Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
File: nSZknk8seV_-VA-dl_JumcXF4_8.mft (raw, json)
Hash identifier: SAfKfR14BW7DAILNZwNNf25h3o0sPLgXDnG9Dzv3opQ=
Subject key identifier: BA:2D:43:77:A5:89:99:30:89:E9:7B:61:F5:57:FB:4D:41:8B:2B:8A
Authority key identifier: 9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
Certificate issuer: /CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Certificate serial: 019A4EF542EBFEE70A6BD940A7634ACD6006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 13:01:27 +0000
Manifest this update: Tue 04 Nov 2025 13:01:27 +0000
Manifest next update: Wed 05 Nov 2025 13:01:27 +0000
Files and hashes: 1: KCBbNGS1YVW1hBxpXGDK5vFmb2s.roa (hash: 5Zdj42abBdFlW3cL9DY3OZbKnuKmXjtJAYCIOqBuBo0=)
2: UHBBgUNLNn1iHI9e-EGjjOzBhFw.roa (hash: BSvm991wTIbEUV5S7qd3FSoLfpa8IYB6IeFe483AVIY=)
3: YulnYlbf3_p4_qdtilX3A7GCTS4.roa (hash: 9jhnLDTHr1+aTiwSRhcVHPAQnY8jnY4svd3BxfDOy3k=)
4: nSZknk8seV_-VA-dl_JumcXF4_8.crl (hash: 1W+0FAF0ZhnQouhbJyFnLVYQ9MXh8Y2GyMe+eFHEejc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:42:eb:fe:e7:0a:6b:d9:40:a7:63:4a:cd:60:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Validity
Not Before: Nov 4 13:01:27 2025 GMT
Not After : Nov 5 13:01:27 2025 GMT
Subject: CN=ba2d4377a589993089e97b61f557fb4d418b2b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0a:b7:86:a1:9e:51:69:7e:cf:c6:a4:53:20:
4b:c0:23:54:31:b2:e3:df:25:72:f4:58:8e:57:6b:
e4:49:e8:48:b2:65:3f:89:49:14:c0:28:7c:d9:68:
d0:e7:9e:80:0c:87:ce:ba:e6:2d:8d:f5:6e:69:c3:
47:fc:ad:c0:b3:d7:aa:c6:ee:2b:f5:cc:ec:74:00:
a3:eb:3a:4e:b0:17:93:b3:cb:51:da:15:5a:da:d9:
14:f7:81:51:4e:c8:a5:e4:82:40:cf:c2:f8:70:9a:
25:fc:73:e7:55:40:93:65:31:7c:1c:58:5c:11:4e:
d4:9d:b3:1e:3f:7a:80:8e:ef:d7:66:c5:84:56:fe:
5a:7d:a4:ce:68:7b:88:d1:f6:ea:2c:9c:aa:d5:76:
1d:d2:5d:48:09:d2:8a:6c:51:fb:fe:c2:33:e6:32:
67:ee:74:86:0d:cc:1e:81:c6:39:da:40:6b:6a:41:
c5:d2:3f:cd:87:9f:91:46:a8:25:fb:43:5c:ab:6f:
f3:87:43:8b:5d:98:49:dc:03:6c:f2:87:10:2f:9b:
3b:8b:09:a2:20:16:a5:0f:8f:87:cb:58:82:1e:ea:
5d:6a:51:b2:f5:9c:3c:66:64:10:47:30:25:9f:fb:
ff:52:04:45:d1:1c:ec:1e:75:7f:00:03:b2:82:9c:
e0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2D:43:77:A5:89:99:30:89:E9:7B:61:F5:57:FB:4D:41:8B:2B:8A
X509v3 Authority Key Identifier:
keyid:9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:7f:3a:1c:de:a9:2c:c7:48:7e:cb:ae:59:8e:21:d3:89:10:
84:5e:a5:bf:82:b2:e1:72:13:92:df:da:db:4b:d6:bd:09:5b:
07:db:94:86:de:9c:e7:b2:17:82:09:3d:a8:4a:92:63:02:b5:
61:10:53:eb:da:06:83:49:b1:6a:06:f4:49:f1:f0:38:bb:00:
62:a7:c0:2e:15:ef:bf:57:2f:46:b4:53:c7:8d:e2:2d:84:2d:
76:72:f4:da:a2:bf:5a:d2:26:32:46:c7:13:5d:47:16:36:bd:
4e:c9:b1:c5:74:05:14:97:8e:29:a0:30:96:f7:7d:29:37:fe:
a3:84:5f:c4:65:2a:0c:12:9e:c2:5b:07:a7:df:a0:88:a4:8b:
0c:19:42:c1:1b:de:38:37:14:26:b8:20:43:60:33:c1:0b:bb:
2c:12:88:77:1f:a4:0e:09:3b:ba:40:61:65:ff:60:a9:a3:fc:
a8:6f:41:41:f9:ea:42:fd:71:48:f9:71:5d:2e:44:94:65:c7:
fa:de:53:70:20:3e:63:1f:69:9b:a5:41:d5:9f:ce:57:dd:2a:
0d:09:1c:1f:e0:4a:f5:65:25:33:41:62:2a:36:62:30:b2:a5:
bb:c1:32:7c:69:e3:85:d3:49:52:8f:ce:6b:9c:a5:52:c3:8c:
d8:32:0b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:31:22 2025 by rpki-client