Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
File: nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft (raw, json)
Hash identifier: XnBoKNynoMtuHqauJ+RSiiIgTUDGgNljttTZt5Ddc0M=
Subject key identifier: 77:D4:FF:C3:B8:BA:BD:C2:EB:F1:1D:48:36:55:FD:03:14:AE:33:CA
Authority key identifier: 9E:F1:98:71:B1:75:9F:32:37:01:2E:4B:6D:BB:6C:2F:D2:BE:8B:4B
Certificate issuer: /CN=9ef19871b1759f3237012e4b6dbb6c2fd2be8b4b
Certificate serial: 0199FBEC3984E4BE26D4C1EBD75A6BB7348A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
Manifest number: 1042
Signing time: Sun 19 Oct 2025 10:03:06 +0000
Manifest this update: Sun 19 Oct 2025 10:03:06 +0000
Manifest next update: Mon 20 Oct 2025 10:03:06 +0000
Files and hashes: 1: mcodiKTX1slSmfc3nZ7DZKGNYFk.roa (hash: 8YfkV+577aVFpH3FgiABnIRQh7w2LYtBhi55zdviFSU=)
2: nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl (hash: LzlsCoRBeOc060GXQSQ1jYXq6bbZNYAsRYPR/F03HNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:39:84:e4:be:26:d4:c1:eb:d7:5a:6b:b7:34:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ef19871b1759f3237012e4b6dbb6c2fd2be8b4b
Validity
Not Before: Oct 19 10:03:06 2025 GMT
Not After : Oct 20 10:03:06 2025 GMT
Subject: CN=77d4ffc3b8babdc2ebf11d483655fd0314ae33ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2b:d4:79:db:03:c4:36:60:5c:5a:49:88:77:
b1:0b:26:f5:4f:b8:29:f2:03:5c:67:c8:ea:e9:07:
48:ab:a6:dc:eb:26:91:86:99:c5:f3:46:b4:47:ab:
b4:58:71:e7:ca:01:96:97:ab:29:15:f1:c4:cd:36:
69:9f:d6:eb:3b:d1:1f:3a:07:e7:02:e8:b6:40:98:
9f:18:91:62:29:8b:7a:de:d7:98:76:49:61:20:8e:
26:80:2c:15:6b:6e:05:a2:73:e1:5f:b1:fb:a5:e9:
c8:06:b9:c1:14:80:4c:22:7c:a4:d2:a4:ac:cd:2a:
f2:9c:e9:52:a4:e7:33:c9:86:6d:69:ca:41:68:66:
05:66:37:3c:7e:3d:cd:c7:fb:ed:99:b4:6e:97:52:
03:ad:2e:19:30:e1:b8:e1:b9:b7:37:7a:45:1e:83:
06:6a:62:02:db:75:f3:4a:8c:c3:18:ed:d2:9b:6a:
5d:4e:ae:8d:14:2b:bc:5c:d7:eb:2f:62:c7:3b:5f:
e4:ba:bb:72:10:95:60:df:2c:f4:97:e8:e1:22:fa:
45:fb:cc:4a:36:21:b0:88:05:81:78:61:b6:01:c0:
bd:dd:a2:91:7a:9d:e4:54:b5:6a:53:89:bf:8c:18:
14:a5:30:ec:27:78:f4:8e:31:c6:c6:63:11:a2:42:
37:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D4:FF:C3:B8:BA:BD:C2:EB:F1:1D:48:36:55:FD:03:14:AE:33:CA
X509v3 Authority Key Identifier:
keyid:9E:F1:98:71:B1:75:9F:32:37:01:2E:4B:6D:BB:6C:2F:D2:BE:8B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvGYcbF1nzI3AS5LbbtsL9K-i0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a36dbb-6027-43c4-8194-4a0cb255d73a/1/nvGYcbF1nzI3AS5LbbtsL9K-i0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:df:78:63:95:3f:70:3d:a8:de:28:eb:21:42:77:86:61:6c:
ed:5a:dc:56:d8:c4:8a:7c:44:43:15:09:e3:09:37:c5:4d:50:
3b:e7:0d:a4:c9:67:dd:24:16:70:a2:38:9c:b8:4d:ca:99:37:
0c:2d:d5:07:d9:93:55:f5:fe:9e:4c:a8:a6:6d:b6:95:92:31:
3d:a5:38:45:48:14:be:8d:4d:17:24:3b:d7:0e:44:ab:82:d7:
15:51:de:0d:54:00:57:6e:eb:08:fc:67:1d:14:5e:5b:5c:8d:
e4:61:a8:7d:37:7d:2a:5d:05:0b:5b:fb:41:bc:d2:05:e7:22:
ac:c1:47:64:37:b5:fc:ec:3f:32:29:64:f9:69:bb:58:66:17:
0f:68:73:4c:f1:41:a2:a6:eb:dc:17:ef:81:62:87:7d:da:27:
2d:95:71:ba:5d:c2:aa:2e:54:b6:ed:f0:7b:9d:22:a6:7d:1f:
43:23:30:44:b6:f4:47:2f:a8:6f:da:68:f8:ee:f6:f1:d6:ea:
5f:43:82:60:b9:f3:2e:82:cf:35:b4:20:24:be:fe:0e:ed:4e:
c3:c0:5a:1f:f7:0e:33:90:8e:e6:bd:10:bf:c5:89:e0:dc:77:
b5:dd:c4:3c:79:6a:52:47:a2:a9:a2:1f:fc:40:4c:a8:ba:fd:
ea:53:73:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:48 2025 by rpki-client