
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft
File: nozX1qQQV1C_iXWn0LlnlMHv5iI.mft (raw, json)
Hash identifier: N+UrrTAiQCISPiHGGQH2FfNDD7lWzRT0XNzSGU5RD8M=
Subject key identifier: A5:05:C4:8D:73:C2:6B:3F:D7:FE:56:E2:66:C8:53:F4:C8:04:1B:72
Authority key identifier: 9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22
Certificate issuer: /CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622
Certificate serial: 019A4F61F221C2647DB226A50FC81F8ED912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft
Manifest number: 1050
Signing time: Tue 04 Nov 2025 15:00:09 +0000
Manifest this update: Tue 04 Nov 2025 15:00:09 +0000
Manifest next update: Wed 05 Nov 2025 15:00:09 +0000
Files and hashes: 1: YqcsRsNWUIAuSWFcG2LkwlaCRpU.roa (hash: JnjUw+oSYZ7zYyFgVViB1dXlZlt1DLN5IKIef4zg43A=)
2: _VhyulaRLMFmy7z_tqs-4L4cWXE.roa (hash: T2PRCy0LrQZ9+r9vTWIgoLmdpeQ4Ly8m5VmmmlXegNc=)
3: i4e34huH3g5sLDHdnkVm8dSr_sE.roa (hash: S/XQJg4OAS7AjMIGPw3l7NpJsp2Db+/obQ9OlOHPkv4=)
4: nozX1qQQV1C_iXWn0LlnlMHv5iI.crl (hash: 2R/FEZMBlGEusxunp/XOC8cl3py0eJe8dvRDEvGRv1I=)
5: qdNG49hIyDFFdCFIGbm6kEPFcbI.roa (hash: oUfCXgwymuAlhA935EnqN9SnikKCG4eVZ1qECppIrzI=)
6: tgtnwoMSuJpvUhZwhk9qFrx7hWQ.roa (hash: rFNa5r+Q4PL0nS416jQMSkeeFMd2IaIQ8Oy1MIANZ/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:f2:21:c2:64:7d:b2:26:a5:0f:c8:1f:8e:d9:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622
Validity
Not Before: Nov 4 15:00:09 2025 GMT
Not After : Nov 5 15:00:09 2025 GMT
Subject: CN=a505c48d73c26b3fd7fe56e266c853f4c8041b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1a:ac:a2:22:a0:a4:78:08:11:d5:35:18:60:
5b:c6:7c:fc:4d:e4:7d:a2:78:8b:b3:60:72:ce:2b:
47:4a:2f:1b:c5:29:97:34:92:f1:db:a4:f9:67:13:
81:b3:9f:d4:c4:a8:c0:58:ef:05:15:7d:34:77:46:
be:53:43:b9:2c:e0:a8:84:1c:6f:81:20:a0:78:34:
23:26:b7:d2:cc:df:ad:71:07:53:5a:0c:62:a8:60:
4b:01:e2:04:19:91:dc:14:41:8e:b1:a5:25:e9:2d:
93:06:3a:fe:62:86:de:8e:1b:6d:6f:f7:25:a9:9c:
1b:9c:36:10:8f:1f:a8:f0:8c:92:34:b8:88:d8:0b:
34:b3:4b:01:d9:ad:02:b3:bf:26:52:5f:b4:47:c6:
a6:98:34:01:b8:16:7f:67:35:35:04:20:4d:1a:fe:
4d:e7:74:e0:ad:77:34:61:e8:cd:5e:16:0d:83:b5:
c4:b6:7e:87:26:ba:48:91:b6:7b:96:11:2a:a9:05:
e0:f8:ad:c5:25:f7:b3:dd:9f:9a:33:fc:fb:18:5b:
72:38:e0:fb:ad:dd:f5:ef:64:f0:37:12:e1:66:ed:
15:0f:bb:2c:23:1c:80:15:9b:c3:e3:58:a7:3b:e8:
2b:4a:bb:d9:39:ff:54:2c:3a:ff:bc:0e:34:36:86:
c3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:05:C4:8D:73:C2:6B:3F:D7:FE:56:E2:66:C8:53:F4:C8:04:1B:72
X509v3 Authority Key Identifier:
keyid:9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:70:d2:01:f6:7d:a2:05:e9:d0:c2:84:d2:88:2d:a8:7f:27:
f5:6c:55:25:44:ea:78:26:bd:47:14:c2:87:9f:3b:49:bf:86:
ae:7c:b0:6f:ec:80:5b:1c:52:f7:03:d3:7d:b4:de:17:d6:21:
19:d9:ad:6c:11:b2:49:d2:87:09:46:fe:4a:ef:2d:f9:05:95:
bc:1d:6b:c4:cd:f5:10:d1:02:9d:b0:a7:3e:ad:20:7c:c8:d8:
0d:51:b5:27:95:87:5b:dc:36:ab:be:1a:b4:8b:fe:f0:e3:1e:
ed:b0:a8:8f:e2:06:6c:23:55:b0:d5:a0:ad:76:09:42:9c:8e:
c8:24:a8:86:f3:e2:b7:51:b2:c3:58:41:e9:d3:e5:1e:84:f5:
34:29:c7:67:2b:55:03:ad:b5:54:1b:c4:20:51:81:40:ad:bc:
5d:82:87:58:45:ac:f9:1f:bf:82:3b:7e:a9:de:3b:13:cd:1e:
87:86:41:09:75:1f:6a:4b:fb:c3:a5:08:37:41:67:e8:a1:e4:
c4:2f:7e:97:ba:6a:17:54:b5:b3:b2:16:08:63:13:a3:42:97:
9f:77:04:6e:71:bd:f1:50:46:1d:0c:dc:4d:d1:13:8d:c4:31:
91:21:78:9c:e0:99:f4:74:68:81:f1:dd:8a:70:46:6d:a8:d7:
97:db:08:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:28 2025 by rpki-client