Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
File: nkdckgJgbmZn6Up3npA9tpelkCU.mft (raw, json)
Hash identifier: KERnA0tyEDTYZfsYFUOQ/4Y2qMvXtbwkO/Cu6IIGKnc=
Subject key identifier: 48:C9:03:06:4B:B1:C6:4A:24:AA:55:54:0C:C7:F1:B3:D7:DD:02:3A
Authority key identifier: 9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25
Certificate issuer: /CN=9e475c9202606e6667e94a779e903db697a59025
Certificate serial: 01993047E1848BB99A1D00BEB5857EC6BB92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
Manifest number: 055C
Signing time: Tue 09 Sep 2025 21:00:41 +0000
Manifest this update: Tue 09 Sep 2025 21:00:41 +0000
Manifest next update: Wed 10 Sep 2025 21:00:41 +0000
Files and hashes: 1: mR809BzawsocXcAGIqvH25pMqQs.roa (hash: YeYkP56hsu5/L5Jhs1MWZsAFAw78/bEVuYQMAvS7nO4=)
2: nkdckgJgbmZn6Up3npA9tpelkCU.crl (hash: Ixl3j4u3I2gia7h3T+5lCET0wPq0J/XRiHS+d6ZJQco=)
3: nmSg0-EK5kx_OFxZ-x2rJeid1NU.roa (hash: 8HytWsFdzKFviKTtfyGmrk77Cg5YhpoczU6o9u5sUno=)
4: qxkGe1Ztq8AC8Xy-vkslbb-4Yjc.roa (hash: Vk6as9yIInb4okYrwyyw/9HVRxpOcsbPGA6Y1uEJnuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:47:e1:84:8b:b9:9a:1d:00:be:b5:85:7e:c6:bb:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e475c9202606e6667e94a779e903db697a59025
Validity
Not Before: Sep 9 21:00:41 2025 GMT
Not After : Sep 10 21:00:41 2025 GMT
Subject: CN=48c903064bb1c64a24aa55540cc7f1b3d7dd023a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:95:65:48:ff:09:b0:d2:0c:3a:db:03:aa:50:
1e:a1:ec:1f:a5:d8:c2:e1:71:ae:f4:a0:1e:8a:b0:
fa:70:f8:d1:7a:72:c7:89:89:90:4d:2b:c0:75:3c:
35:b8:df:b9:0f:31:7f:2e:a9:d4:37:f4:96:bb:12:
b8:cc:5d:bb:b4:48:43:b5:8a:4e:a9:13:85:13:bd:
cf:ef:9d:7a:6d:8f:0b:07:a5:f6:a0:1a:5c:a2:33:
f8:b5:9d:d3:0b:ea:48:46:cb:3d:a7:14:30:98:fa:
7b:08:f6:85:c4:3f:7d:97:15:f9:c1:dd:7b:a8:f3:
2f:6d:b9:42:13:32:38:6c:ca:e1:91:ce:70:c0:81:
b1:e6:ad:14:2b:c9:6a:4e:76:f7:85:67:ed:de:dd:
2c:b1:d7:59:f8:44:20:23:2e:4f:0d:9f:c1:f9:25:
c3:7e:69:7d:a5:f0:8e:88:61:25:d2:22:b1:ad:0f:
cc:12:76:dd:d9:5c:29:ad:95:64:74:d5:20:08:52:
6a:bd:cf:d1:1a:14:1e:4a:6c:56:1c:0f:e7:e2:3d:
eb:7c:df:e5:1d:b0:db:b2:bc:59:0a:ad:81:57:e2:
2f:29:d5:0a:ff:b2:02:2e:39:42:ef:1d:ba:9b:9f:
a3:55:92:c1:e7:8e:40:37:2f:55:c2:7e:17:b7:df:
e3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C9:03:06:4B:B1:C6:4A:24:AA:55:54:0C:C7:F1:B3:D7:DD:02:3A
X509v3 Authority Key Identifier:
keyid:9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:df:bc:12:aa:d2:50:f4:ae:9b:59:3e:b4:86:e9:17:b6:26:
d5:f7:9e:0c:d5:2e:04:55:78:1a:ef:b1:86:33:c4:82:f6:4c:
fa:26:ff:bf:1c:dd:12:d7:e2:d9:39:ae:e7:04:ce:68:71:57:
e3:d4:78:c0:6b:71:19:8b:84:54:1a:ca:dc:4c:98:45:f9:24:
d6:2e:ce:a2:be:3d:ca:d1:76:c6:73:f1:00:e6:3c:d0:98:f3:
3c:f2:2c:6b:f9:06:8c:c4:0a:0f:c8:8f:89:5a:67:aa:e8:2e:
d0:56:48:28:4e:64:e1:f8:30:ff:c2:00:a4:81:22:bc:4d:11:
be:49:e4:41:c7:fb:9c:4e:72:98:b8:7d:70:ce:b7:0b:77:c5:
91:8c:67:c4:9e:97:3a:4c:61:bd:41:c0:b4:e7:6d:29:44:d9:
6c:08:12:72:93:90:54:6d:6d:a1:bb:51:9b:9e:2e:3e:74:2b:
a7:04:0c:21:77:f5:fa:d5:c5:16:cd:34:23:a9:aa:46:8e:d2:
00:f5:14:d0:9d:f8:8b:2e:17:ae:f4:12:3b:fb:fd:4c:bf:38:
d3:03:4a:16:65:df:d9:cb:55:2f:3e:c8:80:ed:a6:9e:19:9c:
76:26:87:cf:a8:f2:e3:39:58:42:1b:76:3f:b1:e4:10:b9:1a:
a1:0a:68:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:38:15 2025 by rpki-client