Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
File: NkYhMZiJnt-otCrdRzraIYdI4QQ.mft (raw, json)
Hash identifier: e549Q1zcyPPNT7E03gWMAhfKBNLRZ+nXOs5YQAjufGI=
Subject key identifier: A8:F3:95:C6:0E:49:F4:B7:75:BF:C6:9F:7C:F6:D3:75:B4:9B:89:3D
Authority key identifier: 36:46:21:31:98:89:9E:DF:A8:B4:2A:DD:47:3A:DA:21:87:48:E1:04
Certificate issuer: /CN=3646213198899edfa8b42add473ada218748e104
Certificate serial: 019922C3956FB9DB9734658F52AF3B26323E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
Manifest number: 0BE6
Signing time: Sun 07 Sep 2025 06:01:06 +0000
Manifest this update: Sun 07 Sep 2025 06:01:06 +0000
Manifest next update: Mon 08 Sep 2025 06:01:06 +0000
Files and hashes: 1: G2aa7vj-d_CA2HuKW-IASCzWaSQ.roa (hash: pv32os3ZPwMAxeQUj3RBQ+FwWykK77hFOgeqqDGQkeE=)
2: NkYhMZiJnt-otCrdRzraIYdI4QQ.crl (hash: 7L46C09BqV5g51Ac2T3Hhgqzm/5RHpic17Upo2vzuAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:95:6f:b9:db:97:34:65:8f:52:af:3b:26:32:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3646213198899edfa8b42add473ada218748e104
Validity
Not Before: Sep 7 06:01:06 2025 GMT
Not After : Sep 8 06:01:06 2025 GMT
Subject: CN=a8f395c60e49f4b775bfc69f7cf6d375b49b893d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c9:41:55:21:71:23:03:b6:12:0b:22:19:22:
7d:e7:19:27:b7:6e:1e:d7:f8:83:ef:a5:78:88:a3:
84:67:18:9c:76:30:1e:05:9a:b8:ff:31:62:13:40:
69:0b:cb:5f:02:34:9c:f2:83:e3:b1:34:00:7b:7d:
cd:7b:68:d2:c3:28:2f:e2:81:97:5a:9d:40:25:96:
fc:10:26:e0:da:e3:73:6b:a3:46:92:ef:7a:ab:04:
2f:17:e2:65:be:46:ca:df:71:5e:57:ed:d1:b7:b7:
cd:06:7d:bd:31:ba:fd:3a:a6:6d:72:30:65:78:74:
d0:20:a2:67:dd:f5:cd:98:5b:e4:d3:24:55:54:f5:
1b:92:4b:52:c1:34:97:5a:2e:ed:58:ec:ce:2c:84:
b8:2b:9d:e7:8d:27:43:49:6b:40:97:07:89:db:1e:
85:62:47:b8:8a:87:fe:8e:03:ff:b2:34:70:26:df:
4e:42:19:d9:0f:f0:e9:c4:b6:1d:83:01:aa:e9:4d:
f2:51:b1:6d:49:f1:aa:21:cd:82:77:3f:86:6e:60:
02:34:85:16:66:44:cb:93:0e:f7:ab:e7:bd:d0:db:
9d:7d:78:2e:ce:5b:b1:66:30:46:53:5b:34:d8:b0:
35:c3:fc:9e:c5:e6:4c:35:23:ca:49:07:dc:ac:ed:
c6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F3:95:C6:0E:49:F4:B7:75:BF:C6:9F:7C:F6:D3:75:B4:9B:89:3D
X509v3 Authority Key Identifier:
keyid:36:46:21:31:98:89:9E:DF:A8:B4:2A:DD:47:3A:DA:21:87:48:E1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:62:35:93:96:2f:4d:59:ee:e6:66:9e:ed:34:9f:93:a2:47:
