Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
File: nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft (raw, json)
Hash identifier: cVidDzj8ROMQP8U7txAL8Fbz+nK3qMULtc5lwr7/pIA=
Subject key identifier: 98:42:E4:8D:DA:CE:F9:A4:BB:8D:30:BD:75:8F:A0:49:30:09:C5:34
Authority key identifier: 9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD
Certificate issuer: /CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd
Certificate serial: 019A4DAAA169B79F9135790D575A4B9EA2A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 07:00:19 +0000
Manifest this update: Tue 04 Nov 2025 07:00:19 +0000
Manifest next update: Wed 05 Nov 2025 07:00:19 +0000
Files and hashes: 1: 8vJ7ABj3xVyEwXenD9W0ncMrU1A.roa (hash: 5gnWjjNTmQRrWBLMz2vS6KZph20DEPN6rQfmfIVo1TE=)
2: 95tOWT20XUkoFBLGQGdVcwDGE0s.roa (hash: Qa6N16B2kLdBJuSQoLOln9hPwf+0/JSY++MAPTIofBc=)
3: D2QorAtAGpZ4DSilBt-gZlYU1WU.roa (hash: vpJGRRZzUNjxMRhoSrLA2Ov0y70mAO/SHEjk1etazfE=)
4: nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl (hash: bwjDFrsZZYoWrzmwP7HgOHtwNRNBQBm5PgN/USguDtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:a1:69:b7:9f:91:35:79:0d:57:5a:4b:9e:a2:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd
Validity
Not Before: Nov 4 07:00:19 2025 GMT
Not After : Nov 5 07:00:19 2025 GMT
Subject: CN=9842e48ddacef9a4bb8d30bd758fa0493009c534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:bd:4c:de:d3:30:72:df:f3:aa:60:98:c5:dd:
92:de:80:cf:eb:72:c4:61:ae:20:5d:80:f3:b8:5d:
49:e3:74:1a:15:81:e6:56:9e:81:36:30:7e:0a:79:
58:76:8a:fd:54:f6:b4:6c:85:3c:40:c9:85:a8:2e:
08:a0:fb:73:a2:83:c8:89:59:39:79:10:84:d4:6d:
72:7e:eb:ba:46:3b:c5:0e:a3:dc:89:c2:48:59:75:
c8:79:aa:aa:e3:1d:00:32:86:84:a1:19:44:05:bf:
4e:dd:48:f6:c9:7c:e9:1b:47:6c:1f:b6:3b:42:64:
0a:00:71:60:7c:6d:f7:a5:05:cc:df:d5:ad:52:5e:
ed:1f:ab:55:06:ca:40:af:a6:b8:35:f2:cc:29:b6:
49:cc:d5:2c:84:03:dc:c1:fe:8c:cf:33:b7:4b:42:
88:90:89:bd:e4:13:c7:15:86:9c:69:05:f1:6a:87:
44:73:6d:32:6d:2a:bc:8d:b4:5d:7b:6e:52:d6:e4:
cf:c7:41:8a:12:0c:63:cb:01:50:0a:4f:30:0a:53:
4e:8c:4e:25:69:9c:0f:40:cc:1e:27:ef:1e:12:0e:
2e:8f:1c:76:52:98:85:f9:03:63:a5:e7:bf:c8:04:
1f:80:7e:86:fd:97:e0:a1:2d:f6:6b:75:c3:40:6f:
c4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:42:E4:8D:DA:CE:F9:A4:BB:8D:30:BD:75:8F:A0:49:30:09:C5:34
X509v3 Authority Key Identifier:
keyid:9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:8d:a9:48:ae:11:aa:26:ec:2c:cf:db:4f:eb:65:51:b9:d9:
0a:2a:24:c7:c1:30:da:95:86:bd:f8:ef:db:56:7d:29:29:d8:
8c:ac:07:73:2e:8d:74:ce:d1:3f:0d:0c:d7:d9:8b:b8:d7:64:
6d:1a:84:5e:aa:11:66:b4:ae:73:e4:26:e0:26:10:cf:6f:f3:
c2:e6:29:f9:0e:4a:59:63:2c:e5:49:df:fc:a0:7d:90:11:42:
90:8d:95:e3:df:c0:fd:19:2e:64:d0:db:4c:f9:05:a2:ac:f9:
0a:1e:3e:92:e2:10:77:4a:92:28:e8:33:78:2f:b6:52:5b:69:
d9:41:97:a6:b9:8b:44:e1:13:dd:c0:fd:3c:36:8f:f4:12:79:
9a:67:9d:3b:ee:2d:f5:0e:f6:b7:3d:eb:08:00:44:18:2b:7c:
2c:e9:73:2f:2e:7e:64:6c:0a:72:5f:a3:3c:33:cf:ea:b7:4d:
e4:7b:16:f0:b6:74:03:ca:9d:81:27:f0:57:22:70:a5:90:fa:
ff:7b:c4:30:a1:28:fe:6c:dc:fb:09:bf:09:d4:62:3b:4b:61:
8c:6c:2a:50:bc:75:21:6f:91:85:a7:82:02:e7:ed:8b:37:56:
fa:81:c7:83:d2:cc:01:57:f2:1c:04:cd:1a:9a:93:1d:e6:18:
39:04:57:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:17 2025 by rpki-client