Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
File: nVE44frPe2XbtXX6fUckDCeLNN8.mft (raw, json)
Hash identifier: +wszO2/RFEcediDf+iScu1NqDym1LqDuciZycDJ7Ebw=
Subject key identifier: 1A:BB:48:5A:65:FC:C9:70:7D:6C:CF:82:94:F3:C5:88:27:38:7E:82
Authority key identifier: 9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
Certificate issuer: /CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Certificate serial: 019A515087994032E33C5DAC30B9F329248D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
Manifest number: 171B
Signing time: Wed 05 Nov 2025 00:00:23 +0000
Manifest this update: Wed 05 Nov 2025 00:00:23 +0000
Manifest next update: Thu 06 Nov 2025 00:00:23 +0000
Files and hashes: 1: EOilBiIenaox7njpqs3_DfcHwlA.roa (hash: fzNbr06IBLk41vJ4PfPSo6OIziKfU6CFjSqPnCza+iE=)
2: SrPm1i3skuiVEboXgAOiwvJ0e24.roa (hash: yv8h4FDHS+rMOcdFcyHu/1yEMbW/iUuOt5Oggkr9ddY=)
3: mpLcK6oOkOzJN_8yv56Qh9Pb3jU.roa (hash: xqGJM6N0Wj7tHelbHPs6OohD0rdA/bMhZJppwS9pXD8=)
4: nVE44frPe2XbtXX6fUckDCeLNN8.crl (hash: 6bQr232tlcmOJ8clClr3pQU6Vf05GbruSitakI9acJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:87:99:40:32:e3:3c:5d:ac:30:b9:f3:29:24:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Validity
Not Before: Nov 5 00:00:23 2025 GMT
Not After : Nov 6 00:00:23 2025 GMT
Subject: CN=1abb485a65fcc9707d6ccf8294f3c58827387e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c0:0e:f2:1b:1c:d9:d1:48:32:53:5f:c8:9e:
a4:78:7b:c4:88:fb:e1:5c:62:32:4d:60:32:bd:55:
7e:48:59:47:01:69:6e:9c:eb:21:6b:3b:ca:a9:93:
fe:c2:5a:bf:c2:e4:ff:44:35:45:ff:9c:2a:b6:29:
a6:16:08:c5:3e:45:99:92:4a:e0:06:be:21:2a:99:
d7:2d:ad:e3:b0:ba:c7:85:2b:a1:9d:17:ff:75:63:
c4:1a:b0:d6:84:5a:23:3c:5b:25:eb:a6:82:7d:c2:
92:a5:1b:5d:e7:b8:75:da:3b:66:22:fc:46:e4:31:
1f:a0:6f:c9:f6:f9:3b:59:f0:03:15:60:62:3c:61:
f6:8c:32:a1:07:3c:76:88:85:75:b4:93:a2:59:a4:
b6:9e:c4:9e:b4:c8:82:76:0e:b5:b0:a0:d5:17:6d:
10:c2:ed:21:cb:b3:d6:4f:c6:13:e8:a8:91:bb:53:
ec:b5:ae:01:76:db:e7:32:6e:9e:68:94:02:0e:bb:
c6:2b:a5:f3:e2:29:35:dc:a1:7d:32:cd:dd:4b:d0:
42:ce:50:76:cf:e4:68:72:47:2e:ff:ef:1a:e6:f1:
d7:14:53:ed:16:70:76:ff:43:d3:3e:37:76:ab:d5:
9d:f2:e8:ce:60:88:5c:3b:44:46:70:9b:79:91:aa:
d1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BB:48:5A:65:FC:C9:70:7D:6C:CF:82:94:F3:C5:88:27:38:7E:82
X509v3 Authority Key Identifier:
keyid:9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:18:c6:5a:6d:c2:4c:a9:00:70:4e:36:4c:4e:af:29:41:f4:
55:7b:e7:bd:a7:2b:ea:e7:df:38:ba:3f:02:b2:1f:34:bc:b7:
68:f3:ad:f7:82:a9:0b:b6:aa:02:c5:6c:60:a7:6f:c2:50:9f:
89:96:cc:54:65:0d:ee:1e:ef:49:9f:90:4e:2b:43:3d:f3:d5:
4a:f9:93:5d:8c:79:22:9f:3d:63:39:fe:0f:2a:44:21:3a:8a:
80:8c:4d:0f:50:92:10:18:68:87:a0:6d:45:5d:1b:6d:ef:e3:
ca:8c:c5:d7:10:3f:26:38:f6:6b:fb:f8:ec:dc:21:f4:20:86:
44:9d:1c:40:52:f1:60:b3:c6:b6:b9:ad:53:47:22:5a:11:50:
4e:cf:de:05:a6:2e:b5:a5:e7:0e:84:9e:b6:5e:73:00:bf:62:
ac:ad:8b:78:70:2f:e9:c8:4d:01:ee:d9:fe:ef:20:9c:fd:ca:
fd:94:8d:40:21:86:7a:bf:8a:a0:52:b3:23:1d:29:78:86:a9:
a0:c3:74:eb:f9:fd:a4:0d:92:56:56:38:34:ae:9a:cf:0e:db:
47:7c:6b:d6:1c:47:8f:31:e0:a3:4e:f4:5a:5e:2d:a0:51:7b:
65:22:09:6b:22:c0:9d:09:ce:a6:d8:31:32:4c:66:8c:1a:95:
6e:88:de:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:40:34 2025 by rpki-client