Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
File: NscJXgRZhgU7mz6HiQNnJoN90fU.mft (raw, json)
Hash identifier: HEAySENg+x9aZCvhVcz/naUJ9STvgunsSRDGtwElhjo=
Subject key identifier: 3A:BB:0C:B8:BC:67:E5:F6:9F:50:B6:BD:9C:11:DC:84:1F:2A:B1:27
Authority key identifier: 36:C7:09:5E:04:59:86:05:3B:9B:3E:87:89:03:67:26:83:7D:D1:F5
Certificate issuer: /CN=36c7095e045986053b9b3e8789036726837dd1f5
Certificate serial: 0199FC8F94469E905873E7DE653FC60FFE0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
Manifest number: 060B
Signing time: Sun 19 Oct 2025 13:01:32 +0000
Manifest this update: Sun 19 Oct 2025 13:01:32 +0000
Manifest next update: Mon 20 Oct 2025 13:01:32 +0000
Files and hashes: 1: 13YuQXcDJbnIYp9Q74L-JDcuLVM.roa (hash: xxqrr3XwSKukvs1NGhAPXhNBgDJT5zDVkc5duMlGjfY=)
2: NscJXgRZhgU7mz6HiQNnJoN90fU.crl (hash: cvs5NJHcw/Kg9OSkYzwDSdaf28RqbjEIAcRAYkTScyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:94:46:9e:90:58:73:e7:de:65:3f:c6:0f:fe:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c7095e045986053b9b3e8789036726837dd1f5
Validity
Not Before: Oct 19 13:01:32 2025 GMT
Not After : Oct 20 13:01:32 2025 GMT
Subject: CN=3abb0cb8bc67e5f69f50b6bd9c11dc841f2ab127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5b:24:ea:3c:34:4c:2e:4b:5a:64:9d:c7:8a:
4e:19:b9:98:25:3a:cd:a8:92:18:af:d9:00:3e:a7:
66:7b:cc:8a:13:5c:c6:cc:fb:ee:65:44:75:82:42:
6f:a0:d7:d2:aa:7a:92:9e:8b:c1:f1:e6:d3:03:c0:
06:04:b4:9f:78:76:d2:2c:39:8f:44:4d:e1:be:84:
cd:61:05:02:75:04:bb:14:1b:73:b3:f2:dd:6d:62:
a3:72:8c:61:05:2c:ff:6a:48:ab:03:14:94:d9:23:
d4:8c:0e:0b:69:7b:70:14:67:19:68:52:68:44:12:
37:11:23:ab:27:ca:ed:43:75:05:f3:f6:cc:16:5f:
23:aa:cf:57:6d:3e:dc:e3:a8:0e:54:18:96:fd:64:
cf:f8:e1:27:ed:69:99:36:ff:b2:91:af:67:22:c4:
df:ba:71:81:31:25:65:a7:6e:46:44:ec:36:b5:ff:
47:cd:2d:a6:c7:90:b6:fb:c1:01:a3:38:6e:6a:67:
17:35:6e:ce:a8:33:e9:c4:96:98:29:49:09:a7:1f:
e9:e0:04:7a:31:27:d4:b7:f0:eb:9f:f3:cb:be:0b:
e1:12:f1:ba:d7:67:6f:b4:68:38:11:e3:fc:01:d2:
ad:4f:39:19:03:21:76:bb:3b:50:2b:19:ea:92:9c:
a9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:BB:0C:B8:BC:67:E5:F6:9F:50:B6:BD:9C:11:DC:84:1F:2A:B1:27
X509v3 Authority Key Identifier:
keyid:36:C7:09:5E:04:59:86:05:3B:9B:3E:87:89:03:67:26:83:7D:D1:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:eb:f3:11:46:8d:55:bc:b2:31:bc:d0:43:d4:61:81:65:91:
38:93:11:5a:90:76:fa:8d:f8:68:ac:c4:71:36:e8:7a:83:33:
b5:3e:24:cd:9f:82:40:56:8c:31:30:4e:bc:db:7c:82:09:a1:
44:82:d4:ba:4d:84:4e:94:44:d4:a8:50:70:34:5c:7e:b4:51:
22:d2:81:c3:0f:bb:37:a2:35:2b:d2:23:0a:93:06:d4:33:8a:
64:52:7c:ce:2f:00:a9:39:2c:9b:f4:76:50:43:80:6d:fd:d5:
bd:2b:70:e5:27:90:9c:c6:7b:56:28:cb:ec:56:79:1c:26:9f:
52:bd:95:7e:4f:d2:31:cd:91:31:8c:59:33:12:4e:4f:1b:83:
15:f9:e5:e0:9a:c1:86:5e:ab:1e:5a:b1:ac:32:9c:a9:8a:71:
fd:2c:51:10:d2:05:70:b6:96:a0:90:0d:29:a5:38:2c:fa:74:
1a:ef:59:7e:67:6a:a9:56:eb:13:e2:67:ac:aa:ef:7a:f4:3f:
7b:73:c3:06:2a:91:69:70:c8:60:86:3d:bf:cf:e0:47:68:48:
d3:83:cf:56:87:8c:de:f2:1c:0b:6a:71:ed:af:4d:d8:f0:94:
a4:cb:a1:5a:aa:c2:b8:2c:a3:d0:0e:c4:39:f3:b6:e2:d8:6b:
f5:a7:7d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:24 2025 by rpki-client