Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
File: nKxPYfRotyACqyXxEuUgEe14LM4.mft (raw, json)
Hash identifier: 7lY+GWLHz3Smv96dMq/qCh2O8zB1X4K+48AFMNMBFCQ=
Subject key identifier: BB:D1:DB:06:10:6A:FB:37:96:2D:66:13:BB:3D:CD:E0:2F:FF:CA:2C
Authority key identifier: 9C:AC:4F:61:F4:68:B7:20:02:AB:25:F1:12:E5:20:11:ED:78:2C:CE
Certificate issuer: /CN=9cac4f61f468b72002ab25f112e52011ed782cce
Certificate serial: 019921B171B112F79482A6038002A54F41C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
Manifest number: 0DE8
Signing time: Sun 07 Sep 2025 01:01:41 +0000
Manifest this update: Sun 07 Sep 2025 01:01:41 +0000
Manifest next update: Mon 08 Sep 2025 01:01:41 +0000
Files and hashes: 1: 1-ctCBWTM9YEJSb9HauIUKPqVwas.roa (hash: F+Ql00NFkP6u64/1DSJGoJFeSPLMPLBWzAqmumx63J4=)
2: nKxPYfRotyACqyXxEuUgEe14LM4.crl (hash: xhHoLbBf6hOIVI2sCZWa4sFSb7oPWaL/umqW3jiV9xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:71:b1:12:f7:94:82:a6:03:80:02:a5:4f:41:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cac4f61f468b72002ab25f112e52011ed782cce
Validity
Not Before: Sep 7 01:01:41 2025 GMT
Not After : Sep 8 01:01:41 2025 GMT
Subject: CN=bbd1db06106afb37962d6613bb3dcde02fffca2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a9:1d:cf:6d:60:f8:bc:f0:89:86:5c:5f:35:
4e:c3:6e:cc:42:fb:be:6a:54:36:7b:c0:00:e9:f1:
bb:95:0a:b2:02:76:18:6a:91:88:14:f1:5e:a8:1a:
bf:5e:a2:03:3b:b7:95:c4:5c:b0:48:73:d3:5a:6f:
79:87:d5:f1:7a:00:ba:01:73:81:e1:02:e6:0c:ec:
f7:8b:90:fb:08:a0:e6:fe:01:eb:93:9e:57:c4:a7:
8e:d3:9c:ba:fd:10:ca:08:97:91:2b:24:bb:cb:4f:
09:15:92:df:d6:95:e2:f5:1a:3e:c4:50:8f:dc:83:
28:c8:dc:60:85:98:76:38:81:b8:07:f2:d7:1c:ab:
78:16:5a:1b:b1:a9:67:57:ed:d2:e2:42:4d:73:5e:
5f:2e:97:1b:d2:e9:82:0f:34:bc:cb:49:c4:0c:5c:
53:bc:44:cd:8d:27:ec:b1:95:c4:51:f9:f5:93:34:
9a:52:a5:bb:8c:55:32:b9:e6:18:01:99:ac:5a:a6:
82:2f:e5:c0:c2:0d:dd:be:c9:ac:de:01:c0:c2:80:
d5:2e:31:51:84:e6:aa:1a:85:b0:43:e8:af:c1:a4:
dc:6b:be:fd:7f:09:8a:5d:95:25:de:e0:a4:e4:6f:
59:9e:5c:d8:4f:0f:8b:0e:9a:72:77:ee:1b:98:67:
ef:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D1:DB:06:10:6A:FB:37:96:2D:66:13:BB:3D:CD:E0:2F:FF:CA:2C
X509v3 Authority Key Identifier:
keyid:9C:AC:4F:61:F4:68:B7:20:02:AB:25:F1:12:E5:20:11:ED:78:2C:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:d2:74:9f:b1:d8:ef:55:ae:b2:93:8e:50:44:87:e2:9d:37:
b7:88:0d:6e:47:5c:eb:65:fa:14:7b:37:e1:29:77:32:59:28:
d0:63:53:04:0e:89:c5:8a:e9:81:af:d3:64:0f:33:17:c7:ff:
a7:c8:13:74:01:d0:e2:5f:46:dc:38:09:88:4f:c7:8d:07:f9:
de:63:af:1d:45:92:8b:62:e1:0f:0c:76:1e:55:7b:64:b7:b5:
1d:24:cf:81:2c:4a:f6:a6:72:c3:41:82:6b:2c:df:22:03:c5:
8a:ff:95:ea:0f:1a:04:01:51:d9:f2:84:2c:e4:48:63:10:38:
c3:06:19:7f:e6:67:8b:91:bc:bf:33:3c:08:0a:42:e6:ad:0c:
18:5a:30:79:73:6b:8e:55:17:3b:a6:94:1d:82:8e:53:db:25:
6b:5a:f1:f0:36:ae:c6:22:20:8d:31:13:4b:36:02:22:56:24:
75:5f:4f:d8:59:d9:eb:9a:3b:e3:64:72:c3:0e:ac:89:e6:e0:
f5:4e:d3:a6:4d:e7:c6:b6:fc:b8:74:83:5d:bc:46:46:46:b1:
75:bd:80:33:0f:7a:06:b9:69:75:51:f8:91:3c:9b:76:ca:27:
0f:c3:75:3a:12:a4:dc:15:69:de:8f:79:0e:2f:2a:13:59:7a:
d2:f6:50:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:00:38 2025 by rpki-client