Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
File: nv2KDm5t1Wpu-CieSxhPDKAMM90.mft (raw, json)
Hash identifier: bQzJ4oLDylsv8vdBerQDpI+BirkYRs9+hItPQIvdeTI=
Subject key identifier: F3:5D:B6:F7:33:2D:B0:E2:9D:6A:45:E7:02:08:3C:95:FE:DD:58:99
Authority key identifier: 9E:FD:8A:0E:6E:6D:D5:6A:6E:F8:28:9E:4B:18:4F:0C:A0:0C:33:DD
Certificate issuer: /CN=9efd8a0e6e6dd56a6ef8289e4b184f0ca00c33dd
Certificate serial: 019A51513B7783ECE498F45A20A8F81AF627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
Manifest number: 170D
Signing time: Wed 05 Nov 2025 00:01:09 +0000
Manifest this update: Wed 05 Nov 2025 00:01:09 +0000
Manifest next update: Thu 06 Nov 2025 00:01:09 +0000
Files and hashes: 1: QNOJOIm1SKvhgHP8ibivnBfVSQA.roa (hash: pi8uHE5UurLC5GTyPY+S33YCsYwTr9zqOvpf//OyfMo=)
2: nv2KDm5t1Wpu-CieSxhPDKAMM90.crl (hash: jx3sgvQwegyk/tYsRL1yzUUSTPKlHJs4EF2neY4+anE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:3b:77:83:ec:e4:98:f4:5a:20:a8:f8:1a:f6:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9efd8a0e6e6dd56a6ef8289e4b184f0ca00c33dd
Validity
Not Before: Nov 5 00:01:09 2025 GMT
Not After : Nov 6 00:01:09 2025 GMT
Subject: CN=f35db6f7332db0e29d6a45e702083c95fedd5899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:31:2e:df:3a:c2:cd:bd:d1:01:77:c8:86:a6:
5b:e4:e5:4d:12:97:d5:6c:6f:df:97:51:86:ec:41:
e9:df:0e:dd:d2:ec:c5:4f:09:de:e5:c1:ab:79:44:
72:a9:5c:89:ed:c4:48:ed:29:bd:d9:fc:63:64:67:
b8:19:e3:1e:d3:cb:4d:85:31:14:8e:8e:11:de:b0:
a4:37:d8:b3:45:18:20:73:65:e6:53:2e:f7:d6:66:
52:f4:55:82:9b:f0:98:6e:51:c3:f4:54:6c:0c:f0:
4a:e0:8c:f5:06:33:cb:33:57:6d:fc:6e:be:75:92:
72:8e:68:86:9d:c9:d2:5e:2f:7a:6b:27:14:67:5c:
5d:87:87:f2:17:7a:84:a2:26:de:f3:a4:68:20:cd:
72:7c:2e:5b:0d:eb:34:26:e5:56:f3:d0:df:13:d8:
e8:f1:e9:fc:f2:83:c6:a0:cc:46:ad:e9:e3:b0:5c:
84:9f:04:1b:1c:ed:49:61:12:e3:6f:9a:b3:cb:45:
f1:71:c8:7f:12:50:7c:e5:69:4d:f3:b0:2f:96:72:
4c:14:b1:92:63:5e:32:ac:b3:c7:f1:13:01:7b:0a:
d6:af:dc:fd:58:98:06:41:4b:0b:7c:3e:73:26:40:
60:6f:86:e3:70:91:7a:c4:f7:2d:fc:fb:a7:28:de:
ed:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5D:B6:F7:33:2D:B0:E2:9D:6A:45:E7:02:08:3C:95:FE:DD:58:99
X509v3 Authority Key Identifier:
keyid:9E:FD:8A:0E:6E:6D:D5:6A:6E:F8:28:9E:4B:18:4F:0C:A0:0C:33:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:87:85:44:a9:f0:8b:05:c0:e5:18:49:97:ab:c8:cd:3f:63:
f6:b7:7b:70:66:a5:f2:31:a3:9e:1b:b0:78:5d:3a:b7:6c:16:
c0:46:03:07:b9:d0:e1:1a:5c:0a:36:76:33:45:7f:7f:14:20:
33:b8:64:ce:95:3c:2a:70:27:0d:a7:07:5b:55:6d:53:03:65:
86:c4:5e:8c:55:51:1c:42:4e:05:e7:c7:c1:8f:33:49:51:6b:
cd:04:28:50:60:3f:50:a4:e5:79:21:30:6a:3c:9c:ef:bc:45:
55:43:4d:bb:45:e3:fe:e3:69:a5:96:0a:0a:2e:a9:18:75:84:
2a:30:c5:f0:d1:0b:e1:35:fa:66:61:0a:f6:eb:61:d4:0a:42:
00:b2:87:04:12:23:5c:c3:4e:51:ca:8e:a3:f8:54:15:70:1a:
56:63:7d:92:20:28:ab:4c:3d:64:07:e1:a3:7d:44:40:4d:88:
f3:47:2a:82:a4:ab:a7:dc:fa:7d:e5:5f:15:bb:67:55:af:c7:
28:bb:cd:0c:d7:8a:96:bd:83:5c:85:eb:75:92:22:76:de:41:
00:ac:a3:10:a3:8b:77:22:63:a8:16:b5:41:41:a8:15:1b:24:
25:32:69:cb:3b:38:ba:3c:99:28:63:51:e8:29:e2:a0:49:a4:
0b:6e:25:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:29:50 2025 by rpki-client