90:82:48:76:3a:12:bd:eb:1b:fb:3e:
94:51:47:cc:34:9e:1a:a2:c3:20:bd:d1:56:95:17:
22:0d:4e:d1:15:5c:97:28:d9:a2:91:21:8f:ae:14:
f7:cf:44:8f:60:e2:7d:95:20:cf:be:7d:4b:26:56:
a8:f7:27:c5:f3:d6:3a:54:d6:1d:8c:20:71:bb:c9:
ca:4f:a5:90:00:9f:6e:a4:02:97:e6:fc:01:1c:84:
ea:42:a3:80:52:dc:60:a2:9b:1a:c0:c5:02:71:32:
63:c6:18:d8:c1:dc:5c:ff:af:5c:8a:a8:3a:de:b8:
5b:ce:4e:f8:63:f5:a9:8b:31:8e:1e:aa:5b:1e:c4:
67:1c:01:3e:89:db:e3:80:57:33:6d:e1:74:f8:8d:
39:11:8d:83:64:9a:fe:00:fd:f2:ec:7b:f2:09:fc:
95:99:b2:e6:13:80:40:92:21:aa:b0:67:6d:c2:2f:
62:b3:52:74:ef:ed:bb:da:9b:30:f4:ca:05:74:a9:
1a:46:83:c7:39:d0:98:f8:d5:b1:56:25:8e:f4:7e:
12:97:62:fc:06:4b:08:85:96:37:0c:1c:1d:ee:77:
ab:f8:63:29:e2:f7:f7:3b:31:0a:1c:d4:23:f3:3b:
b6:e2:d7:d0:9c:8c:72:4a:c5:aa:8f:7e:e5:55:16:
92:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5E:3C:4D:23:F8:8A:37:FF:9A:D8:29:AC:54:5C:75:2F:ED:96:83
X509v3 Authority Key Identifier:
keyid:36:CF:AF:FC:9C:78:68:70:8F:3C:81:EE:5C:0D:64:C3:5A:C1:BE:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d4:00:1d:a8:7b:7d:d1:89:a3:40:d6:06:7d:45:e7:78:ab:
e8:cd:94:45:8e:7c:b7:e7:0f:32:f9:3b:8f:67:90:4b:14:6f:
02:4e:69:df:95:39:84:2a:e9:46:66:e8:02:b9:dd:b3:79:7a:
2f:bc:31:6a:f2:31:6f:6e:cf:c8:f0:28:c0:db:44:72:84:0f:
90:0d:7a:e8:4c:02:99:83:8e:48:02:86:0a:8a:4a:d4:18:f3:
a9:fa:94:ee:65:48:e8:19:cb:02:cf:96:2a:03:06:05:c0:7e:
1a:77:0e:44:8e:21:45:ba:de:b0:5a:03:89:5c:53:8c:46:77:
70:c0:23:99:fd:b1:d7:36:19:1b:54:58:b4:be:05:24:3c:58:
f3:c5:df:04:c2:9c:30:17:f4:40:01:85:55:23:99:db:61:5e:
d2:ae:1b:26:13:e4:eb:73:d8:6f:8c:d1:65:4f:25:94:d8:38:
cd:f4:d5:52:d5:6c:69:95:34:aa:c6:c3:1d:ec:d0:88:85:8a:
23:1a:b4:1c:e4:03:7e:b4:ba:f8:8c:7b:5b:a0:b6:a1:66:5c:
64:92:31:4d:88:69:ca:12:8e:cf:df:07:91:77:99:d9:b4:17:
9e:62:2d:4a:4c:c9:84:cc:d1:4a:10:36:dd:93:a3:e7:98:5d:
65:9d:67:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:13:37 2025 by rpki-client