70:7e:b1:6a:f7:33:c4:0c:74:c9:8b:6f:5e:dc:b9:04:ad:99:
04:07:f1:ee:8b:cb:4e:86:84:ec:70:2d:95:72:01:1e:58:ba:
89:1c:0d:df:39:35:90:68:42:25:7b:f1:9f:f9:c0:26:8a:ec:
a4:d9:87:08:71:1e:0e:fc:62:81:c9:c7:61:fe:1f:5d:ff:63:
a1:4e:42:80:c0:a5:13:58:e9:d0:85:c5:30:ee:4e:4e:6c:d9:
42:cc:27:69:21:57:e7:d5:96:ec:38:47:53:04:43:07:a7:8f:
64:3c:4d:41:57:9e:78:b0:2f:c4:63:4d:82:8f:a7:3c:9d:77:
f9:42:00:d4:de:35:14:50:4e:32:7d:a1:91:64:93:62:21:47:
ae:79:14:84:0a:49:72:c3:6c:5d:39:47:22:8c:86:99:17:c3:
c8:65:25:80:1f:fa:b5:0e:33:1b:3d:41:75:98:85:96:63:2d:
e6:34:f8:db:49:f9:5c:c1:1e:55:39:d2:0e:52:76:c7:8d:de:
e7:24:6b:75:fe:ad:20:6c:ea:ab:5e:f2:bc:1a:51:4b:a3:d9:
cd:25:b6:26:54:77:dc:14:1d:0c:7a:1b:64:70:64:fb:a8:a9:
91:cd:82:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiw5VvuduXNGWPUq87JjI+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NDYyMTMxOTg4OTllZGZhOGI0MmFkZDQ3M2FkYTIxODc0
OGUxMDQwHhcNMjUwOTA3MDYwMTA2WhcNMjUwOTA4MDYwMTA2WjAzMTEwLwYDVQQD
EyhhOGYzOTVjNjBlNDlmNGI3NzViZmM2OWY3Y2Y2ZDM3NWI0OWI4OTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuclBVSFxIwO2EgsiGSJ95xknt24e
1/iD76V4iKOEZxicdjAeBZq4/zFiE0BpC8tfAjSc8oPjsTQAe33Ne2jSwygv4oGX
Wp1AJZb8ECbg2uNza6NGku96qwQvF+JlvkbK33FeV+3Rt7fNBn29Mbr9OqZtcjBl
eHTQIKJn3fXNmFvk0yRVVPUbkktSwTSXWi7tWOzOLIS4K53njSdDSWtAlweJ2x6F
Yke4iof+jgP/sjRwJt9OQhnZD/DpxLYdgwGq6U3yUbFtSfGqIc2Cdz+GbmACNIUW
ZkTLkw73q+e90NudfXguzluxZjBGU1s02LA1w/yexeZMNSPKSQfcrO3GPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKjzlcYOSfS3db/Gn3z203W0m4k9MB8GA1UdIwQY
MBaAFDZGITGYiZ7fqLQq3Uc62iGHSOEEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmtZaE1aaUpudC1vdENyZFJ6cmFJWWRJNFFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8zNzZkNDUtYzAwYS00ZWU5LTk4NmIt
MDZkYzM4YjU3NTM1LzEvTmtZaE1aaUpudC1vdENyZFJ6cmFJWWRJNFFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8zNzZkNDUtYzAwYS00ZWU5LTk4NmItMDZkYzM4YjU3NTM1
LzEvTmtZaE1aaUpudC1vdENyZFJ6cmFJWWRJNFFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg2I1k5Yv
TVnu5mae7TSfk6JHcH6xavczxAx0yYtvXty5BK2ZBAfx7ovLToaE7HAtlXIBHli6
iRwN3zk1kGhCJXvxn/nAJorspNmHCHEeDvxigcnHYf4fXf9joU5CgMClE1jp0IXF
MO5OTmzZQswnaSFX59WW7DhHUwRDB6ePZDxNQVeeeLAvxGNNgo+nPJ13+UIA1N41
FFBOMn2hkWSTYiFHrnkUhApJcsNsXTlHIoyGmRfDyGUlgB/6tQ4zGz1BdZiFlmMt
5jT420n5XMEeVTnSDlJ2x43e5yRrdf6tIGzqq17yvBpRS6PZzSW2JlR33BQdDHob
ZHBk+6ipkc2CCw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:44 2025 by rpki-client