Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.mft
File: nUkl6XatC_tz4JfaaRfoD1vObIw.mft (raw, json)
Hash identifier: epetVli8b9CuxIQq7AVqtMQl908/HxEgsAsmquouaWg=
Subject key identifier: 6D:87:B4:E7:80:56:EB:75:74:2D:EF:50:A0:CF:C6:78:E1:4F:E9:E4
Authority key identifier: 9D:49:25:E9:76:AD:0B:FB:73:E0:97:DA:69:17:E8:0F:5B:CE:6C:8C
Certificate issuer: /CN=9d4925e976ad0bfb73e097da6917e80f5bce6c8c
Certificate serial: 0198439A1BFB0CC4C069C9B132D8CD60492E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUkl6XatC_tz4JfaaRfoD1vObIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.mft
Manifest number: 105C
Signing time: Fri 25 Jul 2025 22:00:29 +0000
Manifest this update: Fri 25 Jul 2025 22:00:29 +0000
Manifest next update: Sat 26 Jul 2025 22:00:29 +0000
Files and hashes: 1: 7Wfm8N_BNNM1ZIAzk65u_y1CoxQ.roa (hash: vGKhwTsZ6bUD5wem1afZhHCNpuoU8y3whIP7i2K9fc8=)
2: nUkl6XatC_tz4JfaaRfoD1vObIw.crl (hash: wgqdU1+L/laGQ22mLfsmdz0pFhvhIe9rVIB5de+0IR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUkl6XatC_tz4JfaaRfoD1vObIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:9a:1b:fb:0c:c4:c0:69:c9:b1:32:d8:cd:60:49:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d4925e976ad0bfb73e097da6917e80f5bce6c8c
Validity
Not Before: Jul 25 22:00:29 2025 GMT
Not After : Jul 26 22:00:29 2025 GMT
Subject: CN=6d87b4e78056eb75742def50a0cfc678e14fe9e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:06:f2:0b:b3:37:a6:9b:4f:bd:5e:66:9f:15:
1a:78:2b:37:df:06:eb:c5:87:84:fc:d1:b0:a9:cd:
8b:6d:7f:63:52:e1:69:64:81:ee:e7:ec:9b:88:e1:
a7:2c:15:38:f9:ec:53:59:43:cf:71:ee:e9:04:99:
5c:4e:55:98:05:69:f5:4e:b2:f0:07:10:c3:0a:20:
d6:6c:9a:1b:64:f0:30:59:fb:79:0e:78:6d:8e:b4:
e2:85:a1:dc:02:b1:05:97:d8:63:99:a8:6c:6f:1b:
24:bd:03:70:98:98:e5:da:f4:93:90:21:e7:3b:38:
34:67:0b:ef:d9:e5:d9:38:85:30:b3:a5:09:ff:fa:
dd:69:2f:ff:4c:dd:74:92:dc:5f:df:27:74:51:93:
ba:d9:1b:d2:32:7f:b2:c8:ae:72:0e:b8:0f:65:34:
1c:47:57:19:5d:56:5f:2a:a9:34:fa:5d:fe:f8:6a:
25:fb:b5:bd:a6:81:21:d3:55:d9:f6:28:89:c5:8e:
6c:c0:7a:82:d2:e2:6f:5b:fd:ee:35:e4:32:4c:b2:
d8:c5:95:f1:63:60:ac:d0:89:71:98:d7:67:b7:a2:
03:f3:34:84:53:b8:4e:e8:e3:bf:70:a6:12:ad:31:
49:dd:13:5d:65:2a:2c:1c:13:9a:4d:b4:1e:96:63:
46:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:87:B4:E7:80:56:EB:75:74:2D:EF:50:A0:CF:C6:78:E1:4F:E9:E4
X509v3 Authority Key Identifier:
keyid:9D:49:25:E9:76:AD:0B:FB:73:E0:97:DA:69:17:E8:0F:5B:CE:6C:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUkl6XatC_tz4JfaaRfoD1vObIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:61:20:0f:e6:c6:91:0a:2a:d9:d2:de:5b:21:50:c8:d0:79:
7f:d4:21:de:81:5b:9a:f3:7c:b7:bb:90:f1:19:b3:fc:1c:b3:
68:64:46:c2:68:aa:3e:c2:5f:c5:bc:95:8d:b4:87:a3:ad:eb:
63:e6:24:d1:8f:5c:bd:8c:26:51:e5:4f:46:af:a3:dc:24:d6:
f0:9f:01:b9:95:fd:69:a1:49:7a:95:8b:b4:b7:f4:e1:0b:7e:
76:78:45:6b:a3:c2:39:58:be:4b:80:ad:e8:d6:fe:ae:1a:26:
f9:a8:8e:e6:b2:6d:0c:39:fa:11:14:2e:5d:02:e7:f1:fb:0f:
32:12:b8:a4:c7:31:8a:69:11:5f:81:38:74:49:f6:14:5a:e9:
02:df:db:1f:95:d9:71:69:21:c7:03:d2:84:a3:9f:d0:47:ed:
dc:ea:7c:b1:66:3f:e0:0a:01:d0:7b:de:0b:8b:8e:f2:0c:51:
7c:e8:84:84:48:7d:fc:2f:d5:bb:00:af:c1:43:97:22:ea:55:
36:73:f2:55:d1:21:71:1a:1a:6a:90:7f:17:a0:d2:5d:ab:0a:
d7:51:16:9c:02:19:4a:e5:fc:6b:7e:8e:49:28:b6:9c:16:e1:
97:2b:77:38:b9:c7:33:24:ba:50:ac:f6:e5:24:bf:25:93:c6:
a8:a6:02:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:34:20 2025 by rpki-client