Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
File: nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft (raw, json)
Hash identifier: AKlbBbKwvQNiPBd6F2/JvK0jUZX4IIeavvsR6NGs8jM=
Subject key identifier: 44:6C:0B:74:D0:49:D1:95:BC:A6:DB:E0:34:5D:20:71:60:C3:3A:14
Authority key identifier: 9D:5A:17:27:1D:99:CF:15:B7:3E:CC:65:86:73:14:3C:28:E2:07:ED
Certificate issuer: /CN=9d5a17271d99cf15b73ecc658673143c28e207ed
Certificate serial: 0199FCC6768DCCEC961CF962CCF3B31A1ABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
Manifest number: 02E8
Signing time: Sun 19 Oct 2025 14:01:28 +0000
Manifest this update: Sun 19 Oct 2025 14:01:28 +0000
Manifest next update: Mon 20 Oct 2025 14:01:28 +0000
Files and hashes: 1: MaMIYt08Tc0Dvw5CdW33aL4DYlE.roa (hash: 1yCq3fhsKBl5S18vVeljQHZ1fPWzPn1J4kkG7WWFZZc=)
2: jzoaRST14iVv_bSGhulsr5_HKjg.roa (hash: eDucU+vORvsLhsrcVm/yMIU0JKeTCq2CqXsu5GoLiJA=)
3: nVoXJx2ZzxW3PsxlhnMUPCjiB-0.crl (hash: lTxN4ZZqg+NXjeqlhLNHbaDU9QbppWW73M3LpE08oEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:76:8d:cc:ec:96:1c:f9:62:cc:f3:b3:1a:1a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5a17271d99cf15b73ecc658673143c28e207ed
Validity
Not Before: Oct 19 14:01:28 2025 GMT
Not After : Oct 20 14:01:28 2025 GMT
Subject: CN=446c0b74d049d195bca6dbe0345d207160c33a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ed:d6:ae:97:1a:3d:66:d6:ba:bd:52:88:0d:
55:39:fb:89:ff:8e:0c:f9:33:ab:ba:f7:d1:41:0a:
a0:b5:bb:3e:2f:6d:da:61:90:0f:f6:19:40:15:a0:
4a:0f:f8:46:39:40:f3:6a:f7:04:94:00:0e:3c:63:
10:aa:5c:60:00:80:9e:98:6b:f8:2d:95:86:f6:ee:
7e:20:04:3b:85:bd:28:4c:b8:b7:8f:14:ba:85:84:
8b:81:1b:d4:8f:b0:ec:31:d6:6f:77:b4:31:46:2b:
a0:11:8f:cb:da:e4:86:9a:ed:ba:0f:1a:04:b1:0d:
0d:9b:b3:10:e8:0c:f6:07:70:8d:37:1d:21:97:68:
78:81:78:39:46:da:49:bb:0a:21:69:38:f3:44:3e:
5f:a5:c8:d7:d8:53:2a:f2:4b:4c:d1:e8:d6:84:9a:
07:08:cc:76:34:ca:29:10:95:1f:bd:46:69:51:dd:
1e:3b:5f:0c:ca:bb:8f:17:68:d7:bc:c2:86:da:86:
7d:1c:7d:6b:37:b2:51:fc:b3:9a:b5:fe:f1:52:7c:
d5:cf:ea:99:d5:ce:41:00:80:92:1b:33:da:b9:e1:
81:5f:55:34:48:e7:55:36:8c:f7:ee:18:6d:4f:38:
d7:71:a8:13:38:d3:db:9f:32:59:0b:80:88:bb:a2:
39:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6C:0B:74:D0:49:D1:95:BC:A6:DB:E0:34:5D:20:71:60:C3:3A:14
X509v3 Authority Key Identifier:
keyid:9D:5A:17:27:1D:99:CF:15:B7:3E:CC:65:86:73:14:3C:28:E2:07:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:47:f7:4f:58:0d:73:49:26:8c:5e:ff:79:52:e2:c6:91:56:
07:4e:b3:4c:70:5f:2f:a2:a9:bb:37:80:3e:f7:af:5b:c0:bc:
e8:68:7d:ae:b5:76:27:c1:70:96:ae:34:a6:d8:5e:c3:81:6c:
04:ae:01:27:49:11:8e:34:c4:4e:61:8f:4c:9e:db:11:46:5c:
06:93:c0:84:c3:67:04:72:4f:32:aa:0d:be:7a:22:48:66:42:
4d:e5:37:0f:d6:d6:22:1b:5a:72:7d:9f:a4:07:ac:79:2e:1b:
0f:39:28:2c:2a:2a:03:70:7a:91:fe:75:e9:db:1d:a3:a4:8f:
7a:30:51:9c:ca:82:c8:1c:ea:df:65:b2:12:9d:7c:8c:00:7e:
2c:ed:be:b9:f9:79:4b:f5:27:fc:5e:7c:1f:68:4a:4c:71:89:
15:01:55:a9:e2:a8:a3:46:0d:09:06:5c:0b:66:4f:96:18:af:
1a:ba:6c:c2:03:73:f6:8d:89:37:5b:e4:b7:47:6c:92:e3:fd:
e1:14:55:5d:4a:11:19:de:03:c1:6d:67:57:54:91:ea:27:71:
60:e3:76:20:dd:07:14:01:c6:3f:4a:f0:40:12:b5:ec:0f:52:
f6:d2:6e:ad:e5:cb:d7:3e:b6:3c:75:d0:7c:c7:ce:90:99:cc:
13:af:ab:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:34 2025 by rpki-client