Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
File: nSEPIlkJOq9FKFkipYjppmGrqfo.mft (raw, json)
Hash identifier: 3DGmv+KxbLYGCwrtgLIwtKwtBUm3GTC4Yh5Y5tI0J0k=
Subject key identifier: 98:50:C3:78:0E:84:26:0B:B3:3B:A2:C3:39:49:11:FD:D3:F3:88:90
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial: 019A4DE203ADF47DAF24A23709DE5E482D40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 08:00:48 +0000
Manifest this update: Tue 04 Nov 2025 08:00:48 +0000
Manifest next update: Wed 05 Nov 2025 08:00:48 +0000
Files and hashes: 1: 1W9zXul869RZscsvs7l5z3KjagI.roa (hash: EcxA9lzR2QkCH8ycmVrRxS2eQO5K8wXyLJAAeSf93c8=)
2: 3NRb9X1EKhOfFj7W1iZuXgUl__c.roa (hash: uat5CyrD021kDb22T/rEGSo6dcpWqYuVdcsqucMCWpU=)
3: AWMfWviNywiou7vcfcntqdl-hKo.roa (hash: a1Kd8HUSNMKFctyJDa6Wjjq1nah5PsW35BpRbQ1fKHY=)
4: D3EjnAQUfp_ywCnYpZvDSwPB4oc.roa (hash: FQWh81XYEPS1XmDh6Irb063J9GhFKg9biAGn32Ht5ds=)
5: LEzl9Qk7MYNbOqPpMlU1Ohh8PNA.roa (hash: UHP2n+X3SSu6vIRko8Q/5h8jCVqX5aAXirgs1zpJmP8=)
6: iT5JpsMQzoMkf4XPO_VvntnOa0w.roa (hash: VTobQYz4A3NOi/P7D09YiSGAxG3/JaBEWHaxO+F1IFg=)
7: nSEPIlkJOq9FKFkipYjppmGrqfo.crl (hash: /PGaeW7yv53kLo+1NmA65feP0z6YgKMRmC6jOiGz99c=)
8: wNwYQ8mCvTdznk-R9cIS2uXjf8g.roa (hash: K+cjCT9KGnhV7mdPVbb2wa5gxtLw72aubK2ACr6NLQ8=)
9: ykvaDunnWrInYG8JYdl8FUnhb8E.roa (hash: Ow01zePEbOrkUb4yW1o1FSsU+vG0+EPGDtmmuCC0/g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:03:ad:f4:7d:af:24:a2:37:09:de:5e:48:2d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
Validity
Not Before: Nov 4 08:00:48 2025 GMT
Not After : Nov 5 08:00:48 2025 GMT
Subject: CN=9850c3780e84260bb33ba2c3394911fdd3f38890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:dd:d4:6e:1a:36:7e:85:f8:49:46:97:8a:88:
4a:18:7f:f3:47:89:f4:d0:dc:bd:d1:c6:b0:11:e6:
43:92:15:60:22:f9:39:bf:17:4a:dc:fe:cd:42:10:
ec:fd:fd:10:c8:15:0a:a1:b6:9b:26:e3:94:ca:51:
81:d7:ab:b1:aa:be:18:17:68:b7:9b:df:5a:f2:d9:
99:7b:f5:86:dd:59:b8:8f:2e:16:42:42:89:10:50:
4b:e3:9c:02:3b:18:58:90:b7:53:f3:3c:8c:cf:fb:
ba:f9:56:9a:4f:33:9f:69:82:9b:53:a0:07:46:7a:
f9:df:33:6a:0b:5a:5f:66:69:bd:c5:f9:44:9b:6f:
76:d6:d2:6c:c2:9c:56:38:c2:2c:28:8e:a0:59:ba:
6e:34:fa:31:46:a1:0f:01:e1:8f:91:11:35:eb:8d:
9b:d7:49:2e:6d:f3:9c:9e:ea:52:75:26:23:8e:40:
b4:18:42:e9:88:b1:8b:68:ef:17:a5:04:b8:f1:c3:
13:ec:52:8f:44:1a:75:8e:1d:de:03:9e:56:94:1d:
74:68:41:5b:00:76:ca:38:e9:cb:04:e0:dc:a7:b4:
93:78:f0:c4:6f:09:69:f0:77:e0:ca:74:d0:f4:0f:
ce:d1:24:fd:5d:1a:59:46:b9:0c:26:f7:51:67:a1:
02:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:50:C3:78:0E:84:26:0B:B3:3B:A2:C3:39:49:11:FD:D3:F3:88:90
X509v3 Authority Key Identifier:
keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:d1:ef:7b:9e:5a:cd:80:af:d4:7d:04:a5:45:cc:99:58:24:
95:ef:22:af:21:0c:29:9f:cf:11:fa:e7:8c:7c:c0:39:d5:84:
6e:9f:f8:e1:24:83:38:fd:a2:1b:76:ee:0a:a5:41:09:e9:c0:
67:09:6c:55:81:8d:34:d3:5f:4d:76:b9:89:e7:4f:4e:f7:eb:
df:d6:d0:d0:11:b9:47:51:d6:66:e4:5d:da:2e:0a:7f:c1:97:
25:04:b1:74:24:37:e2:ac:11:7b:0d:c8:1a:6c:43:a0:43:82:
44:08:37:67:52:d4:a4:3d:05:5c:e5:ad:be:78:8b:22:b5:f5:
b8:3f:94:7d:ba:16:59:cc:4a:fc:ac:85:78:7b:75:b0:e9:41:
d7:47:9a:16:41:00:f1:ea:53:5e:a5:78:dd:ea:7d:7a:66:8a:
97:04:e4:1d:0b:c0:ea:f0:d1:d3:c5:76:9d:ee:47:c0:82:76:
37:df:6e:6e:7a:c1:e6:be:33:94:dd:2c:70:c0:60:aa:b8:86:
e3:ba:72:b4:a2:d3:fe:31:db:42:ea:cd:7a:c4:45:10:a9:20:
ca:b7:f4:8b:32:52:90:92:5a:8e:c2:7e:10:51:93:34:44:14:
15:96:f7:2c:9b:01:44:01:a5:d3:c3:a1:31:3e:64:29:61:99:
6a:a6:e4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:49 2025 by rpki-client