Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
File: NkK7yD4owQPBfVogHt71ZyY02-g.mft (raw, json)
Hash identifier: TiFuAWQkYF+yi1nGccH2UUpFjCOXvuaWz4EBWIaL3NM=
Subject key identifier: 8A:A0:95:E7:49:97:13:2E:AA:02:BC:52:07:38:1A:41:60:0D:1E:2E
Authority key identifier: 36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
Certificate issuer: /CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Certificate serial: 019A2A42ACB8865F6983D1AF8F816B0F6C9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
Manifest number: 11F6
Signing time: Tue 28 Oct 2025 10:00:03 +0000
Manifest this update: Tue 28 Oct 2025 10:00:03 +0000
Manifest next update: Wed 29 Oct 2025 10:00:03 +0000
Files and hashes: 1: NkK7yD4owQPBfVogHt71ZyY02-g.crl (hash: QxcbeW1dOX6fJX+CrPfONT6uLNcuKqGqh8/nsXe0lWU=)
2: saaFFJdprL2UcH3v0LL3zZpp7jc.roa (hash: YyF7BBYn0BiV4oWuG7tgrnT28h9nKay6fwuXu0twrBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:42:ac:b8:86:5f:69:83:d1:af:8f:81:6b:0f:6c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Validity
Not Before: Oct 28 10:00:03 2025 GMT
Not After : Oct 29 10:00:03 2025 GMT
Subject: CN=8aa095e74997132eaa02bc5207381a41600d1e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:79:56:2f:6b:8f:ab:3a:0e:8b:11:9a:d8:b9:
dd:15:e8:4b:91:10:97:65:b5:dd:a8:da:e2:a0:1a:
a6:b1:e2:c9:ec:0b:e2:e7:68:d6:f2:92:31:e9:71:
17:26:4c:44:c7:12:1e:85:a8:07:5c:6a:41:e2:2f:
4c:87:2f:b8:b9:2c:6a:0a:ef:0b:59:76:39:5f:af:
f4:6c:89:15:88:1a:68:81:4b:b4:55:64:47:60:ce:
7f:7f:7b:c2:13:79:57:bc:d0:58:d9:55:16:e0:91:
4a:87:01:27:58:59:c2:45:9f:77:ca:dd:99:b6:2e:
5e:58:97:68:e7:c6:c8:37:48:6b:79:57:83:1a:2e:
02:10:86:9d:18:69:84:05:24:4f:53:d0:c8:0e:26:
d8:af:5f:37:f5:c6:b1:88:c4:45:b7:5a:a0:78:11:
d9:bf:c7:f8:9f:a6:a2:35:42:c3:4d:dc:d6:11:75:
01:9d:ac:3d:bc:4a:57:6f:87:f6:a6:6a:d2:9a:5b:
3d:47:03:b8:a8:30:f8:47:15:77:01:49:a6:7d:7f:
1a:89:84:a3:5f:e3:bd:c3:ed:db:3c:cf:09:6e:4d:
57:ae:a9:3a:fb:53:e5:c2:52:13:0e:12:d3:8c:c0:
41:53:f3:97:7d:a7:78:70:cf:c6:6e:0a:f7:03:72:
ee:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A0:95:E7:49:97:13:2E:AA:02:BC:52:07:38:1A:41:60:0D:1E:2E
X509v3 Authority Key Identifier:
keyid:36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c4:a3:12:4c:3b:99:de:f3:69:d1:6c:9d:56:40:24:2d:95:
9c:35:d8:42:1e:9c:96:ea:e1:af:aa:1a:76:2e:fb:82:8a:63:
