Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
File: nkJ08Tm9Zpqu93TWUDso2ZZje70.mft (raw, json)
Hash identifier: 5qYKbjfmcQEfH3R6IQ1sAUt1/O2IblbDElnEcWF0U10=
Subject key identifier: BA:56:99:3A:C7:43:74:73:25:80:7A:AE:C3:D3:CB:4A:20:93:0B:DB
Authority key identifier: 9E:42:74:F1:39:BD:66:9A:AE:F7:74:D6:50:3B:28:D9:96:63:7B:BD
Certificate issuer: /CN=9e4274f139bd669aaef774d6503b28d996637bbd
Certificate serial: 0199C64606568886CF6BD3F4C0810FB23CA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
Manifest number: 16C7
Signing time: Thu 09 Oct 2025 00:01:41 +0000
Manifest this update: Thu 09 Oct 2025 00:01:41 +0000
Manifest next update: Fri 10 Oct 2025 00:01:41 +0000
Files and hashes: 1: j4Iq2zixx3mYag3J5EZ9oVMKB3Q.roa (hash: /Gl9L/9VfxRkLzepVwRrDXgXI17GQGF8IKxBmlZI9QI=)
2: nkJ08Tm9Zpqu93TWUDso2ZZje70.crl (hash: NfN52driq/mejXHSusJ++Uo5Xf36+tCuMtmWbd0mm/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c6:46:06:56:88:86:cf:6b:d3:f4:c0:81:0f:b2:3c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4274f139bd669aaef774d6503b28d996637bbd
Validity
Not Before: Oct 9 00:01:41 2025 GMT
Not After : Oct 10 00:01:41 2025 GMT
Subject: CN=ba56993ac743747325807aaec3d3cb4a20930bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:57:fe:d8:e7:f9:2a:a6:94:e8:d3:29:73:bc:
b3:cb:92:0d:0d:7c:ae:a8:e0:55:a8:3a:55:43:c1:
6a:5d:7d:c9:e0:de:bb:e6:7b:fb:90:a0:cc:85:73:
c5:e5:c1:c3:e4:15:1c:ca:03:1b:94:84:0f:86:18:
9e:7f:c5:b6:00:7b:d0:15:26:e2:65:44:6c:60:e4:
a2:16:ad:da:8e:b4:02:ed:5d:88:70:69:cf:e3:7f:
c8:ba:bb:dd:b8:94:db:67:b6:3c:80:27:14:bd:97:
14:c9:ab:31:7d:80:6e:ea:f7:fd:fa:c2:7c:ce:75:
b2:94:8a:eb:46:e1:c7:66:83:59:64:d4:c8:74:94:
7b:db:ef:3f:28:28:36:c6:47:70:11:3b:e3:a8:a6:
bc:90:ed:be:3c:b8:56:cd:8b:f3:66:64:80:ee:29:
72:bd:af:38:f4:2a:72:c1:53:c1:e0:16:c9:72:c2:
ec:2e:ff:31:b3:bc:a4:3d:02:e7:1c:1a:90:57:0d:
a4:5a:32:f7:9c:af:a2:ac:55:c2:d7:c2:71:61:b4:
8c:a1:bb:f4:4e:ae:07:45:be:c4:7f:7b:00:d6:8f:
d9:c4:b2:98:da:ce:29:d8:8b:c3:f6:65:14:c2:12:
ae:94:05:6f:30:7c:a4:9a:8c:ae:e8:cc:c6:07:80:
1a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:56:99:3A:C7:43:74:73:25:80:7A:AE:C3:D3:CB:4A:20:93:0B:DB
X509v3 Authority Key Identifier:
keyid:9E:42:74:F1:39:BD:66:9A:AE:F7:74:D6:50:3B:28:D9:96:63:7B:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:20:59:32:d1:ec:3c:df:84:9d:3e:ca:f3:b8:51:34:8b:d3:
9b:a3:a0:a3:a1:82:0e:4b:5e:0f:04:21:02:b9:65:56:33:29:
76:ad:90:5b:9f:62:7a:a1:64:b5:52:1d:ba:94:c2:4c:0e:b8:
32:b5:8d:34:6c:48:de:a6:61:0a:16:5b:4f:c6:43:83:23:27:
f0:21:12:41:9f:ee:e9:e6:1e:72:bd:69:aa:d8:23:ef:b3:53:
f9:48:cb:97:7a:2b:ab:6e:01:8d:6e:de:25:00:61:a3:18:a8:
ce:19:18:b0:80:13:72:06:01:e4:4e:b1:3c:9b:b1:bd:90:d5:
eb:46:37:42:0e:b3:fc:2f:e9:6a:90:3f:d3:02:28:b1:29:48:
bf:07:a1:bf:aa:1d:1c:9f:fa:31:70:89:47:78:75:0f:03:66:
02:23:e7:c5:43:f6:33:9a:05:09:0d:bb:47:ab:da:6a:ca:53:
4e:a7:fd:55:4b:3b:f6:63:91:2e:f3:1a:02:16:60:58:f2:d7:
04:72:1f:2c:a0:b7:42:4e:65:d0:5f:bb:ba:79:65:37:9f:96:
2f:3a:3a:a7:ad:b0:11:c3:08:ce:9c:3e:de:ce:85:37:6f:51:
2d:fd:18:fc:77:7f:25:65:f4:a0:f8:7b:24:f3:3b:1c:bf:b6:
64:f8:d6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:55:10 2025 by rpki-client