Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
File: nSVxkIIfcFio6v1IGWl0NoutjxQ.mft (raw, json)
Hash identifier: Prodreypnlm+POSFkLp2hQtt/IRuglgeRDjlSdQ/rJI=
Subject key identifier: 43:B7:32:FB:E5:A4:8A:07:53:1F:BF:D9:36:B9:7B:79:58:DE:A3:85
Authority key identifier: 9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
Certificate issuer: /CN=9d257190821f7058a8eafd48196974368bad8f14
Certificate serial: 019A4EF599A884C6B76DAF6A1301BACEC79C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 13:01:49 +0000
Manifest this update: Tue 04 Nov 2025 13:01:49 +0000
Manifest next update: Wed 05 Nov 2025 13:01:49 +0000
Files and hashes: 1: S6yD0xSsAdYMuFY-SqJP0As2TGI.roa (hash: NWiZKpb2JP7oKryMsUVnNHlDjQunxGKrj2ir9mx8k8E=)
2: lkhGtmHtTBEdKgsUVjONXoB0iQc.roa (hash: 9yZ07+0QCixTukFaKD5cKhr7FU+NHBM/0FUydctI6gg=)
3: nSVxkIIfcFio6v1IGWl0NoutjxQ.crl (hash: 3k98dZUtKZOVWaqVxOzxKUkHWwgwFrQzgyu96b+gUFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:99:a8:84:c6:b7:6d:af:6a:13:01:ba:ce:c7:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d257190821f7058a8eafd48196974368bad8f14
Validity
Not Before: Nov 4 13:01:49 2025 GMT
Not After : Nov 5 13:01:49 2025 GMT
Subject: CN=43b732fbe5a48a07531fbfd936b97b7958dea385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:76:34:b4:b9:85:66:81:53:93:98:c8:de:29:
a9:62:f8:f5:6e:aa:b0:4d:62:05:47:67:1f:1e:8f:
0f:74:92:22:15:cc:e9:5c:ea:b3:c4:14:61:86:31:
75:8a:a5:25:82:c8:0c:4a:f7:f0:0b:bf:f3:ed:c5:
9f:56:71:2a:04:7d:03:1c:6f:9a:19:53:11:3f:1f:
17:a1:be:55:4f:2e:e2:55:cd:05:ca:f6:1b:48:bb:
f3:02:48:9f:f9:8d:02:f0:a7:87:3f:1e:3c:b0:64:
9b:6b:e2:3a:14:a6:f7:38:d0:90:04:ce:c8:78:fb:
81:53:0c:0a:b9:99:95:50:67:0a:dd:62:60:9f:6a:
e4:58:ef:93:34:3a:ac:a8:24:63:0e:76:4e:e4:c4:
6e:19:cb:b7:c4:80:f6:da:13:6a:d5:df:ac:3c:99:
49:f8:7b:dc:37:1e:a7:89:0b:70:3a:9e:25:12:c5:
e1:b2:4e:90:0f:6f:63:0d:5b:99:12:8e:8b:5c:e8:
de:b3:f5:f8:a8:15:2e:86:cf:a0:d0:d9:fa:17:c5:
b0:dd:36:62:37:ff:d2:d3:1a:a5:3d:b6:c9:42:06:
8e:37:51:00:9f:34:f0:da:db:4d:48:be:f9:99:25:
ff:65:10:bc:b6:2b:fd:27:30:72:2a:ec:2d:a8:15:
14:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B7:32:FB:E5:A4:8A:07:53:1F:BF:D9:36:B9:7B:79:58:DE:A3:85
X509v3 Authority Key Identifier:
keyid:9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:74:71:94:2b:6b:23:1e:0d:19:a1:88:b5:67:8e:bd:49:c9:
06:0f:57:19:7c:1f:39:f6:a6:54:8d:89:b4:37:a0:e5:4c:a4:
6f:7e:d9:e9:a1:d9:20:d4:71:8f:f8:c7:c7:27:2a:a8:30:4f:
b0:e1:7b:82:49:b3:04:24:43:cb:6c:06:04:3a:8c:07:cb:c9:
b6:a6:7b:d5:df:e4:56:fa:d3:28:a2:b2:49:02:71:0e:70:d1:
98:57:4f:5f:af:28:c9:0a:1a:6b:82:4e:bf:ed:ad:7b:44:59:
ef:60:e9:91:64:75:a7:43:91:93:cf:8f:6d:fa:ec:90:20:e3:
dd:32:2d:f8:5b:ec:21:1e:4a:b2:bf:e2:7d:cd:8d:19:3c:73:
9b:2d:91:be:a3:65:4b:59:d8:24:19:90:30:99:22:83:17:82:
2b:fa:49:5b:71:92:80:c6:db:98:83:26:59:f0:d2:65:ae:a0:
07:b6:a9:2b:33:5a:e3:ee:31:11:2b:03:bf:d2:86:e5:08:16:
1e:53:38:f8:06:12:f0:32:18:38:b0:6f:fd:93:9b:88:d2:3c:
5f:34:9d:30:a8:1c:88:0a:24:e9:ca:85:c6:0b:53:01:66:73:
b5:8b:f5:41:86:14:33:6a:da:04:f5:a4:6c:d5:ab:78:48:76:
fa:51:b2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:27:37 2025 by rpki-client