Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
File: NS-JGea8HvVmNIkBj8h1vjTA8kw.mft (raw, json)
Hash identifier: TRq+HpeWAfOGsZ9IrrLWW/c2BhuL1WA2GQTQcXOO1GY=
Subject key identifier: 80:35:F2:E7:62:3B:C5:5A:12:41:C8:99:70:D9:FF:29:F9:76:78:C1
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 019A21E528B4D45DD3F7090D6913B9862105
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
Manifest number: 171A
Signing time: Sun 26 Oct 2025 19:00:57 +0000
Manifest this update: Sun 26 Oct 2025 19:00:57 +0000
Manifest next update: Mon 27 Oct 2025 19:00:57 +0000
Files and hashes: 1: 5tPAApTwknAaRXxKmBtwLwGK11k.roa (hash: 8ijfuuyCQYG0KzVjWtjN0KlVGd8B1/5JOo3YUUGUm/k=)
2: LVx4HKgcWIAx396vyIJnNE4ePuI.roa (hash: rjwIawjDoeXdj1yVpjEk4qjdVOMdb4bDHb4QfVsqSaE=)
3: LfROe2I71eG6M7Z-gNeANYWPFpE.roa (hash: jYCJfZL3yCQ4hYWioDRR7adhtNmlY65zHqG2PPbV/Qo=)
4: NS-JGea8HvVmNIkBj8h1vjTA8kw.crl (hash: 5dJ+pqT+37GjTyoUeVYMAG1GnsFthEBmqJi3qn3emGA=)
5: WB5IR-rncEh5erhRHuCyer1roLg.roa (hash: xTtXPbZY0LbMC6jqC5khGuSb0ZaN44bjPSvJlY54fv0=)
6: dkDLfL12Mvt9oOTN814F8r3xyp4.roa (hash: Bf4qm+dtST2tX+x1TcvddLF9nRprjThyue/B71J9XDM=)
7: zEolHRB2AMzAHPn0pcNPX5SKSz8.roa (hash: hfJMojoDujNrnnYpdExfaP44xHymzJk56kqZMc0LOZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e5:28:b4:d4:5d:d3:f7:09:0d:69:13:b9:86:21:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Oct 26 19:00:57 2025 GMT
Not After : Oct 27 19:00:57 2025 GMT
Subject: CN=8035f2e7623bc55a1241c89970d9ff29f97678c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3f:f8:bd:8f:d4:5e:df:7f:9e:b7:0a:01:02:
0c:95:52:41:29:24:bc:e1:2e:cc:fe:a0:c2:72:5a:
35:90:d3:b1:90:d0:95:35:6f:ed:ec:9f:a7:b7:bd:
ef:c7:ab:39:39:28:b4:b2:59:a9:16:65:ef:42:ad:
dc:0f:a1:70:09:c1:31:e3:f2:9a:eb:69:8b:45:5a:
d3:39:a9:82:99:fb:77:78:91:cf:e8:2b:3f:fb:78:
cf:ef:5f:ee:7b:ed:6a:0b:44:e4:e4:cb:96:c1:ea:
33:af:db:06:4d:1b:a0:51:ca:1f:5e:ad:f6:eb:c5:
d6:6e:30:a4:77:e3:6d:7a:be:0c:ab:d8:12:79:e4:
ef:dc:35:33:62:2e:b4:0e:1c:37:ad:3f:10:b5:d9:
3a:bd:a3:87:7a:25:1e:83:a4:59:e5:7b:7b:00:82:
0e:71:36:21:59:57:d2:a1:b8:3d:6b:fd:b2:aa:28:
5b:7a:90:bf:9e:bd:07:59:47:f1:07:e0:89:33:a6:
40:4d:3c:b9:ab:46:7e:5b:ff:2e:36:8d:de:7e:ba:
82:17:5a:ea:51:00:7e:1b:c1:1a:bd:ec:e0:a0:5e:
b3:19:a7:1d:8d:a3:94:a0:2f:be:b5:8e:5c:7f:62:
27:99:63:34:ef:8b:16:9b:53:45:3c:60:39:95:83:
65:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:35:F2:E7:62:3B:C5:5A:12:41:C8:99:70:D9:FF:29:F9:76:78:C1
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:11:84:e2:a0:f0:ad:81:9f:c0:ef:7a:05:3c:16:89:21:9a:
3e:cb:3e:ae:be:4e:91:bf:8d:54:51:98:12:7b:b8:fa:23:6e:
9c:cc:4b:35:74:b0:d1:03:aa:b6:2f:34:78:38:b9:fe:5d:44:
cb:3f:d3:5d:03:96:c9:3a:fb:ce:d7:45:65:92:2a:c3:27:a8:
f4:4b:ce:93:d2:09:ea:64:ff:10:2a:c9:29:da:4d:f3:1b:e9:
35:25:f0:81:93:76:f2:31:92:76:af:7c:2d:c4:93:44:00:b5:
2c:58:f1:94:1e:f3:ed:02:58:60:7a:01:93:f6:49:d6:3b:72:
e5:52:d2:52:83:e7:d6:e1:5b:7a:fb:b1:c0:16:58:5e:41:00:
3e:a2:bd:4a:ff:2a:ec:b3:3b:54:a1:1d:cb:83:b7:94:84:c0:
d0:c7:8a:11:9e:c1:a5:b5:83:5e:58:b7:22:17:fc:99:b4:e6:
f6:ed:db:2b:ec:89:81:ae:59:dd:4c:0c:4f:c8:2e:43:6c:24:
52:db:d9:3d:6a:10:02:e8:d5:58:34:2a:71:e5:47:4f:8a:1a:
37:35:73:7b:5a:a9:13:b7:ad:de:9e:eb:b6:5e:13:8c:9c:0a:
54:24:6f:3d:9a:f0:66:e2:0c:70:07:96:38:a1:28:05:05:63:
3e:e3:b2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:28:40 2025 by rpki-client