Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
File: nxvZcy5s3W50lNeRh_yoVbUZmQk.mft (raw, json)
Hash identifier: W9t4tXrrojvU23TjlvtARuPv3xSvlMGBEM6SiD0YaxA=
Subject key identifier: 99:35:F3:2A:90:7A:86:FC:A1:A7:7E:B3:75:D8:32:5B:F9:A0:FD:3C
Authority key identifier: 9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09
Certificate issuer: /CN=9f1bd9732e6cdd6e7494d79187fca855b5199909
Certificate serial: 019A51BED307A89D0B4CCF343C6F01AF44A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
Manifest number: 148F
Signing time: Wed 05 Nov 2025 02:00:51 +0000
Manifest this update: Wed 05 Nov 2025 02:00:51 +0000
Manifest next update: Thu 06 Nov 2025 02:00:51 +0000
Files and hashes: 1: L2MFVzLu5kpVjnsb4Kb2Ip5hD4I.roa (hash: wDHsr026DvaBiTyi7BBF/QmvI/bBUdaI/D33HJF38Y8=)
2: _JE8lnLT-86sHVAHJKlkVaAyjr4.roa (hash: UompnxxivZ8Fg0ySIbxl1tWe4K+WK1YpWsyZpIJAPwU=)
3: nxvZcy5s3W50lNeRh_yoVbUZmQk.crl (hash: oG5zBftW6UHEm/4pp3bA31tfAIWHsVRuLC8UvG4lbt0=)
4: qdHDAHiWQsmCFoNetHDwXmdq01A.roa (hash: go8toSa0Pfxl9RGM5eMA7V4+YqEI5lyucr5i8lNbh0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:d3:07:a8:9d:0b:4c:cf:34:3c:6f:01:af:44:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1bd9732e6cdd6e7494d79187fca855b5199909
Validity
Not Before: Nov 5 02:00:51 2025 GMT
Not After : Nov 6 02:00:51 2025 GMT
Subject: CN=9935f32a907a86fca1a77eb375d8325bf9a0fd3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:46:13:ba:59:3e:8a:3c:15:96:a8:56:db:e5:
52:88:e3:ef:3c:ab:d3:3d:3c:ec:38:1b:66:5c:cf:
06:2d:59:95:41:24:5f:73:4d:2f:d0:0a:b5:27:5d:
9b:14:c1:38:1c:93:05:30:7a:31:0d:14:9f:b0:0d:
72:5e:03:ff:79:65:1e:44:bb:af:70:dd:0e:76:d2:
06:24:8f:90:50:d4:19:72:64:78:19:37:dd:22:56:
38:be:c7:3d:e4:45:3c:e5:12:e6:2c:de:e6:a0:f8:
17:12:33:7b:59:dc:28:69:ce:cf:43:0e:77:f0:0d:
8f:07:1b:6e:6a:a0:0f:ae:32:96:b7:3d:46:48:1e:
ff:3d:b4:ac:4e:7e:80:c9:1a:3e:6f:17:dd:33:b1:
c9:81:e3:6a:a6:e0:3f:e0:f4:91:0a:68:0b:69:92:
a0:82:c2:3d:a7:0e:d7:f7:b6:b2:f2:b7:70:0e:06:
af:b2:46:45:c2:40:7d:cf:bc:01:fe:87:4c:5f:06:
14:74:86:0c:1e:4b:00:11:f4:ea:8a:11:69:e6:59:
4d:4b:ca:1f:00:20:aa:4f:20:1b:e5:1c:41:c2:6d:
7d:8c:ab:e9:f7:a9:87:9d:29:1b:cd:ab:70:60:cb:
72:8e:dc:35:98:a7:64:b3:6a:1f:19:5c:c8:e8:af:
e4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:35:F3:2A:90:7A:86:FC:A1:A7:7E:B3:75:D8:32:5B:F9:A0:FD:3C
X509v3 Authority Key Identifier:
keyid:9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c9:7b:81:26:e0:4f:e0:b5:0c:b8:82:fe:a6:f1:53:05:9a:
30:8c:00:c9:61:8f:8b:f6:a5:0a:8a:75:50:ef:cb:c4:91:63:
82:2b:08:77:ef:f7:e3:a1:47:1f:1b:e7:af:a8:1b:27:9c:d5:
c4:cd:f6:66:ec:20:a3:49:0b:40:b1:56:d0:b1:36:f1:8d:4f:
1a:55:32:38:b1:9c:19:fa:a7:f3:9e:47:9b:f5:4e:9d:2b:c4:
83:21:94:34:a2:7a:71:45:1b:89:c1:2d:6c:d9:58:97:01:77:
40:ae:00:62:b4:4b:92:0d:2b:5a:9e:20:ed:8f:27:e5:b4:1a:
8b:9e:6c:ae:b3:b7:73:57:b7:25:66:60:6c:06:c3:a0:22:a2:
32:50:0c:2c:06:9a:a3:15:c3:ae:0d:b2:44:67:ca:ec:ed:18:
cc:ea:50:49:1e:6b:8b:97:63:f8:12:d3:e5:26:c4:d3:e0:b1:
fa:89:0e:dc:86:82:47:7b:02:e8:e3:ae:94:4b:78:46:88:b7:
a9:83:ef:3e:6a:df:c8:5b:69:d5:ad:d4:3e:94:fd:f4:54:ef:
75:48:33:32:c9:ae:bb:18:b3:43:02:63:b7:d8:75:83:da:1a:
39:e3:79:ff:6d:ca:e1:2b:94:e4:42:b0:2b:30:8c:56:a1:4a:
04:5a:cc:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:54:48 2025 by rpki-client