Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
File: nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft (raw, json)
Hash identifier: RfszjV8PQ5nCmpWs8SCY1gMnUiqXDyLgJE7Xk7oq8eo=
Subject key identifier: E2:C3:07:B7:E7:A9:E5:9F:5D:5B:43:70:41:14:BB:41:E4:B6:70:9A
Authority key identifier: 9D:5A:17:27:1D:99:CF:15:B7:3E:CC:65:86:73:14:3C:28:E2:07:ED
Certificate issuer: /CN=9d5a17271d99cf15b73ecc658673143c28e207ed
Certificate serial: 019A4FD0599474ACC98D811C1892C6D252ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
Manifest number: 0313
Signing time: Tue 04 Nov 2025 17:00:45 +0000
Manifest this update: Tue 04 Nov 2025 17:00:45 +0000
Manifest next update: Wed 05 Nov 2025 17:00:45 +0000
Files and hashes: 1: MaMIYt08Tc0Dvw5CdW33aL4DYlE.roa (hash: 1yCq3fhsKBl5S18vVeljQHZ1fPWzPn1J4kkG7WWFZZc=)
2: jzoaRST14iVv_bSGhulsr5_HKjg.roa (hash: eDucU+vORvsLhsrcVm/yMIU0JKeTCq2CqXsu5GoLiJA=)
3: nVoXJx2ZzxW3PsxlhnMUPCjiB-0.crl (hash: g46ZY/3nA2xWHus8Hsiztrc7dE20lc32h0lN2Ofk5gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:59:94:74:ac:c9:8d:81:1c:18:92:c6:d2:52:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5a17271d99cf15b73ecc658673143c28e207ed
Validity
Not Before: Nov 4 17:00:45 2025 GMT
Not After : Nov 5 17:00:45 2025 GMT
Subject: CN=e2c307b7e7a9e59f5d5b43704114bb41e4b6709a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e5:08:bf:28:7f:b0:8d:d1:52:9e:8a:39:12:
b0:38:dc:b7:28:12:24:7c:88:a8:c0:9d:ab:cd:15:
d1:4a:c5:1f:31:0d:99:b3:1c:8e:36:cd:2f:50:51:
28:39:63:33:7d:b2:78:1e:36:c3:50:ba:28:13:08:
62:75:22:1e:68:d9:25:8d:22:35:ae:85:54:bc:26:
96:71:23:cc:a7:91:c6:14:2f:8f:6b:ca:52:9d:49:
c2:85:2b:5f:6a:e1:47:9b:29:65:a3:53:21:01:ea:
cb:63:6c:6c:5c:ca:64:6c:1d:a6:fd:47:f4:dd:43:
ef:dc:89:7e:48:d2:25:7c:7d:91:48:cd:64:e6:2e:
da:4f:ef:41:61:c7:33:f4:7c:4d:46:72:2b:72:8c:
39:11:5f:89:e5:f3:28:d0:48:70:1d:68:5c:2d:bc:
7d:51:77:06:6b:f6:cb:4a:9a:05:b0:2e:64:f2:2b:
62:a3:d1:52:41:50:6c:77:66:a0:af:4d:2e:be:19:
23:07:69:9c:a5:e6:9a:2e:52:a7:d2:c9:bd:2e:26:
b7:d3:df:f0:d2:0c:7d:0f:04:a6:d0:1a:a1:b3:26:
f2:2a:9c:45:a2:b3:8a:2d:d3:20:19:da:3d:11:59:
ab:cc:ab:c7:38:cd:3e:17:cb:32:19:84:20:bb:a4:
2c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C3:07:B7:E7:A9:E5:9F:5D:5B:43:70:41:14:BB:41:E4:B6:70:9A
X509v3 Authority Key Identifier:
keyid:9D:5A:17:27:1D:99:CF:15:B7:3E:CC:65:86:73:14:3C:28:E2:07:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ab:e2:fd:00:76:82:cf:c2:d7:bd:58:c9:09:aa:01:73:98:
18:57:d2:94:77:22:85:46:b7:f7:1b:70:ef:9a:c3:f5:fc:e2:
54:f0:88:cc:3c:98:42:b6:95:f3:c0:05:04:a3:c7:dd:a1:2e:
89:f8:91:ec:84:39:2d:dd:d7:62:4b:29:5d:ef:97:cc:b0:4f:
30:69:53:a8:33:74:d7:6d:5a:a9:76:7c:5d:44:3a:1a:a9:a2:
75:40:3d:0e:0a:2b:e5:20:bb:3f:a8:e3:65:eb:06:58:5b:4c:
7d:5f:85:88:d5:93:50:a7:9a:fd:ee:fe:0e:bc:30:83:eb:f2:
29:27:0c:f3:9e:f6:f6:1b:19:94:d7:e4:58:06:3d:be:1f:0f:
0a:88:bf:ab:0b:5f:1a:ec:37:79:f7:e4:19:bc:31:2a:b6:ea:
9c:1b:d5:a4:71:9a:b6:22:cc:c2:61:86:a2:05:19:62:df:a1:
8d:62:ae:f0:bc:93:29:2b:57:cc:81:3e:2a:75:17:7b:ce:52:
7e:53:a6:be:dc:8b:70:00:77:80:33:74:7e:83:53:f0:70:3b:
6b:03:81:96:19:2d:5a:41:36:8f:2a:bf:a9:b7:d4:ad:84:55:
c1:c7:46:33:89:ec:31:ab:99:a9:39:f8:28:3d:0a:99:24:91:
e2:d8:50:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:05:27 2025 by rpki-client