Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.mft
File: nv9H-JUh2bSSt9BCG8J2kevwbv0.mft (raw, json)
Hash identifier: pLtwv1TwhUUJtVbIBvjuDwrT0+ARTctWF4yKZMqF8PI=
Subject key identifier: 57:36:DD:21:AE:32:B5:12:12:32:A7:44:01:4B:32:EC:98:DF:BB:B9
Authority key identifier: 9E:FF:47:F8:95:21:D9:B4:92:B7:D0:42:1B:C2:76:91:EB:F0:6E:FD
Certificate issuer: /CN=9eff47f89521d9b492b7d0421bc27691ebf06efd
Certificate serial: 019A5151535043C6985F9D8B12762F2705F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nv9H-JUh2bSSt9BCG8J2kevwbv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 00:01:15 +0000
Manifest this update: Wed 05 Nov 2025 00:01:15 +0000
Manifest next update: Thu 06 Nov 2025 00:01:15 +0000
Files and hashes: 1: RKq6Jd2UH9wWubKSgst7pZ7LyKU.roa (hash: ifDG8ANyaXOjVuCl1ow9SIV2BWxCkzstlJEhmLPckaQ=)
2: nv9H-JUh2bSSt9BCG8J2kevwbv0.crl (hash: AFqjVl9e86HJc9V/wnKXsz4JKA5WAkSMjHDLEZ1uKxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nv9H-JUh2bSSt9BCG8J2kevwbv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:53:50:43:c6:98:5f:9d:8b:12:76:2f:27:05:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eff47f89521d9b492b7d0421bc27691ebf06efd
Validity
Not Before: Nov 5 00:01:15 2025 GMT
Not After : Nov 6 00:01:15 2025 GMT
Subject: CN=5736dd21ae32b5121232a744014b32ec98dfbbb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d5:f0:ad:45:68:0f:f2:6a:a2:70:d9:7f:5f:
d8:79:79:d1:b4:35:fe:b2:93:2c:c5:f2:0d:d7:04:
95:7a:35:17:83:03:26:10:ea:6c:30:7c:2f:1a:58:
ae:9d:73:2f:00:6e:4f:29:de:f5:51:0e:3b:7b:f1:
67:5f:0b:32:09:cb:80:ec:73:33:5e:8c:f5:88:88:
4a:2d:71:0d:26:7b:fa:d3:6e:6f:fd:67:3f:c9:4f:
24:32:bc:5e:91:43:36:9c:2e:7a:20:3b:25:bf:4f:
6b:01:51:90:66:38:00:36:33:e1:c4:c6:b0:0d:ae:
ca:11:22:a7:37:58:c2:3f:47:4e:2f:5f:c3:4f:1b:
07:7c:a6:60:b9:01:b6:71:01:4c:81:a1:9a:63:8a:
34:8c:b5:65:f5:07:90:3a:bf:0f:ff:41:ff:3b:cf:
6f:1b:4a:06:01:44:cd:23:29:ea:b7:bf:55:12:15:
01:62:b4:57:94:17:de:d6:8f:14:79:9f:1b:87:e3:
2c:d4:d6:92:ee:03:35:5a:95:e1:bc:c9:72:83:8c:
6f:77:71:ee:da:fb:37:ef:20:84:ee:65:ea:59:9e:
23:51:f4:e4:65:a0:c0:4a:fb:ce:a1:3a:99:51:74:
7a:79:33:f8:a6:1b:04:44:49:e2:24:3f:66:e0:af:
7e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:36:DD:21:AE:32:B5:12:12:32:A7:44:01:4B:32:EC:98:DF:BB:B9
X509v3 Authority Key Identifier:
keyid:9E:FF:47:F8:95:21:D9:B4:92:B7:D0:42:1B:C2:76:91:EB:F0:6E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nv9H-JUh2bSSt9BCG8J2kevwbv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:fe:3b:c7:b7:38:16:8a:57:12:6d:18:b1:90:b8:61:2f:db:
7e:3b:ee:20:69:a9:83:71:1d:cb:42:a8:eb:8c:11:75:ae:b8:
9a:16:41:7b:6f:9c:92:50:07:cc:51:9e:02:b3:2d:c9:89:b2:
43:1c:41:d1:c1:7e:08:bd:67:51:e6:08:89:9f:75:2d:fe:87:
fb:44:44:81:31:e3:a6:aa:4f:f2:ee:61:e8:ad:2e:4a:dc:2c:
db:3d:88:50:a6:3c:21:f5:f7:3b:ec:80:a1:4f:61:d5:30:b5:
74:c9:22:9a:f7:fc:10:15:4e:b1:1f:8d:52:c1:80:b1:25:f7:
8a:95:76:fa:44:3c:0e:7a:1e:fb:a7:da:41:f1:dd:5a:2c:aa:
ce:3b:59:a5:3b:14:67:9e:79:3f:9b:c2:91:dd:86:50:d8:72:
de:7c:00:16:d6:c2:40:01:45:da:46:52:67:db:87:c0:50:e5:
46:6c:d9:d0:c4:dc:7c:7b:92:b0:be:f5:a1:8a:23:45:79:b9:
a2:f2:9b:be:64:6d:a9:ca:1a:4b:fb:57:b6:a9:a5:0c:32:b3:
e0:87:3c:77:ec:3e:b1:c4:13:94:df:27:f5:8e:4a:1c:d3:15:
13:e2:5f:32:66:a4:59:63:28:0b:59:62:9e:50:7f:c5:7a:22:
28:5d:2f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:19:29 2025 by rpki-client