7a:51:58:1e:90:fc:02:39:51:88:ec:b6:ce:ef:64:a8:c6:b4:
1a:aa:91:df:88:cb:71:0d:93:ad:3b:20:26:58:4d:6c:f2:69:
ee:d7:3c:43:f8:e5:2e:c7:e2:84:fc:df:89:aa:24:b0:0e:c9:
6b:80:e8:23:e3:9c:d6:de:ff:22:25:a3:e1:1d:00:9b:92:99:
b5:d9:7d:4c:77:be:0d:a4:37:a8:ff:72:cc:a1:c5:e0:eb:07:
53:77:22:80:df:23:b3:f1:9c:c5:2e:3f:f7:10:30:11:c0:d6:
d3:11:b0:0c:29:cf:24:16:e5:55:a6:02:13:84:17:d9:1e:e0:
90:45:6a:4a:3d:24:f4:40:56:d3:3c:3f:4a:f8:5a:6a:de:a8:
77:51:d1:36:58:e5:d2:ef:c9:7c:62:2a:70:25:fb:76:75:5f:
74:79:12:0a:33:87:ce:91:94:94:de:50:1b:89:6e:e5:17:c6:
a8:1b:69:65:47:aa:b4:52:18:a8:53:44:73:ac:df:26:5b:f4:
6e:b1:af:83:76:88:31:ac:3c:8a:57:04:8a:e1:c9:83:e8:87:
1e:fc:60:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoqQqy4hl9pg9Gvj4FrD2ycMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NDJiYmM4M2UyOGMxMDNjMTdkNWEyMDFlZGVmNTY3MjYz
NGRiZTgwHhcNMjUxMDI4MTAwMDAzWhcNMjUxMDI5MTAwMDAzWjAzMTEwLwYDVQQD
Eyg4YWEwOTVlNzQ5OTcxMzJlYWEwMmJjNTIwNzM4MWE0MTYwMGQxZTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnlWL2uPqzoOixGa2LndFehLkRCX
ZbXdqNrioBqmseLJ7Avi52jW8pIx6XEXJkxExxIehagHXGpB4i9Mhy+4uSxqCu8L
WXY5X6/0bIkViBpogUu0VWRHYM5/f3vCE3lXvNBY2VUW4JFKhwEnWFnCRZ93yt2Z
ti5eWJdo58bIN0hreVeDGi4CEIadGGmEBSRPU9DIDibYr1839caxiMRFt1qgeBHZ
v8f4n6aiNULDTdzWEXUBnaw9vEpXb4f2pmrSmls9RwO4qDD4RxV3AUmmfX8aiYSj
X+O9w+3bPM8Jbk1Xrqk6+1PlwlITDhLTjMBBU/OXfad4cM/Gbgr3A3LuKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqgledJlxMuqgK8Ugc4GkFgDR4uMB8GA1UdIwQY
MBaAFDZCu8g+KMEDwX1aIB7e9WcmNNvoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmtLN3lENG93UVBCZlZvZ0h0NzFaeVkwMi1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8xNTE5YTktYWM5Zi00ZjVkLWJmNGYt
NmNiMmUwMmNhZWYyLzEvTmtLN3lENG93UVBCZlZvZ0h0NzFaeVkwMi1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8xNTE5YTktYWM5Zi00ZjVkLWJmNGYtNmNiMmUwMmNhZWYy
LzEvTmtLN3lENG93UVBCZlZvZ0h0NzFaeVkwMi1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXcSjEkw7
md7zadFsnVZAJC2VnDXYQh6clurhr6oadi77gopjelFYHpD8AjlRiOy2zu9kqMa0
GqqR34jLcQ2TrTsgJlhNbPJp7tc8Q/jlLsfihPzfiaoksA7Ja4DoI+Oc1t7/IiWj
4R0Am5KZtdl9THe+DaQ3qP9yzKHF4OsHU3cigN8js/GcxS4/9xAwEcDW0xGwDCnP
JBblVaYCE4QX2R7gkEVqSj0k9EBW0zw/Svhaat6od1HRNljl0u/JfGIqcCX7dnVf
dHkSCjOHzpGUlN5QG4lu5RfGqBtpZUeqtFIYqFNEc6zfJlv0brGvg3aIMaw8ilcE
iuHJg+iHHvxgyA==
-----END CERTIFICATE-----
Generated at Tue Oct 28 14:27:08 2025 by rpki-client