Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
File: nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft (raw, json)
Hash identifier: xzZnQqWlZF4pmx/Hj3K3aG5A8nUSduOoG4WJZ6cegi8=
Subject key identifier: 1E:7E:57:26:4C:0B:D0:99:83:B6:E8:41:C2:78:BA:2E:DB:1A:C2:18
Authority key identifier: 9E:F1:98:71:B1:75:9F:32:37:01:2E:4B:6D:BB:6C:2F:D2:BE:8B:4B
Certificate issuer: /CN=9ef19871b1759f3237012e4b6dbb6c2fd2be8b4b
Certificate serial: 019921B1FB738AF56FE890F3ACE8948F8574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
Manifest number: 0FD1
Signing time: Sun 07 Sep 2025 01:02:16 +0000
Manifest this update: Sun 07 Sep 2025 01:02:16 +0000
Manifest next update: Mon 08 Sep 2025 01:02:16 +0000
Files and hashes: 1: mcodiKTX1slSmfc3nZ7DZKGNYFk.roa (hash: 8YfkV+577aVFpH3FgiABnIRQh7w2LYtBhi55zdviFSU=)
2: nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl (hash: ippQnri+gA6C0DUhr/o7lDn0J6DGg3v++pk5tfAdcls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:fb:73:8a:f5:6f:e8:90:f3:ac:e8:94:8f:85:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ef19871b1759f3237012e4b6dbb6c2fd2be8b4b
Validity
Not Before: Sep 7 01:02:16 2025 GMT
Not After : Sep 8 01:02:16 2025 GMT
Subject: CN=1e7e57264c0bd09983b6e841c278ba2edb1ac218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:79:a7:df:66:76:92:ba:32:90:31:65:1d:a8:
79:53:1e:b8:9c:98:bf:fb:53:df:52:e8:e6:0a:ba:
5c:34:4e:ca:73:79:90:f3:9d:28:f0:e5:b2:bf:ec:
d8:c6:77:1d:f2:52:db:b4:b2:b1:e9:92:db:5f:16:
37:55:98:6c:8d:83:c1:a0:ee:89:7b:9a:e7:85:8e:
83:f3:19:7f:f6:23:ad:b9:dc:91:34:52:b1:3a:eb:
b6:fa:97:ca:06:56:4d:00:63:55:2e:f2:66:5a:6f:
06:d7:ec:e3:46:e1:52:76:f3:9d:d6:a8:a1:01:ac:
ff:d8:79:fa:24:68:34:48:c6:08:83:b7:7c:20:ec:
91:d0:7f:6f:a1:30:30:79:35:f5:93:5c:fe:fa:bb:
08:e4:b8:ed:c9:6c:2c:9a:87:5c:2e:14:3b:fc:2c:
21:34:d2:2f:4d:5f:5f:11:77:be:88:41:65:87:1b:
14:c1:92:14:b2:60:7a:6d:f2:69:b1:c1:7b:ac:e0:
ee:dc:73:52:a2:0e:7c:f4:e5:7f:52:87:c8:52:9e:
39:ab:d2:a9:80:e9:82:ac:60:5c:79:8f:46:49:2b:
4c:93:9a:36:29:0d:3e:bb:45:cd:76:95:0f:f8:e1:
c1:1b:56:2f:a5:f8:ca:ad:39:e7:1e:ba:25:65:61:
bd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7E:57:26:4C:0B:D0:99:83:B6:E8:41:C2:78:BA:2E:DB:1A:C2:18
X509v3 Authority Key Identifier:
keyid:9E:F1:98:71:B1:75:9F:32:37:01:2E:4B:6D:BB:6C:2F:D2:BE:8B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:58:d8:b8:5c:90:88:23:ac:62:0f:29:80:5e:1b:a4:e2:a8:
2b:f2:9a:8b:ee:7e:92:f2:dc:27:3b:aa:8b:ea:7d:b9:da:86:
16:3f:5d:9b:7f:b5:71:1c:dc:61:0c:2b:a3:c2:f8:d6:a7:70:
78:0e:51:27:a9:43:4a:0a:e6:d6:f3:ef:2b:b9:7d:f6:91:b6:
3a:d1:d8:a7:66:51:da:21:30:7e:1e:d0:53:1b:02:09:22:c7:
fe:cb:0f:2c:45:49:07:19:b4:3e:ee:ec:e7:52:b7:b6:02:30:
d3:e4:fd:a7:8d:c1:fc:d9:d0:a6:58:c6:07:b2:fb:28:2a:51:
8c:06:ea:8d:be:44:f7:49:a3:f5:29:f2:e3:32:8d:b2:d1:5d:
9f:95:89:71:18:f4:41:b9:4f:57:7d:15:dd:e8:44:55:31:7a:
25:5a:9d:9c:35:81:d7:04:83:ac:b4:24:6b:f6:d4:53:c3:a7:
70:5b:40:84:b2:7d:ba:d9:0e:04:5c:29:e8:50:16:4c:26:92:
e2:bf:f2:d1:50:ea:22:9f:92:b5:22:56:9d:34:d7:c9:97:e1:
a7:35:44:ab:3b:f6:16:ad:14:b6:f7:7a:63:e9:d8:07:61:87:
99:17:d8:24:7c:4c:57:60:8e:38:30:59:bb:51:80:58:47:e8:
fe:53:13:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:07 2025 by rpki-client