Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
File: nsRI4bHg6-TpdrEg05j-dNXhNfg.mft (raw, json)
Hash identifier: Uc/lEJLSiUh6t583qCpBKDWe9bR+dCSDWCs7tYfXgcU=
Subject key identifier: B1:0A:B2:4D:C7:7E:E2:BE:F1:AB:1D:3E:CF:FD:A6:0C:1C:D1:E4:8C
Authority key identifier: 9E:C4:48:E1:B1:E0:EB:E4:E9:76:B1:20:D3:98:FE:74:D5:E1:35:F8
Certificate issuer: /CN=9ec448e1b1e0ebe4e976b120d398fe74d5e135f8
Certificate serial: 019A72CA9E3DD3E4B9FF0EC5E9954DF30549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 12:01:12 +0000
Manifest this update: Tue 11 Nov 2025 12:01:12 +0000
Manifest next update: Wed 12 Nov 2025 12:01:12 +0000
Files and hashes: 1: aCQlUufyFAXyfrSRh5UlYee4hhI.roa (hash: mJv4/wvWUFjjUO0qLpunwhk4Tn4azGG1QzZvm0z7rC8=)
2: nsRI4bHg6-TpdrEg05j-dNXhNfg.crl (hash: y3UKbOvhIpxG4Ym6AnXBrfS/VDZXwGli1Zvo9xnUQUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:9e:3d:d3:e4:b9:ff:0e:c5:e9:95:4d:f3:05:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ec448e1b1e0ebe4e976b120d398fe74d5e135f8
Validity
Not Before: Nov 11 12:01:12 2025 GMT
Not After : Nov 12 12:01:12 2025 GMT
Subject: CN=b10ab24dc77ee2bef1ab1d3ecffda60c1cd1e48c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:53:2e:c0:25:14:24:3a:f9:cd:49:af:5a:a7:
db:bc:5d:f4:5a:54:f2:65:b2:c1:30:b8:43:26:d2:
ef:71:3c:fe:da:91:ca:f8:2f:dd:f0:cf:30:7d:a1:
1d:46:8f:b5:56:df:d0:38:fa:a8:bd:e0:d2:ea:fe:
be:02:8d:c2:ae:06:d2:0f:43:80:29:19:de:e8:9c:
4e:43:c3:97:d5:29:92:12:6c:23:dc:87:b9:fd:a7:
22:da:7b:e9:4d:50:f9:80:f3:3d:89:fb:37:82:ad:
b0:a4:33:f0:8a:74:41:ca:2a:a7:d3:08:35:6d:f0:
3a:fe:b0:69:af:b9:7d:ad:54:a6:9b:27:b1:29:b6:
dd:13:93:0a:91:c5:31:a8:62:99:f3:1a:cd:c7:6a:
7c:cc:64:d1:a2:81:df:da:28:bc:fc:5d:19:d2:cd:
e6:79:7d:43:33:1b:5d:18:b3:e7:ba:7d:40:87:50:
f8:cc:cd:74:47:21:a8:c3:f9:e3:4c:1d:c1:1c:b8:
42:ac:8b:75:5a:da:d6:49:73:e5:16:9e:a6:fd:dd:
c7:c1:3a:50:c8:5d:ad:17:ce:6e:1f:d8:5a:72:6a:
da:11:b8:b1:39:f8:7a:7e:ae:b9:d7:3b:13:35:1a:
22:3e:4f:a7:d1:10:11:e5:76:81:b9:d8:35:3d:03:
cf:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0A:B2:4D:C7:7E:E2:BE:F1:AB:1D:3E:CF:FD:A6:0C:1C:D1:E4:8C
X509v3 Authority Key Identifier:
keyid:9E:C4:48:E1:B1:E0:EB:E4:E9:76:B1:20:D3:98:FE:74:D5:E1:35:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:66:0e:bc:bc:34:a2:5d:2e:a0:3e:a1:f2:54:07:a5:52:09:
21:6f:7c:b0:72:59:b2:31:2c:53:54:01:18:3b:32:76:51:6d:
db:9b:c4:4d:38:01:7e:1b:fd:56:a3:90:e1:25:d4:de:65:db:
ec:bc:d7:33:14:9a:7d:4e:cd:be:59:e5:0c:af:22:ef:79:d3:
d5:74:0b:aa:f4:55:7e:b4:9c:d1:b1:61:07:17:a5:30:3b:c4:
b0:29:8f:76:6e:d1:29:d9:4f:91:c3:3a:2b:f5:2e:93:ba:d2:
41:f4:02:33:61:a2:fc:0c:a0:93:ae:88:b0:39:89:b0:b9:4a:
50:72:de:13:8a:14:83:1d:9c:0b:c4:f0:78:4d:3e:e1:66:db:
42:4e:4a:3b:85:4f:c1:bf:af:6e:c4:95:0a:b5:62:45:ae:2b:
01:44:6e:b5:b1:a8:38:dc:7a:c6:d2:68:1c:66:b0:80:fb:6e:
04:00:b1:ea:69:b8:35:4a:4d:84:9c:52:ab:38:5b:67:92:3d:
64:3b:fa:ea:07:cc:ac:f0:49:1e:9d:9a:9a:33:74:c4:48:fd:
ae:0b:a4:78:04:a6:5b:f9:c8:96:55:5f:da:38:1e:b7:4d:a5:
59:b1:a3:46:6c:0a:9a:a3:66:db:83:0f:08:39:b1:4f:a8:b6:
1f:ef:f6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:07 2025 by rpki-client