Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
File: ncKK6ZN_9-SexPEjTlPYud1pRUE.mft (raw, json)
Hash identifier: gSa3ulMECtUe6/wjkP0q0f/PW3ff13z6R5VGCKBVuVU=
Subject key identifier: E6:42:F5:B1:F4:28:9B:15:20:8D:4F:77:FE:A4:69:D2:38:89:F1:87
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 019A07EDCC3A6A1A1D9C6F20B3EBD0AFAE6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
Manifest number: 1012
Signing time: Tue 21 Oct 2025 18:00:15 +0000
Manifest this update: Tue 21 Oct 2025 18:00:15 +0000
Manifest next update: Wed 22 Oct 2025 18:00:15 +0000
Files and hashes: 1: 1-0vipuRl0AJvwZtEBk-maQes6Cg.roa (hash: DSWGxdza7oD2/3uUVZoXyDrmHTWT++tTuwdDtQTvs4k=)
2: Dp9S7DtPUM200gi6O6yBPEaasas.roa (hash: nHFRQ6xLBtePKwuFF9sGQ8KR62EZEyHkOj5R88bM4qI=)
3: F6eX9oz_j-ZT8QfPBURiHjJkBos.roa (hash: 9C2+49g0ve8uLFJHYFMwlwYj/+2J3SnLoalOE2MN4Mk=)
4: Hiu-YkREzGKKTtSRBgf6M5S0mUM.roa (hash: fxvguMnjN9xF6RFcgtEIfOjUPdwUBHDkuyyelgRCorQ=)
5: U4lJvipYbr4AZQbw3vQ4rpXfXN4.roa (hash: J4umHHc1mv/sPeURzjqZJEkjClmBGK0Hvn8O5Rexq5Y=)
6: YhZQFWzwDUGT-HjSfFHnpvcFMTY.roa (hash: /ssHfW4YZnp/Q+YD/IpItVTTmqCd5HemhWXsBRiqt1A=)
7: ZeYihmicLm5VKfWSSFIon1HTDC4.roa (hash: skxZCw+YKxKcl1188es30U08xjm3mZlLt8pygJEcJ10=)
8: jdKmvZ_WGiUDxDAHKJg_Wed6rVo.roa (hash: CRiOfMtNCT5H0OJU8c1YHET8V3YfGy03z8wKH951O6Y=)
9: ncKK6ZN_9-SexPEjTlPYud1pRUE.crl (hash: h/olDsBMF6XXUeFSnzw4wY3IMauI1tlJT+Oj2fGSei0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:ed:cc:3a:6a:1a:1d:9c:6f:20:b3:eb:d0:af:ae:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Oct 21 18:00:15 2025 GMT
Not After : Oct 22 18:00:15 2025 GMT
Subject: CN=e642f5b1f4289b15208d4f77fea469d23889f187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1a:ed:8a:a9:37:05:0c:e2:80:4a:b4:87:65:
35:63:3b:e8:cc:fc:69:78:36:93:53:bb:7a:65:70:
fa:8b:b8:eb:f2:e9:83:c3:0d:ee:ee:cb:f5:c8:8e:
02:52:c7:38:1c:75:4a:7b:ff:47:0d:73:36:eb:de:
bb:a4:1a:ee:79:10:44:b3:2c:e1:8b:0b:a7:d4:7a:
46:a6:67:0a:7d:fa:4b:3c:f8:fb:d8:a6:b4:68:a2:
68:a7:d0:e4:78:8c:21:d2:dc:22:f7:ff:68:03:8b:
6d:49:48:f0:51:c3:03:7c:f5:87:07:2b:ba:84:14:
95:e6:3f:32:bc:44:01:78:18:a0:a6:2c:f5:ab:6a:
f4:f6:0b:d1:ac:3e:af:f5:48:3b:33:61:d8:9e:9a:
4a:b7:9f:49:98:7d:f8:e2:b8:03:d1:4e:91:ba:22:
54:ee:74:54:ce:28:6b:7e:aa:bc:3a:50:1b:46:75:
be:db:91:8d:5e:5f:e6:24:54:1f:94:6a:3c:2b:d3:
d8:84:8b:d8:ff:c4:ea:3c:55:b0:fa:b5:22:18:d1:
de:61:67:b0:99:d3:f4:d7:34:23:39:53:f0:85:ef:
56:d0:4d:3b:4e:08:4e:01:d2:b8:20:35:0e:00:4b:
58:d8:2d:41:bd:cc:cc:a6:b7:fa:ca:21:6d:e4:bf:
f1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:42:F5:B1:F4:28:9B:15:20:8D:4F:77:FE:A4:69:D2:38:89:F1:87
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:87:cf:43:d0:fc:ad:54:b0:1c:37:2a:61:ab:d2:a9:a9:c7:
1b:81:5e:a6:65:4c:a4:94:6a:7a:71:3b:57:bc:ed:e1:1e:66:
06:67:27:1a:12:51:95:b9:88:4c:e0:cf:af:3f:3b:05:17:72:
f9:a0:d2:18:9f:29:a6:e1:d8:08:93:ee:40:79:0e:9c:ab:e8:
a5:0f:19:50:3b:fa:6f:d6:3a:ff:d9:a0:2e:83:70:79:b7:4f:
32:35:00:24:fa:85:cc:ca:e9:cc:40:58:dc:36:79:f9:fa:65:
05:8c:00:4b:d5:ea:28:b8:cd:a5:19:36:c5:f8:85:5c:51:85:
56:b2:d4:2e:af:68:74:42:93:e7:41:98:56:cd:54:03:c5:e3:
f8:4e:ab:e3:89:24:92:cd:e3:e2:e9:67:da:30:d6:2a:ac:7f:
b2:29:5a:da:7d:c9:58:72:ca:d1:7f:94:71:67:78:ba:bb:27:
e1:27:2e:07:47:ee:d5:7a:4a:9d:53:3e:19:84:b9:65:38:67:
b2:51:24:38:c9:0e:1e:8e:da:d5:9a:5c:4a:36:7b:45:9f:2b:
5b:e8:7f:3c:b2:2e:e3:35:b5:9a:e7:c0:23:a9:a2:ac:66:37:
88:f6:29:92:41:a1:16:65:e9:58:2c:8d:dc:d1:48:2b:df:f0:
19:30:a8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 22:33:41 2025 by rpki-client