Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
File: nVK4OxL6igcTLMgIM6ED4J2L0E8.mft (raw, json)
Hash identifier: IgU/z6PlUgQ2BfWkLYYdz0t2uxWT5ojjwigLoZGYjpk=
Subject key identifier: 38:CA:08:FE:32:44:B4:5B:BA:B3:AC:78:97:39:A4:B6:D0:F9:07:78
Authority key identifier: 9D:52:B8:3B:12:FA:8A:07:13:2C:C8:08:33:A1:03:E0:9D:8B:D0:4F
Certificate issuer: /CN=9d52b83b12fa8a07132cc80833a103e09d8bd04f
Certificate serial: 019A4F62501195E5045C5DB20AD2E74A51E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
Manifest number: 0405
Signing time: Tue 04 Nov 2025 15:00:34 +0000
Manifest this update: Tue 04 Nov 2025 15:00:34 +0000
Manifest next update: Wed 05 Nov 2025 15:00:34 +0000
Files and hashes: 1: 38Ols_fwuqUro_09-_uv-_Ul2jA.roa (hash: QymLTZTAomDxu/BGko1S2mbZfpR+LRurtzVVTfHo8uA=)
2: nVK4OxL6igcTLMgIM6ED4J2L0E8.crl (hash: cnmoku2PArG0DIPlszub3w4VJzyi9EEmrUKiNkDPt5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:50:11:95:e5:04:5c:5d:b2:0a:d2:e7:4a:51:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d52b83b12fa8a07132cc80833a103e09d8bd04f
Validity
Not Before: Nov 4 15:00:34 2025 GMT
Not After : Nov 5 15:00:34 2025 GMT
Subject: CN=38ca08fe3244b45bbab3ac789739a4b6d0f90778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c1:dd:4d:2e:7b:1e:79:51:a5:2f:47:cb:19:
4f:5a:ee:00:b6:fa:77:ae:5d:a3:f4:80:47:c8:ea:
b3:07:27:dc:ad:9b:70:9d:d3:06:5f:b7:25:7c:19:
dd:99:b6:27:95:81:73:55:b2:6c:0e:fd:20:20:64:
2c:80:55:4e:44:1a:ef:96:0d:a6:c6:a6:96:92:c7:
7a:68:69:ba:87:27:4e:60:95:fa:c7:8c:ac:06:35:
31:48:8f:16:f7:66:8e:5c:94:a3:ec:44:ce:40:df:
3e:ad:af:af:53:ce:71:d5:28:7b:73:29:49:ee:3e:
be:c2:90:a0:06:0a:bd:92:cf:40:94:24:44:ae:fb:
59:8b:2e:59:ad:1f:70:21:1c:1d:0b:6c:55:65:fc:
74:db:7b:2b:44:db:2b:3f:26:ee:e1:2d:0f:51:41:
e2:f3:5c:de:7a:05:1e:34:93:af:40:c7:bb:ba:fc:
96:24:d2:19:2d:2c:be:7f:5f:0a:67:0d:5f:6f:e8:
41:4f:08:0d:99:ad:cb:16:a7:78:87:4e:ff:d3:aa:
b7:cf:fb:eb:0e:96:00:a2:ec:bc:46:90:d1:29:57:
ba:d3:f8:ea:37:e7:73:cc:48:9f:73:9c:af:0d:37:
eb:fa:44:e3:21:82:9f:c1:e8:ab:84:36:f7:33:6b:
a4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CA:08:FE:32:44:B4:5B:BA:B3:AC:78:97:39:A4:B6:D0:F9:07:78
X509v3 Authority Key Identifier:
keyid:9D:52:B8:3B:12:FA:8A:07:13:2C:C8:08:33:A1:03:E0:9D:8B:D0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVK4OxL6igcTLMgIM6ED4J2L0E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7ba232-8929-410d-bddd-e4b6a9df9a34/1/nVK4OxL6igcTLMgIM6ED4J2L0E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:9f:80:92:1a:dd:06:f3:df:04:2f:2b:99:24:e5:b3:e0:90:
65:c6:a1:0f:37:ec:be:f4:0e:be:7f:ef:da:07:02:8b:43:61:
f8:ba:d0:e4:9c:81:a1:c9:25:87:a2:1a:d1:e3:96:8d:92:34:
b4:95:15:44:ae:67:b8:62:5f:e9:79:80:90:f6:c9:6b:2f:59:
e0:76:b9:f5:68:70:2b:de:6e:cf:ed:9b:1e:59:f5:31:76:66:
d4:2d:a5:4a:50:69:ad:61:96:4f:5d:ec:52:13:d1:08:cc:bc:
41:ea:44:82:d9:a8:e3:ec:35:30:69:7e:fa:d7:d9:3d:76:80:
fe:93:6b:65:57:5c:13:97:d5:2c:1c:46:a0:aa:36:90:31:be:
b1:21:9e:d2:46:9b:2c:23:5a:54:4e:d5:6d:00:ba:8f:cf:e7:
ff:71:2a:ff:7a:3b:78:7b:be:16:51:84:45:78:65:08:0b:27:
78:3a:9f:11:00:c0:7b:8a:bc:7e:c1:0a:73:d3:a4:2f:c9:07:
2d:43:c7:e8:8f:07:81:e0:d7:66:eb:ba:63:fd:c9:14:3a:a6:
dd:78:94:e1:22:d3:01:73:d1:9f:22:92:ce:18:91:81:84:d8:
b2:ac:3a:17:7b:4e:a0:66:94:05:57:b9:5b:00:5e:24:c3:0c:
66:10:27:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:45:59 2025 by rpki-client