Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
File: NS-JGea8HvVmNIkBj8h1vjTA8kw.mft (raw, json)
Hash identifier: B+38dflQY/1+EezefG01eGT+nfVbFTpVaaMC9VWkhMA=
Subject key identifier: 06:F9:12:8D:68:1E:86:42:8F:51:72:07:DB:34:2D:BD:42:DA:2C:E2
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 019A503E5D1CB635F09599BB8154212F7B30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
Manifest number: 1732
Signing time: Tue 04 Nov 2025 19:00:55 +0000
Manifest this update: Tue 04 Nov 2025 19:00:55 +0000
Manifest next update: Wed 05 Nov 2025 19:00:55 +0000
Files and hashes: 1: 5tPAApTwknAaRXxKmBtwLwGK11k.roa (hash: 8ijfuuyCQYG0KzVjWtjN0KlVGd8B1/5JOo3YUUGUm/k=)
2: LVx4HKgcWIAx396vyIJnNE4ePuI.roa (hash: rjwIawjDoeXdj1yVpjEk4qjdVOMdb4bDHb4QfVsqSaE=)
3: LfROe2I71eG6M7Z-gNeANYWPFpE.roa (hash: jYCJfZL3yCQ4hYWioDRR7adhtNmlY65zHqG2PPbV/Qo=)
4: NS-JGea8HvVmNIkBj8h1vjTA8kw.crl (hash: zBKuEjD3t1bE/M+BQp3BxVzHXH++ua+fuEVPF9WwJ1U=)
5: WB5IR-rncEh5erhRHuCyer1roLg.roa (hash: xTtXPbZY0LbMC6jqC5khGuSb0ZaN44bjPSvJlY54fv0=)
6: dkDLfL12Mvt9oOTN814F8r3xyp4.roa (hash: Bf4qm+dtST2tX+x1TcvddLF9nRprjThyue/B71J9XDM=)
7: zEolHRB2AMzAHPn0pcNPX5SKSz8.roa (hash: hfJMojoDujNrnnYpdExfaP44xHymzJk56kqZMc0LOZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:5d:1c:b6:35:f0:95:99:bb:81:54:21:2f:7b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Nov 4 19:00:55 2025 GMT
Not After : Nov 5 19:00:55 2025 GMT
Subject: CN=06f9128d681e86428f517207db342dbd42da2ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e0:36:bc:95:3a:e7:a6:12:97:43:b9:f2:a4:
74:81:9a:6c:7d:88:b7:f2:22:1a:a1:5f:58:a6:d7:
96:cb:b6:a4:ad:76:bb:68:e8:15:5c:d3:72:fc:15:
b5:3c:9d:58:31:74:d9:3f:0e:98:bb:1d:a1:e8:4e:
3e:21:8c:ff:05:47:47:1e:4b:79:d1:6a:8f:45:04:
ff:c6:12:3b:ba:6f:c9:67:83:64:c0:69:4b:dc:98:
c3:db:ac:6c:60:74:81:39:bf:60:70:cc:b2:b7:b1:
e5:aa:80:5d:be:16:10:40:17:40:2a:8a:78:ab:b1:
8e:17:2d:ff:3c:cc:4c:c9:4f:6d:c4:f0:19:cb:b8:
f1:e1:45:73:36:29:ef:2c:08:59:86:58:ab:bc:82:
ee:03:73:b8:41:b9:a9:2c:29:40:dd:56:dc:8c:62:
3c:69:f4:05:9a:7f:9d:37:f9:2d:71:1e:d9:ae:f7:
b0:ff:c3:a5:0e:51:c0:53:f6:d9:af:51:80:2a:50:
3f:b6:e0:b5:72:8f:7f:3a:04:a8:81:4d:b9:da:c6:
d0:90:5d:6a:4f:43:f1:69:70:71:1f:d3:8b:f2:29:
ff:4d:09:e4:21:50:b7:ac:1b:7e:7e:67:d2:1a:98:
42:32:69:81:9a:1b:63:d5:9b:c9:5c:09:e0:58:59:
ab:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F9:12:8D:68:1E:86:42:8F:51:72:07:DB:34:2D:BD:42:DA:2C:E2
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:34:49:75:ea:25:0a:0e:f8:94:02:db:db:11:8a:28:e1:92:
e2:dc:49:6a:10:bc:0e:6e:f7:a0:a2:1f:13:58:6c:6a:a7:39:
ac:b5:16:b0:ac:09:d1:be:5a:03:aa:cf:83:4f:3c:f1:2b:a1:
bb:83:8a:72:83:37:19:78:cc:6f:80:5e:4e:ac:d6:2c:5e:6b:
47:49:a6:a7:76:94:2a:24:88:5f:1a:af:07:0a:b6:d5:7f:b8:
a6:5e:c2:be:5e:71:5e:58:94:b8:fc:d0:07:70:b5:93:b3:be:
64:cd:2f:ce:7e:19:a5:cb:0e:a4:29:21:2b:84:a1:2f:6e:b2:
33:d3:4d:68:5d:73:5a:8d:04:bd:21:c8:bb:79:55:40:36:ee:
e9:ac:8d:44:1b:ec:f8:05:50:2e:f6:06:6c:69:3e:34:2a:57:
cd:8c:cd:9c:c5:81:05:f8:9f:91:74:4d:ec:b2:ce:1b:9b:c8:
82:74:14:79:7b:07:7f:20:76:cf:ea:2e:37:95:2a:bf:0f:bc:
9b:18:ce:fb:54:d5:b0:a5:c6:19:19:b4:08:48:0e:b4:1c:9e:
54:5a:db:1b:91:89:fd:74:f8:3d:9d:ff:7e:68:1b:31:de:9c:
61:d0:88:56:65:62:ed:f0:3f:78:dd:f0:a4:94:b4:87:05:54:
cc:27:ca:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:34:16 2025 by rpki-client