Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
File: nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft (raw, json)
Hash identifier: MQHGvS7T6bnmn9hJXqhbjutQxFrkkXXFczAT1ZjM3Ek=
Subject key identifier: E1:97:AF:F7:EA:F8:1F:6D:8B:35:F9:1C:1B:37:AB:3E:2D:51:E7:63
Authority key identifier: 9E:F1:98:71:B1:75:9F:32:37:01:2E:4B:6D:BB:6C:2F:D2:BE:8B:4B
Certificate issuer: /CN=9ef19871b1759f3237012e4b6dbb6c2fd2be8b4b
Certificate serial: 019A71B8B72CC6780C07693525AF7D2E418C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
Manifest number: 107F
Signing time: Tue 11 Nov 2025 07:02:02 +0000
Manifest this update: Tue 11 Nov 2025 07:02:02 +0000
Manifest next update: Wed 12 Nov 2025 07:02:02 +0000
Files and hashes: 1: mcodiKTX1slSmfc3nZ7DZKGNYFk.roa (hash: 8YfkV+577aVFpH3FgiABnIRQh7w2LYtBhi55zdviFSU=)
2: nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl (hash: vVUdtrPkGWAvSO3BdKOVjukJ6jnUbLzPVJc34i/E5F8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:b7:2c:c6:78:0c:07:69:35:25:af:7d:2e:41:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ef19871b1759f3237012e4b6dbb6c2fd2be8b4b
Validity
Not Before: Nov 11 07:02:02 2025 GMT
Not After : Nov 12 07:02:02 2025 GMT
Subject: CN=e197aff7eaf81f6d8b35f91c1b37ab3e2d51e763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:6d:54:eb:41:18:e3:58:17:38:1b:d0:d4:00:
9b:b6:02:8c:6c:37:8f:6e:31:72:5c:51:06:f9:af:
38:60:00:85:81:27:22:ad:ca:bd:9b:a9:24:33:63:
55:2b:1e:e0:bc:e8:93:61:d7:6d:0a:24:c6:23:7c:
37:39:7e:4d:7b:15:4b:a0:4b:9e:4c:f9:42:67:3e:
e8:b6:97:ff:9e:c1:35:5e:90:91:de:85:79:60:45:
60:d1:85:89:a7:1a:fe:8a:06:97:12:01:95:fc:4c:
68:d3:13:18:35:ee:f8:4b:74:b0:dc:62:26:b9:a4:
f0:dd:82:cc:3d:c1:95:25:ee:99:86:e8:ce:d7:e4:
8a:82:33:ac:f7:28:f8:dd:32:47:07:bb:73:75:60:
3d:6e:b5:82:2c:44:60:d6:7d:d9:5c:9f:5c:f3:17:
c8:99:95:ff:f5:78:0a:21:b0:ba:df:82:46:98:96:
5d:41:d7:16:7c:5b:9b:7e:f9:df:bb:1b:79:c4:36:
ba:c6:af:9f:15:14:b6:92:c0:99:68:a1:d0:a5:ff:
15:bb:3e:60:32:e2:a1:3a:d9:84:26:9f:73:c7:ab:
e1:84:dd:a7:00:1b:37:3d:6a:d0:34:16:09:10:e1:
26:b9:c8:0f:dc:11:81:cc:8f:b5:59:c2:1b:8d:3c:
b3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:97:AF:F7:EA:F8:1F:6D:8B:35:F9:1C:1B:37:AB:3E:2D:51:E7:63
X509v3 Authority Key Identifier:
keyid:9E:F1:98:71:B1:75:9F:32:37:01:2E:4B:6D:BB:6C:2F:D2:BE:8B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a1:01:36:3d:e3:54:bd:b2:30:3d:37:fd:8b:64:65:7e:b4:
6e:cb:13:58:f5:ce:50:1d:60:f9:e5:a0:4d:7c:e5:c3:ba:81:
b2:e8:e3:df:1c:f5:d5:da:0c:d9:6e:e3:15:34:b9:cc:19:e8:
0a:2c:bf:20:02:af:86:58:bf:58:6b:91:5f:bc:48:8c:af:f2:
a6:4e:1a:88:14:88:ee:56:12:84:f2:3b:83:3c:54:66:47:43:
c4:f6:be:06:08:1a:86:e2:31:91:cb:a2:ac:3e:ed:db:b2:c8:
33:58:0c:ca:2c:68:d5:c4:4f:84:d8:90:03:32:9e:36:b7:46:
dc:ef:6b:d0:41:f3:28:b8:fc:3e:00:70:9c:a2:33:5f:94:d6:
0a:29:25:af:d3:24:17:79:0f:dc:24:18:c5:b8:c8:e6:51:74:
3f:a2:cd:e2:c8:e8:37:99:13:41:a1:dd:59:7d:bb:46:2a:64:
7a:ff:89:64:fb:42:54:ed:06:4f:ad:46:eb:bc:fa:07:54:14:
82:b3:77:3f:61:62:d9:ef:26:5e:a9:0e:eb:93:10:ed:67:f3:
33:ec:81:67:42:34:e5:2b:fe:2e:08:f7:74:13:91:1a:65:6c:
0e:e3:f2:f0:94:fa:ab:7f:30:e0:0f:42:35:63:df:ab:1f:99:
92:cd:9b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:42 2025 by rpki-client