Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
File: nkQennBa2j-cHoJ80nbb0JdIdgg.mft (raw, json)
Hash identifier: JWFpIng/h5ZZNrNfvYgVAIZpJvAmfE9FOLcY31ljdxQ=
Subject key identifier: 74:71:D1:8F:27:6F:BC:C6:5B:1B:98:9A:7B:64:55:9D:8D:97:10:E4
Authority key identifier: 9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
Certificate issuer: /CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Certificate serial: 019A32A187E61EECBDFBAF5C486C7ABB6AF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
Manifest number: 107D
Signing time: Thu 30 Oct 2025 01:00:38 +0000
Manifest this update: Thu 30 Oct 2025 01:00:38 +0000
Manifest next update: Fri 31 Oct 2025 01:00:38 +0000
Files and hashes: 1: 7ySzESdDI-Eg0Y6xfFTDZOEQmZk.roa (hash: pTSWdDbQ1VFptqQJI8HP8UxKCCjXnA4njHY5srW26VY=)
2: BJvFiCQhGiEcXR3ndqL7T5BbDaU.roa (hash: Z+0E4ULnb/cJktOfFSiZcNmisROmxseIx6dqsZlDt4s=)
3: DfN89u0ZvthZxMTnUcXpfMOlKTs.roa (hash: msvl5pQNrCHYRzIqm+ZhzceMHlWNrK7pVc4fvVU8Aig=)
4: nkQennBa2j-cHoJ80nbb0JdIdgg.crl (hash: SOWYxgBTvRTH3S6icXLF702Pd1h1kItBmMEO1I4mbr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 01:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:32:a1:87:e6:1e:ec:bd:fb:af:5c:48:6c:7a:bb:6a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Validity
Not Before: Oct 30 01:00:38 2025 GMT
Not After : Oct 31 01:00:38 2025 GMT
Subject: CN=7471d18f276fbcc65b1b989a7b64559d8d9710e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:54:35:4a:aa:61:6d:3c:22:b4:53:97:fc:90:
f0:e6:86:42:02:c3:77:d6:2f:ad:14:1c:38:18:b5:
aa:10:f7:aa:52:89:c2:28:92:3f:a6:2c:06:b0:f3:
5f:18:65:05:b4:a7:56:bf:56:ad:19:2a:8d:ea:89:
e3:9f:84:61:95:69:80:fb:6c:a5:1e:5a:df:a6:8d:
17:17:ab:f7:fd:0a:db:da:26:d3:dc:07:69:30:df:
06:42:92:ef:cb:75:0f:1c:d5:af:85:d8:90:cb:ab:
91:19:31:e9:05:74:2f:eb:6f:e7:e2:7b:1f:0e:02:
82:a8:f8:00:14:84:09:f0:65:1c:9b:93:a2:b2:fc:
67:d7:79:85:bb:c7:53:b4:27:20:9a:28:f3:22:1e:
f0:47:33:ae:fb:d4:bb:24:b4:7e:a8:5a:d9:fb:4c:
c1:f9:7b:0d:dd:24:2c:c1:9a:95:3f:00:23:2f:60:
77:8c:19:38:59:1e:d4:b7:2d:46:9f:8d:27:41:98:
cd:b5:42:bb:2c:10:dd:a5:83:2b:49:d7:ea:b9:91:
c8:75:45:05:da:d3:74:86:34:98:ea:98:f9:33:a7:
c2:d9:5b:31:5a:c6:50:7c:70:e1:18:93:48:8d:1b:
25:be:51:b3:a4:c6:40:1b:88:dc:3d:6b:79:61:84:
ed:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:71:D1:8F:27:6F:BC:C6:5B:1B:98:9A:7B:64:55:9D:8D:97:10:E4
X509v3 Authority Key Identifier:
keyid:9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b6:2c:8d:54:a7:c0:68:2a:92:a0:18:68:19:ff:cd:0d:20:
2c:4f:53:68:95:5b:ea:9e:c4:e4:b4:0a:90:a2:cd:c4:8c:11:
b8:86:85:04:69:ad:7f:9a:81:89:49:a6:fa:a1:9e:35:35:df:
f2:d7:b2:2c:16:e6:2b:d7:15:86:e1:ae:db:50:50:90:5e:ca:
f6:ed:33:5b:a7:80:e1:03:3b:4a:e9:6f:24:43:c2:5f:92:c9:
39:2a:c8:72:6a:5b:a0:b5:66:a8:29:59:f5:1d:c8:a5:48:f1:
06:eb:54:a3:54:60:fb:b1:f4:8d:ad:61:1d:29:d7:8a:d4:30:
da:c6:9a:aa:43:af:d7:8d:db:12:18:72:5d:fc:bb:02:51:b2:
c3:19:6b:c5:e4:6a:b3:fc:4e:e9:85:30:46:c9:eb:bc:78:58:
43:72:ab:4e:13:99:79:47:7e:52:a1:3b:94:f3:3e:4e:ba:2f:
27:0f:fc:2a:e6:e9:4a:7c:ac:2f:63:f2:14:cb:5e:95:6e:78:
ee:49:58:92:40:1c:17:11:f9:d1:bc:7b:86:b6:ce:03:69:15:
34:08:8b:44:ef:00:bc:d4:ec:03:57:11:7a:13:6e:fe:1c:90:
03:e1:8e:f0:1f:87:d0:61:56:3c:f9:5b:a9:2c:ac:96:15:c5:
c8:d4:3b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 06:50:03 2025 by rpki-client