Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.mft
File: nvtWQV815j-nQDpQH97druzqR1o.mft (raw, json)
Hash identifier: 9/VmwmKZtAG8B4XyZeHQkw+5mooZkMDMvuAiPf4VxyA=
Subject key identifier: D8:2C:5A:15:BE:DA:B9:36:8B:FF:EF:FB:63:FF:E9:4C:82:40:65:3E
Authority key identifier: 9E:FB:56:41:5F:35:E6:3F:A7:40:3A:50:1F:DE:DD:AE:EC:EA:47:5A
Certificate issuer: /CN=9efb56415f35e63fa7403a501fdeddaeecea475a
Certificate serial: 0199FC58CF0DF64DCCDAA20DCEBDBCBD9B3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvtWQV815j-nQDpQH97druzqR1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 12:01:42 +0000
Manifest this update: Sun 19 Oct 2025 12:01:42 +0000
Manifest next update: Mon 20 Oct 2025 12:01:42 +0000
Files and hashes: 1: SEfajqd6Fo8tBAWadiViUIYfxIc.roa (hash: buws3E1khkxa0hWtFXM/6/Y2Vl2k7b7xq83eMENRDLs=)
2: nvtWQV815j-nQDpQH97druzqR1o.crl (hash: /G0Eg8YznX2WIJJFB9Ej+IoMnOjwbE7t61Y5SN8TAkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/nvtWQV815j-nQDpQH97druzqR1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:cf:0d:f6:4d:cc:da:a2:0d:ce:bd:bc:bd:9b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9efb56415f35e63fa7403a501fdeddaeecea475a
Validity
Not Before: Oct 19 12:01:42 2025 GMT
Not After : Oct 20 12:01:42 2025 GMT
Subject: CN=d82c5a15bedab9368bffeffb63ffe94c8240653e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b3:0d:a7:00:07:c8:de:81:19:3e:fe:6d:38:
7c:e1:35:0b:25:50:a4:89:93:2f:67:7d:34:4d:a0:
97:d2:56:2f:fc:9d:07:d9:ae:d9:a8:a5:93:97:41:
fe:5b:ee:16:d2:2f:bb:40:80:f8:78:9f:de:f1:33:
5a:16:cc:91:73:21:fe:c5:d5:98:2e:99:98:d8:94:
48:be:7e:f1:45:89:1a:da:40:ef:aa:8f:23:bf:4d:
39:77:78:cb:8c:43:b4:60:00:2d:2f:d1:22:8c:b3:
50:c5:f9:cd:c8:2b:af:18:f2:cf:d3:77:07:cd:89:
c7:95:52:59:b2:1b:43:b2:cc:3f:c5:fa:8b:06:3d:
2e:f5:9a:61:ce:30:52:73:ad:ca:c7:c5:1c:73:ad:
fd:38:5e:68:23:9e:a4:06:86:43:63:a8:dd:f1:70:
2d:28:01:77:0d:b6:9f:d4:95:31:34:ee:b6:ae:79:
90:57:6f:e0:fe:bf:54:08:b3:c5:ae:df:2d:98:03:
cc:93:8c:f5:42:62:84:0a:ce:fb:9f:f8:68:63:0e:
9f:26:19:13:d5:e5:f9:22:02:95:44:48:49:22:3d:
63:cb:53:ee:10:f6:fa:4c:cd:97:28:65:d3:55:d0:
31:7e:26:36:cd:8c:2f:45:e6:96:58:14:b5:e6:55:
0e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2C:5A:15:BE:DA:B9:36:8B:FF:EF:FB:63:FF:E9:4C:82:40:65:3E
X509v3 Authority Key Identifier:
keyid:9E:FB:56:41:5F:35:E6:3F:A7:40:3A:50:1F:DE:DD:AE:EC:EA:47:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvtWQV815j-nQDpQH97druzqR1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:61:54:85:e8:b8:a2:cf:6d:6e:fb:ce:ad:ab:73:f8:ad:8e:
d8:3f:91:95:93:40:31:23:6a:e8:29:da:45:3a:25:4e:e4:17:
fa:6f:d9:76:92:5e:5c:cc:67:91:2e:d7:97:9f:36:7a:61:5d:
85:c8:07:3e:c5:a9:2b:39:20:4f:e5:32:40:0d:82:89:9a:4f:
a6:a5:29:ce:87:8a:37:be:47:03:c0:b5:8a:29:f6:78:32:c3:
91:ca:4c:b6:c3:1e:18:7b:5b:16:35:80:2d:17:b7:d6:43:ee:
25:bf:1e:fc:90:9f:b9:dc:68:d7:7c:54:16:f6:51:8b:d0:bd:
14:eb:10:db:cc:ce:f0:db:48:30:35:28:eb:63:03:68:fc:06:
9c:51:9c:2c:f0:f4:c7:ae:32:9a:53:cc:61:dc:d0:e2:d3:24:
5e:ab:c1:2d:bd:c2:7a:ad:a5:a6:cd:4c:fe:ea:15:47:03:9d:
47:ca:97:06:d1:6a:81:63:ff:05:b3:5e:8f:ee:26:ba:e1:7b:
1a:dc:f7:3f:f1:5e:26:42:5a:46:94:e8:28:9e:46:f2:61:6e:
c2:ac:9b:25:6f:21:22:3a:b6:7a:22:ee:c2:7e:3f:3f:62:c5:
d8:e3:34:99:6a:5e:67:86:ab:44:6d:d7:71:f0:08:db:f3:a0:
09:c7:fd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:29 2025 by rpki-client