Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
File: nzEukpe8HSfr60dt6g7hXddWVC0.mft (raw, json)
Hash identifier: /FuKNtcO9Kdb1hMGw9swLlr7P7m77yF9spEUfa6xJEU=
Subject key identifier: C6:48:C4:97:E0:43:25:98:8A:6A:90:E4:72:3E:A9:5D:71:67:6B:A9
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 0199FFC87DD3356E0B229E579AF5E7AFA4F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
Manifest number: 0D7D
Signing time: Mon 20 Oct 2025 04:02:33 +0000
Manifest this update: Mon 20 Oct 2025 04:02:33 +0000
Manifest next update: Tue 21 Oct 2025 04:02:33 +0000
Files and hashes: 1: 1-YKY-kDb-ok-O2t52erxOSFI9tY.roa (hash: Puf+xKue+984oQxVfH82nttD3pZrp9rN15gRLEzYPtg=)
2: 9DNpUDfjfX1cw67GoTejssp0I60.roa (hash: waZpM47Y+Uz4d9MPb5IIUjKVJuGJ/1amyn5dhXRlaKQ=)
3: Aesp-0bkacoacCkCpfhQPmoA2Jo.roa (hash: auTmqPfhdn5WgGssEA4un4kBW/LnIC2gzs/3RcvN434=)
4: BuDcPMwCapskKDGJlWsZctPOBc4.roa (hash: 3bBve525vpAtWU3g8/6VOaPU/EQ0F7VvrXGpa6fOHFk=)
5: bO_WvrYP5ttqrPDJq5s463Nszpo.roa (hash: EspaZPCLRAen7G7qKwAXYq7KwKVTki6xdz4+i5S1a6Q=)
6: nVCJmhFMb83gvB2R2U-hSqvqOrY.roa (hash: /YERfaDChwnXHF/qpIBHQyOtHUuBLeX/WEtxA7mKmAY=)
7: nzEukpe8HSfr60dt6g7hXddWVC0.crl (hash: emJDEBSaATLKRnm/nHDf8/YeA/ifJqIcyQe29n/tBeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:7d:d3:35:6e:0b:22:9e:57:9a:f5:e7:af:a4:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Oct 20 04:02:33 2025 GMT
Not After : Oct 21 04:02:33 2025 GMT
Subject: CN=c648c497e04325988a6a90e4723ea95d71676ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7a:ef:d8:7c:21:7d:f8:cf:a9:1a:fb:d7:f3:
00:32:f3:9a:1e:7f:1d:70:e8:d6:4e:07:4f:e2:7f:
d9:59:1d:b1:5e:4c:35:12:54:65:b4:4e:8a:87:af:
a9:69:51:c6:f8:35:10:26:9b:ef:dd:ae:02:4b:2c:
52:28:97:d3:a4:4d:cf:e7:04:e5:8f:f7:2b:55:35:
e0:73:89:77:1c:de:f1:73:94:ec:28:6f:66:4e:2f:
0e:34:7f:82:94:d6:e0:7a:28:5b:db:4c:5b:b7:a0:
02:cd:86:73:65:b6:bf:32:1a:36:e9:89:29:db:1a:
28:d2:bf:52:ef:6d:9b:17:1e:66:83:58:4b:15:10:
06:8a:b0:05:c3:0e:7e:d9:46:89:57:f9:47:f4:08:
dd:f8:bc:33:5a:3d:69:00:ea:ee:5a:12:8b:f5:ed:
c1:8e:3b:79:33:6f:26:7b:1c:76:06:d7:44:e2:c7:
c6:2c:e2:a5:56:03:03:a3:bc:23:63:5d:4e:19:9d:
eb:09:98:8e:7b:42:e8:9b:61:49:da:88:90:32:21:
d0:80:71:ba:41:33:df:db:3a:07:14:89:32:f1:a0:
bf:a4:25:b9:b3:50:32:77:68:fc:73:73:94:42:a1:
5b:a2:db:a6:c6:a0:81:d4:26:de:23:3a:1c:3d:57:
d4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:48:C4:97:E0:43:25:98:8A:6A:90:E4:72:3E:A9:5D:71:67:6B:A9
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:9b:c6:bf:82:c1:38:fb:95:b8:7b:b0:f2:6a:6e:33:84:f8:
f3:ea:00:c7:d2:c8:67:a2:46:31:cf:9a:78:3b:7b:c2:f2:af:
2e:59:36:a2:39:31:f4:b7:b5:d0:b5:9d:2b:11:95:72:24:9d:
83:87:22:85:99:f4:aa:c4:ee:5b:7e:78:60:e3:ae:3b:03:ab:
51:75:cd:ec:a4:71:bf:85:fa:29:f4:3d:71:03:8b:6f:4f:94:
f7:9f:25:7a:ce:26:2f:7e:16:33:7e:a3:de:49:49:3d:7e:22:
c6:1e:93:fb:0c:7e:e8:b8:64:16:60:e1:29:ae:4c:0c:d8:bc:
bf:08:ac:ac:48:0a:f4:fd:dd:34:c8:f4:0e:30:1b:bf:21:41:
ad:a8:12:37:18:6f:8e:0d:4a:2a:f5:e4:20:31:22:d1:db:0d:
7a:f8:39:51:4a:8e:89:2e:72:a6:4d:32:b6:c6:89:2f:f7:2b:
09:0c:85:be:f7:d6:7c:81:da:71:e9:87:6d:78:73:7a:61:a6:
a2:88:08:e2:7e:87:60:27:54:fb:c6:e4:45:76:a5:b9:1a:84:
35:bd:d5:79:22:1e:77:71:76:b3:ed:fb:ec:2d:e2:06:ac:19:
fb:68:1e:ee:b3:6d:3e:ca:c2:3d:52:47:ef:b7:c1:9b:88:96:
2a:2c:3c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:30:04 2025 by rpki-client