Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
File: nVE44frPe2XbtXX6fUckDCeLNN8.mft (raw, json)
Hash identifier: 7mOm/J07DgZAAN/i5W8BCIurz+POOCENpcGpptd3bfQ=
Subject key identifier: 3E:CD:EB:97:31:3F:E7:BD:E9:E5:B0:A9:38:EA:8A:11:AD:EE:01:0D
Authority key identifier: 9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
Certificate issuer: /CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Certificate serial: 0199FC58FBCE5F836A92AC3C6B1E265F1CF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
Manifest number: 16EF
Signing time: Sun 19 Oct 2025 12:01:54 +0000
Manifest this update: Sun 19 Oct 2025 12:01:54 +0000
Manifest next update: Mon 20 Oct 2025 12:01:54 +0000
Files and hashes: 1: EOilBiIenaox7njpqs3_DfcHwlA.roa (hash: fzNbr06IBLk41vJ4PfPSo6OIziKfU6CFjSqPnCza+iE=)
2: SrPm1i3skuiVEboXgAOiwvJ0e24.roa (hash: yv8h4FDHS+rMOcdFcyHu/1yEMbW/iUuOt5Oggkr9ddY=)
3: mpLcK6oOkOzJN_8yv56Qh9Pb3jU.roa (hash: xqGJM6N0Wj7tHelbHPs6OohD0rdA/bMhZJppwS9pXD8=)
4: nVE44frPe2XbtXX6fUckDCeLNN8.crl (hash: 0M701r7GA4qQDq38K3NtHJ1JVQDj1aVjcdpASxBtS4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:fb:ce:5f:83:6a:92:ac:3c:6b:1e:26:5f:1c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Validity
Not Before: Oct 19 12:01:54 2025 GMT
Not After : Oct 20 12:01:54 2025 GMT
Subject: CN=3ecdeb97313fe7bde9e5b0a938ea8a11adee010d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:31:3b:93:7e:50:7a:d7:9e:6e:15:58:97:94:
a9:bc:66:82:a5:9a:55:f7:77:21:f3:b0:64:55:b8:
0c:c7:6c:73:8c:7f:71:c8:fd:52:bf:82:1e:31:30:
31:f6:b7:50:64:1f:96:58:69:e5:01:06:d8:61:a8:
bc:31:c7:00:0e:9d:10:bb:50:58:c7:6a:1b:5c:64:
71:2f:74:15:84:c8:e9:47:8b:38:33:1f:b8:65:8a:
c2:a5:b2:90:64:db:53:90:5f:96:5c:e5:de:66:f1:
e0:32:3e:38:65:8f:a0:81:95:90:dd:7a:ef:e0:a5:
a3:50:60:4c:df:5e:12:31:b3:d7:6b:5c:53:30:7e:
c2:67:27:56:ff:ec:94:c1:0a:94:43:f5:ce:7b:50:
8b:b0:7f:99:ad:4b:c0:ce:00:40:f5:47:14:09:31:
e2:b9:bc:ce:c3:b9:d0:1b:51:af:d8:c2:f9:76:01:
f9:eb:33:f8:0b:ce:a2:d4:35:86:a9:c7:20:0f:d7:
33:0b:15:d8:83:ce:94:d6:53:f2:6f:e8:82:3d:75:
ea:4c:3e:f2:b4:e5:e8:1d:95:16:c4:34:62:b0:d1:
dd:5d:d9:3b:fd:49:a3:1a:45:d7:f1:d8:e0:03:31:
3b:2b:da:ee:0f:3c:c1:03:a9:0c:8f:b3:2d:01:d4:
78:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CD:EB:97:31:3F:E7:BD:E9:E5:B0:A9:38:EA:8A:11:AD:EE:01:0D
X509v3 Authority Key Identifier:
keyid:9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:61:5e:f6:0e:42:82:d2:11:7f:b6:97:ce:fb:09:e3:3d:2e:
ae:e0:79:9c:84:09:bd:3a:5b:fe:5c:10:dc:39:05:98:a7:bc:
15:53:c9:98:4e:12:49:d6:9e:4b:be:9f:59:05:ce:67:ef:a4:
d7:02:10:ae:43:3d:d2:d0:40:f4:08:aa:92:f9:cd:42:59:a0:
d8:93:a7:ee:00:6e:a9:bb:62:b9:e0:1a:0f:e6:c3:ec:c9:fc:
8a:f3:cd:d0:b3:d5:e4:ea:77:71:6f:8b:95:fe:c4:f0:7f:47:
b3:88:38:ac:aa:1a:67:4e:1b:63:24:dc:c2:35:69:97:2b:0f:
73:91:18:58:18:44:d4:84:b3:45:9d:f1:44:d1:ed:01:68:ed:
78:46:d1:98:77:a3:89:d1:09:99:19:bf:ba:f9:16:fc:31:c0:
a9:62:0a:e6:43:d4:c4:42:40:ea:f7:4b:d8:02:ef:6c:b1:1b:
b2:e3:4b:35:36:b5:1b:63:55:15:5b:80:13:a4:ee:40:23:02:
c1:db:35:88:98:c8:4a:4c:96:c8:fa:0a:a7:c4:e7:18:8d:d6:
23:1d:d1:40:48:08:60:7e:50:8c:99:f0:19:68:18:dc:fe:5f:
fc:58:50:a5:f7:10:3a:bb:98:e8:57:f9:6f:5a:d9:3d:5d:a8:
15:ff:1a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:13:54 2025 by rpki-client