Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
File: nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft (raw, json)
Hash identifier: cR2Xxfhmzg+FAFraZTaxwWulw/LTNfy91MV+oHM56M8=
Subject key identifier: 3E:D3:25:53:52:3F:C5:88:F4:92:D0:66:58:9B:D4:9A:AA:43:50:EE
Authority key identifier: 9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C
Certificate issuer: /CN=9e481c098a649265291d402f5f02fc43dda0fc8c
Certificate serial: 019933808F5AED7809689EAE091232C8A4D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
Manifest number: 0973
Signing time: Wed 10 Sep 2025 12:01:27 +0000
Manifest this update: Wed 10 Sep 2025 12:01:27 +0000
Manifest next update: Thu 11 Sep 2025 12:01:27 +0000
Files and hashes: 1: 1-Z1UOZXHudz9pMndWhDGiE0wZos.roa (hash: j553aDGXg+Mu/H/OVwEn4NDDiMjFpdhHQa+Xk6WS3jQ=)
2: nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl (hash: NyQKhURlRc8AAhnXFB+VJ6Ir+tZV8Gn0QYw4lSNi52U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:80:8f:5a:ed:78:09:68:9e:ae:09:12:32:c8:a4:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e481c098a649265291d402f5f02fc43dda0fc8c
Validity
Not Before: Sep 10 12:01:27 2025 GMT
Not After : Sep 11 12:01:27 2025 GMT
Subject: CN=3ed32553523fc588f492d066589bd49aaa4350ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:37:50:f3:8f:67:30:c7:0c:23:9c:80:90:24:
89:a3:5b:f3:1f:f6:6b:5e:2c:84:f3:e9:90:20:bd:
d4:fa:de:94:7f:00:be:9d:23:09:43:26:a9:c5:b3:
dd:dd:fd:44:53:1c:8c:7f:43:c6:da:da:2a:ef:64:
3a:3a:c6:37:f6:64:97:e3:1d:58:77:34:1a:8f:9e:
15:99:cc:fb:b5:65:d5:09:5b:51:64:63:41:2d:4e:
d7:22:cc:8e:89:14:d2:61:82:49:1d:88:ec:34:f1:
14:a5:26:8b:35:e7:9e:04:7b:7c:86:fa:03:c8:74:
6c:e0:c3:51:f7:ba:ad:f5:e8:07:fd:79:a0:8f:8b:
ab:29:d8:22:d7:49:34:ff:50:8c:e9:c0:7d:15:b3:
28:be:d6:eb:e8:c7:dd:c3:da:0f:2e:f7:8a:e9:2c:
e2:11:6d:40:3e:a9:7b:2c:1d:d7:37:dc:68:92:a0:
db:33:8c:4a:45:97:de:23:8d:07:f1:0f:bb:54:6d:
1c:0e:b1:fc:3a:f2:c6:d4:37:17:83:88:ef:d0:5e:
54:9f:12:82:87:1e:a1:97:b3:aa:b0:3c:d5:75:7c:
2e:1f:67:83:b4:7f:a3:f9:72:68:cd:c0:ad:ca:ee:
85:91:33:68:b6:b7:7b:91:48:c1:6e:c3:5c:12:2e:
a7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D3:25:53:52:3F:C5:88:F4:92:D0:66:58:9B:D4:9A:AA:43:50:EE
X509v3 Authority Key Identifier:
keyid:9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:0f:31:d3:f1:2e:26:a9:6f:0b:db:a3:6f:80:76:4a:9f:4b:
d0:21:7b:c1:34:19:5b:27:c8:32:e6:c0:ab:2d:02:9c:5a:b6:
48:de:82:e2:6d:cc:22:7a:4e:f4:ba:74:1f:db:8a:49:7a:80:
05:c8:f9:59:fc:57:63:14:42:ad:e8:a8:e2:7d:80:68:ce:93:
7a:e9:ef:19:66:be:f4:df:ea:c6:01:9a:c6:68:0c:f1:52:82:
f9:6a:10:38:c0:0c:d8:84:ea:27:bd:9a:9f:3c:97:54:3c:b4:
6a:67:85:f1:35:0a:5f:78:f7:08:26:22:53:1b:d2:63:51:ae:
5f:ff:24:31:e3:a4:2b:3d:a7:cb:45:c0:79:29:c7:4c:60:11:
5e:75:78:69:8a:4c:b3:95:ee:36:64:63:a5:c9:85:b4:06:9c:
90:1f:c2:9f:5d:aa:30:22:03:54:a4:30:df:2c:4a:69:b6:0c:
79:7e:e2:33:bb:0a:a9:42:a6:9f:bd:f2:ce:af:0e:ad:19:2d:
d5:96:31:69:b7:0f:19:9a:51:19:44:b5:4b:09:79:69:a2:8e:
84:f2:a0:35:ac:bd:27:cc:a2:f9:dd:db:41:58:90:4e:99:94:
d2:6e:fb:64:7e:f0:ad:6d:a1:0d:13:a3:32:5b:a1:58:05:8b:
e9:f6:2c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:35:06 2025 by rpki-client