Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
File: nsRI4bHg6-TpdrEg05j-dNXhNfg.mft (raw, json)
Hash identifier: Vbx+CmEm1kCRcZmL/zugmNdCxePcRWoQQ+LySrXTy0M=
Subject key identifier: 9A:9E:61:E6:BD:78:AC:C2:74:7E:C7:9A:2D:10:3D:CC:CD:45:B8:5E
Authority key identifier: 9E:C4:48:E1:B1:E0:EB:E4:E9:76:B1:20:D3:98:FE:74:D5:E1:35:F8
Certificate issuer: /CN=9ec448e1b1e0ebe4e976b120d398fe74d5e135f8
Certificate serial: 019A500740EC0628D3BB8390CC9B42F0F050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 18:00:43 +0000
Manifest this update: Tue 04 Nov 2025 18:00:43 +0000
Manifest next update: Wed 05 Nov 2025 18:00:43 +0000
Files and hashes: 1: aCQlUufyFAXyfrSRh5UlYee4hhI.roa (hash: mJv4/wvWUFjjUO0qLpunwhk4Tn4azGG1QzZvm0z7rC8=)
2: nsRI4bHg6-TpdrEg05j-dNXhNfg.crl (hash: k758MAaWcGDKy9g+hOYLYW6uj1JYyOAtoPKPwHjvlEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:40:ec:06:28:d3:bb:83:90:cc:9b:42:f0:f0:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ec448e1b1e0ebe4e976b120d398fe74d5e135f8
Validity
Not Before: Nov 4 18:00:43 2025 GMT
Not After : Nov 5 18:00:43 2025 GMT
Subject: CN=9a9e61e6bd78acc2747ec79a2d103dcccd45b85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c9:6d:49:d0:6a:57:9f:71:50:c0:62:a5:b5:
e1:0b:03:6f:fb:98:02:7b:57:e1:2e:23:28:2c:da:
dd:78:a1:af:29:44:c5:c1:fe:c7:ca:a0:07:f0:09:
02:90:4f:c1:bb:2f:31:35:6f:2c:68:34:1c:04:69:
02:78:e1:bf:29:72:83:c9:34:e7:a2:48:70:42:62:
6a:6a:86:e5:b6:9e:a0:db:46:7d:b1:49:47:b7:32:
a1:5b:ce:dc:4f:03:e5:89:58:13:ed:2e:74:df:60:
7c:61:5a:5e:e4:0f:b4:55:c2:e9:d7:d5:45:21:2e:
a9:70:c2:8c:28:a1:88:6e:1d:1b:61:34:0d:e5:11:
db:fb:1f:78:97:d2:db:8f:d2:4e:0e:40:0f:60:72:
70:41:1e:07:5f:6c:14:e5:c1:be:d6:00:da:97:97:
b9:23:c2:fb:b1:b7:c0:c3:07:16:11:20:d1:d7:b0:
75:ce:2f:6e:bb:8d:4f:ee:06:cd:77:9a:20:47:4e:
fc:dd:bf:4c:26:58:cb:6c:22:95:58:13:de:83:97:
08:c4:6a:2f:ee:d5:2a:8b:7c:82:ca:2f:f7:23:96:
e1:b1:77:73:a3:f6:a8:30:8a:91:9a:33:95:73:4f:
b2:9a:d9:c5:76:2b:da:3b:66:46:f9:78:ac:5e:39:
fe:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9E:61:E6:BD:78:AC:C2:74:7E:C7:9A:2D:10:3D:CC:CD:45:B8:5E
X509v3 Authority Key Identifier:
keyid:9E:C4:48:E1:B1:E0:EB:E4:E9:76:B1:20:D3:98:FE:74:D5:E1:35:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:7d:f1:e1:2e:dc:ed:e6:f1:9a:ae:19:cc:9b:46:3e:40:6d:
e2:44:6b:90:09:9c:02:f2:4e:bb:fc:1a:50:94:20:86:f1:fc:
ca:15:4e:61:bf:6e:31:b6:04:a8:33:c0:0f:91:06:77:4a:1e:
93:b4:eb:f3:8d:83:ec:a6:9a:42:b7:9e:4f:a9:e2:ff:81:6f:
34:67:49:2e:c0:48:92:93:e0:bb:10:c7:3a:78:a3:0a:5d:59:
16:50:13:8e:2d:12:f3:08:f5:f0:ce:bd:69:6c:41:93:e7:7d:
8b:bc:0e:88:4f:e6:4f:30:ac:86:9b:8b:44:20:be:21:0e:6a:
fe:5d:15:ec:8d:8b:d2:66:30:05:c2:7a:ad:2b:c1:27:70:05:
e9:f7:96:4b:18:8e:2c:10:2e:6a:63:f6:5b:a6:94:a9:71:4d:
2a:c9:f5:8a:a9:80:29:c2:3d:d3:7d:f7:e6:a2:88:1c:fc:09:
46:3a:57:20:fd:5c:9f:06:f7:c5:90:b0:21:fa:b2:1f:84:c5:
f3:8a:71:7a:f4:41:1e:7c:8c:a9:e2:00:18:d0:0a:99:82:eb:
4f:0a:35:19:98:95:aa:0a:c1:51:ea:c9:b1:b0:38:fb:b7:28:
7b:7b:29:b6:af:2c:9b:f8:f6:6c:fe:40:c5:8b:df:ad:0a:a5:
9f:eb:b9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:41:40 2025 by rpki-client