Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
File: nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft (raw, json)
Hash identifier: 18HynzdCaJuWNfH8xm6Bu5/leoUj1+aBLPSgO5lnl6U=
Subject key identifier: 8B:9D:7A:D5:7F:17:31:A3:41:FD:54:4F:AC:17:59:64:C5:7D:D1:B4
Authority key identifier: 9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C
Certificate issuer: /CN=9e481c098a649265291d402f5f02fc43dda0fc8c
Certificate serial: 019A3458811A5C579863C3C01015504D0FAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
Manifest number: 09F8
Signing time: Thu 30 Oct 2025 09:00:06 +0000
Manifest this update: Thu 30 Oct 2025 09:00:06 +0000
Manifest next update: Fri 31 Oct 2025 09:00:06 +0000
Files and hashes: 1: 1-Z1UOZXHudz9pMndWhDGiE0wZos.roa (hash: j553aDGXg+Mu/H/OVwEn4NDDiMjFpdhHQa+Xk6WS3jQ=)
2: nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl (hash: LNqbXGUq1EIsNb67X5OVEXheMPIkyD6ybmUD+sBSrVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:34:58:81:1a:5c:57:98:63:c3:c0:10:15:50:4d:0f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e481c098a649265291d402f5f02fc43dda0fc8c
Validity
Not Before: Oct 30 09:00:06 2025 GMT
Not After : Oct 31 09:00:06 2025 GMT
Subject: CN=8b9d7ad57f1731a341fd544fac175964c57dd1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5a:ab:bc:7a:f6:27:ce:25:f4:e5:52:93:67:
41:60:81:8b:42:4b:09:90:a5:c1:bb:d1:b6:a5:95:
54:fa:6e:d8:f9:d7:00:d8:c1:d9:11:c1:f8:8c:d1:
f9:50:50:8e:dd:88:a1:92:3a:0c:90:fb:48:02:59:
98:cc:7a:70:cd:b1:69:bb:c5:51:cc:a8:da:fb:bb:
f9:b8:58:f0:59:e9:57:4d:d9:cc:45:83:3b:40:70:
75:33:a8:40:2d:47:11:24:e8:a2:bf:11:fc:41:f8:
53:07:35:55:9a:7f:58:08:1e:39:fd:af:af:c4:5c:
90:cd:e4:6a:71:98:15:3e:2f:c4:c7:2a:7b:6c:9a:
72:43:f8:fa:38:a0:cc:2d:c7:54:1c:58:f2:2b:19:
be:77:1e:06:34:ce:5f:cc:f3:86:c1:ec:59:58:81:
c8:ad:8f:f1:46:23:57:84:05:7a:b4:5e:22:40:7d:
9c:fa:dc:d0:3f:90:15:66:49:2e:21:e2:23:cf:48:
d2:36:45:af:71:4a:2a:96:a0:9f:73:6c:7b:fc:66:
4d:64:86:6a:2e:df:2e:65:3a:87:eb:50:2d:a0:08:
98:a7:cb:c9:56:f5:86:3a:45:d3:d0:59:8e:ab:ce:
85:86:78:b2:44:e8:78:15:0b:f7:49:37:1a:06:bc:
c8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9D:7A:D5:7F:17:31:A3:41:FD:54:4F:AC:17:59:64:C5:7D:D1:B4
X509v3 Authority Key Identifier:
keyid:9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:84:c9:43:83:93:5c:f6:08:bc:27:15:f8:12:38:93:ad:c7:
1a:46:bc:53:ba:0c:44:a9:2b:62:aa:b1:eb:14:63:7c:31:d2:
9b:35:47:50:e0:74:75:dc:47:75:81:b0:fd:7e:63:d6:72:fb:
7d:a9:e9:15:46:64:2c:77:b6:88:af:5b:41:27:21:af:65:50:
f8:c5:02:ae:cc:49:e6:44:9f:f5:25:2f:f7:5a:06:1d:cb:40:
93:d6:4c:78:99:8f:28:60:89:a5:33:ca:31:a9:05:6e:f2:37:
a4:45:38:cb:d9:92:15:89:36:65:2d:36:00:ee:61:02:f1:fa:
23:ec:16:16:d9:b1:7c:68:fd:65:40:f2:75:b4:0e:db:07:19:
2b:73:cc:db:b9:99:0b:1a:a7:5d:69:37:72:d4:84:0b:92:c3:
b9:9f:33:43:08:55:5c:e5:38:38:a0:f3:d8:24:bd:b6:23:c3:
8b:5d:bd:bb:ef:8c:f6:0c:6e:d3:d4:7c:6d:19:16:85:f3:29:
af:ea:e9:9c:a6:75:e7:8d:ca:a1:9d:b7:c0:66:ae:d0:42:8d:
db:bc:8b:ae:2f:d9:51:30:09:18:8f:ab:55:61:c9:7d:a3:97:
f9:d3:c9:db:99:13:9a:d5:df:bc:56:77:50:d5:32:bb:f9:3d:
2e:e8:67:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 15:11:30 2025 by rpki-client