Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
File: nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft (raw, json)
Hash identifier: 1kMEQAYB3D5Sxi3sOb1pP4rJi9C779C54tKpKk1H/aA=
Subject key identifier: 1F:82:08:B1:3F:14:69:62:6C:8B:23:70:F1:CC:A9:A1:21:2F:0B:D0
Authority key identifier: 9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
Certificate issuer: /CN=9e42ca46688a837b575234ce6a1a326587d6c204
Certificate serial: 0199534170427AB0910C7E3E1FE4FC9786AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
Manifest number: 112E
Signing time: Tue 16 Sep 2025 16:00:21 +0000
Manifest this update: Tue 16 Sep 2025 16:00:21 +0000
Manifest next update: Wed 17 Sep 2025 16:00:21 +0000
Files and hashes: 1: 2sz7XXaQR044rc-q4fD0WIzUxYQ.roa (hash: pi07prhyU4hZ/cG1dB+HetMAgpuPmtLhNCb2plULwQE=)
2: D2HSpId2VYXPjhlDPg7eWeC18Pw.roa (hash: UXPvVbmh0MzKjV4UFrcu58vEq8RZqO0eg1YthASI72I=)
3: UnUG9yNZwHFtxPW6hAKjubIbusM.roa (hash: xsmRUWemFAWw0xMxDEpqyiLbWsqfijBX0AOIJJiaM5U=)
4: nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl (hash: 5vJ5/F5VfBZRUOt9oh7/AcgPufuLYiKUtYtFDMh50Vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:53:41:70:42:7a:b0:91:0c:7e:3e:1f:e4:fc:97:86:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e42ca46688a837b575234ce6a1a326587d6c204
Validity
Not Before: Sep 16 16:00:21 2025 GMT
Not After : Sep 17 16:00:21 2025 GMT
Subject: CN=1f8208b13f1469626c8b2370f1cca9a1212f0bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c5:82:10:95:f8:96:dc:b6:7a:c4:48:da:19:
b5:71:46:8b:5e:b4:4b:dc:3d:76:81:a5:92:bd:b1:
d4:6f:56:c4:fe:82:01:d1:3e:12:a3:0f:c5:4e:d5:
e3:5e:b7:98:40:cc:4f:98:7b:d3:e2:80:66:04:76:
e8:ce:e4:9b:d7:fd:aa:ab:e7:cf:8e:7c:e0:f6:bb:
25:5c:9f:9e:e4:b1:0c:e7:ec:94:70:90:a2:b0:a5:
39:e4:93:f2:cd:37:8e:96:a0:ca:81:e0:ce:22:4e:
4c:04:23:2a:05:5f:b2:28:e0:38:76:7c:70:18:1f:
1b:07:7e:f1:e6:57:c8:e6:98:27:13:91:20:f9:0d:
39:19:18:c9:03:0d:07:e2:58:f8:6a:4f:a6:1f:8e:
69:f6:f7:74:c2:12:2b:43:69:c1:09:8d:07:a7:de:
38:99:b3:b4:8c:77:4c:89:0c:47:61:de:58:90:10:
03:d4:2c:3a:b0:32:f6:71:34:04:25:a5:4b:bf:01:
65:15:d6:52:d8:6c:92:f9:e4:00:ae:7e:56:8d:8d:
f5:67:20:8d:12:44:8d:ab:4d:7a:cc:45:a3:19:b1:
4d:68:94:32:4a:1e:31:00:4b:21:b4:94:b0:3d:1d:
3d:83:52:4f:cb:26:1a:e9:d0:40:38:c9:da:d5:0c:
9b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:82:08:B1:3F:14:69:62:6C:8B:23:70:F1:CC:A9:A1:21:2F:0B:D0
X509v3 Authority Key Identifier:
keyid:9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:e3:74:28:ce:0b:e4:a4:f2:80:35:b0:59:e8:3c:90:26:79:
6c:9b:60:29:80:c6:1a:f1:ac:02:f9:72:ab:ce:11:77:4a:91:
3c:0e:07:42:27:0c:c2:5f:7a:f4:97:60:72:d3:c3:aa:ab:fb:
7b:b2:4d:6f:f8:08:86:d3:d3:3f:b6:ae:73:42:2e:30:fc:0e:
f8:36:d4:19:65:16:78:6f:ff:f7:8d:28:50:3e:4f:14:7a:43:
73:2d:71:f0:2c:cf:b4:a1:e7:9a:c2:ba:2d:79:7f:b7:59:59:
63:5f:64:28:61:d8:28:c0:4e:a7:ac:66:a3:8c:4b:92:be:44:
dd:30:3b:e4:a6:11:47:3e:fc:d1:9c:ab:c4:e0:37:1a:6c:25:
5f:d9:ec:e7:17:33:05:33:75:a1:b9:df:b3:fb:48:61:25:45:
ec:0c:23:6b:ce:04:19:80:e0:ae:74:82:1f:2c:bd:29:0c:b8:
8f:0f:5c:e8:e4:f2:7d:4a:44:c4:12:56:4b:ba:02:28:98:ae:
45:5e:c9:a2:ee:d0:dc:0b:04:7e:82:65:9a:a8:e3:6a:b3:0a:
fd:04:c9:4b:70:9f:a3:d9:66:7c:e5:96:ef:c7:6c:bf:f5:49:
8c:9f:61:3f:c5:f4:c4:02:e6:de:cb:03:83:59:49:2e:06:80:
9c:b4:db:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 18:42:27 2025 by rpki-client