Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
File: nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft (raw, json)
Hash identifier: PXaeyYcWf8uJOd+E0D43ZHey1gvIK0X15EQyUnuXAG4=
Subject key identifier: E8:BC:85:D1:B0:39:15:32:64:5D:A8:42:7B:F6:A1:BD:E7:FA:60:42
Authority key identifier: 9E:F2:7F:AE:15:30:EA:71:67:07:0C:F1:2C:48:68:11:D8:E0:BA:C5
Certificate issuer: /CN=9ef27fae1530ea7167070cf12c486811d8e0bac5
Certificate serial: 0199FC584967A6490F84FFDF174CECA9B183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
Manifest number: 0783
Signing time: Sun 19 Oct 2025 12:01:08 +0000
Manifest this update: Sun 19 Oct 2025 12:01:08 +0000
Manifest next update: Mon 20 Oct 2025 12:01:08 +0000
Files and hashes: 1: 3bmAz9vtv2JfaPatPhAR81BLdD4.roa (hash: pscVtMzNszIXtiYFoQgUwJA4nkNZDSRzSpGrx8TMuU8=)
2: nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl (hash: XLC9L1RBUwN50+FNygOdb6ZWE756viuvvdtZtRI/mS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:49:67:a6:49:0f:84:ff:df:17:4c:ec:a9:b1:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ef27fae1530ea7167070cf12c486811d8e0bac5
Validity
Not Before: Oct 19 12:01:08 2025 GMT
Not After : Oct 20 12:01:08 2025 GMT
Subject: CN=e8bc85d1b0391532645da8427bf6a1bde7fa6042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:27:c3:90:84:99:bb:d6:d9:72:61:a7:00:95:
ff:15:ca:7a:0f:92:7a:f6:5a:81:75:92:c6:2b:c3:
2c:28:e4:0f:ba:90:2d:89:65:37:8a:9d:ca:68:80:
30:c1:28:98:10:93:e6:6a:14:a3:00:83:42:bd:8e:
42:8f:ad:f0:e8:a4:e2:ad:af:73:58:3f:57:35:8f:
c7:63:1f:65:ea:a5:f3:f0:79:04:e7:d7:ff:47:1a:
b2:2d:70:56:3f:ad:c1:d9:a8:f7:f7:a6:b1:c4:0b:
c1:3a:5f:8c:3e:39:1a:ac:65:ee:12:95:70:a3:92:
d0:ed:21:fe:37:73:01:07:76:e8:39:85:0e:21:e9:
d2:d9:06:bd:21:47:34:35:42:6a:9b:95:be:a2:86:
dd:ed:b0:53:d5:5c:e8:d7:56:16:f3:38:1a:01:6e:
75:a5:0c:3b:40:df:6b:2e:b3:87:c0:af:f9:9c:8b:
75:d8:97:25:1b:33:7e:07:9f:bd:63:32:be:9a:f3:
b7:f3:2f:e8:c6:9f:0c:36:ad:1c:f7:c6:56:b1:b7:
23:34:6b:da:58:3e:25:31:cc:e4:03:fc:7f:99:ce:
59:90:ab:65:9b:4a:8c:aa:01:db:f6:b6:be:b4:fa:
aa:e8:33:80:05:c0:3f:c5:66:0e:fd:c3:3d:b1:91:
49:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BC:85:D1:B0:39:15:32:64:5D:A8:42:7B:F6:A1:BD:E7:FA:60:42
X509v3 Authority Key Identifier:
keyid:9E:F2:7F:AE:15:30:EA:71:67:07:0C:F1:2C:48:68:11:D8:E0:BA:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:31:2e:93:ad:05:d7:b9:68:7a:ee:8a:c8:60:ce:9b:b0:bc:
43:99:e8:29:39:97:7f:de:6b:40:82:ca:38:16:ea:44:f0:2e:
e1:6d:62:ba:de:7d:42:a9:ff:24:0c:ef:fe:02:b6:ef:81:ad:
7d:6d:b0:48:9d:8b:80:b8:33:c0:70:f4:08:83:90:5c:d5:75:
d9:23:a9:47:08:e6:d0:06:05:69:45:74:55:3e:34:2f:e1:18:
57:db:e1:21:73:e7:19:52:32:a3:e3:93:15:b6:1a:d6:65:63:
f3:55:2e:d1:30:11:34:72:d7:39:72:0a:e9:b5:f4:43:42:93:
12:bb:c9:4b:42:b9:70:8f:9e:ee:ea:6f:5f:59:77:18:b9:7c:
b5:04:0c:ec:af:f2:95:70:e0:c9:dc:d1:d2:44:ea:82:6e:4c:
34:da:13:6d:89:33:24:91:10:7a:29:63:a4:f5:b3:52:93:a7:
9b:d6:09:c8:f6:b9:da:e1:33:9d:7d:16:ca:2c:11:5a:a7:31:
f9:7a:66:77:0d:31:b8:49:e4:5b:ba:09:2b:57:d2:5e:00:2a:
e7:37:67:87:c1:9e:1a:bd:07:84:4f:59:ea:1f:f8:c9:46:17:
72:41:09:be:b8:ee:f9:1d:10:d3:8f:33:c3:3d:49:2b:44:e3:
a1:eb:80:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:17:57 2025 by rpki-client