Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.mft
File: nv9H-JUh2bSSt9BCG8J2kevwbv0.mft (raw, json)
Hash identifier: ACZ2/+GeWUh3Hv1S+RthtKrA0k3mtBFUokaVK7zf4i0=
Subject key identifier: 4C:23:8E:82:3F:29:A8:6B:5E:28:87:AF:ED:F7:26:72:68:C6:24:B6
Authority key identifier: 9E:FF:47:F8:95:21:D9:B4:92:B7:D0:42:1B:C2:76:91:EB:F0:6E:FD
Certificate issuer: /CN=9eff47f89521d9b492b7d0421bc27691ebf06efd
Certificate serial: 019A722634276E5006B23E001CBCCF2DB245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nv9H-JUh2bSSt9BCG8J2kevwbv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 09:01:37 +0000
Manifest this update: Tue 11 Nov 2025 09:01:37 +0000
Manifest next update: Wed 12 Nov 2025 09:01:37 +0000
Files and hashes: 1: RKq6Jd2UH9wWubKSgst7pZ7LyKU.roa (hash: ifDG8ANyaXOjVuCl1ow9SIV2BWxCkzstlJEhmLPckaQ=)
2: nv9H-JUh2bSSt9BCG8J2kevwbv0.crl (hash: eQuwHJy3+j9YyKg7bna+FG1CFl/XU6vK2HB7vfs+OnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nv9H-JUh2bSSt9BCG8J2kevwbv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:34:27:6e:50:06:b2:3e:00:1c:bc:cf:2d:b2:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eff47f89521d9b492b7d0421bc27691ebf06efd
Validity
Not Before: Nov 11 09:01:37 2025 GMT
Not After : Nov 12 09:01:37 2025 GMT
Subject: CN=4c238e823f29a86b5e2887afedf7267268c624b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:66:56:c5:67:27:8b:04:8d:d4:6c:40:b3:c4:
d8:4d:a1:1d:0c:64:c1:61:a3:58:82:39:d5:3c:f5:
77:39:e8:15:07:1a:99:41:ea:3b:9a:88:31:a2:22:
02:26:af:45:ad:e3:43:dc:b0:5c:4a:77:3a:d3:de:
d1:68:b7:e5:ce:33:e0:7a:ba:cb:48:3d:8e:5f:62:
fa:ff:c1:1f:4b:27:6c:ea:2b:dd:a4:2d:52:9d:56:
6d:63:75:b7:fa:c4:65:2c:2c:3a:9c:1e:66:6c:72:
37:9c:ad:d7:eb:fb:7e:cf:5d:b3:18:44:65:06:17:
c3:b3:e7:06:81:e8:3b:92:36:64:ac:8b:65:50:2e:
76:0d:31:e4:ba:c9:1e:d3:81:9d:23:21:48:46:ff:
1d:ee:02:64:f2:06:cc:52:dc:46:34:00:3a:a2:11:
98:a0:da:79:4e:8a:c9:47:97:29:48:4c:ef:f2:c2:
03:16:ce:f3:81:ca:c2:42:24:3b:69:e1:7e:b1:5a:
a2:53:b9:ac:dd:c3:a6:6e:42:bd:8b:16:b1:cd:3e:
9a:27:a1:af:2c:e1:97:d5:fb:01:e7:df:de:b2:e3:
66:b5:e6:1e:35:af:f7:c1:57:b4:0f:62:5e:85:fb:
b0:4c:87:b6:36:ba:2a:5a:03:db:83:91:b0:f4:f1:
24:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:23:8E:82:3F:29:A8:6B:5E:28:87:AF:ED:F7:26:72:68:C6:24:B6
X509v3 Authority Key Identifier:
keyid:9E:FF:47:F8:95:21:D9:B4:92:B7:D0:42:1B:C2:76:91:EB:F0:6E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nv9H-JUh2bSSt9BCG8J2kevwbv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:df:35:b1:32:58:17:c1:74:b3:25:ae:9d:a4:4b:9b:93:ab:
d3:02:4e:f4:f0:1d:60:85:5c:8a:1f:8e:f1:88:f1:7a:a3:42:
80:2b:4a:82:c5:40:3c:36:91:40:28:f4:b1:53:ab:ba:a3:3f:
bb:34:ce:e2:91:51:40:b2:44:95:40:0a:b6:4c:7e:25:e8:a5:
c6:db:9d:e8:b0:c2:97:dd:08:ad:c6:4e:9b:e6:9c:33:ae:f7:
3d:9e:9b:15:49:9e:8c:83:a6:4d:e0:eb:10:40:30:e0:a3:dc:
66:b6:e0:56:dc:35:8e:39:49:71:ad:38:72:51:f6:e2:4c:ea:
cb:0d:b7:e1:72:a5:61:00:7b:f5:c9:b5:30:86:39:5c:14:d7:
86:ec:b2:d9:f3:3d:09:c8:3a:f5:2f:6f:ba:9b:05:aa:58:29:
a2:ae:8a:12:2a:8a:ed:c6:29:9f:33:e6:14:7a:5f:57:53:78:
a4:54:da:13:d8:d3:16:b4:b4:49:5d:9a:86:7f:73:c0:1d:c0:
13:32:9b:2b:de:ac:0c:10:eb:05:c2:f6:f1:f8:a0:71:1f:8c:
53:46:e7:ee:5d:82:32:ea:8d:2a:2b:f5:15:7a:d6:70:c7:a9:
bd:1a:5c:0a:2e:c8:ec:71:d0:47:2d:d0:1f:9a:46:39:48:5d:
0e:14:f2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:34 2025 by rpki-client