Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
File: NkK7yD4owQPBfVogHt71ZyY02-g.mft (raw, json)
Hash identifier: A3f60n0DJ/1xewY+GbOUz/0bDJMnGWYSMEJ6QIVMU4w=
Subject key identifier: 53:08:09:F0:08:C7:95:4C:0B:0B:60:64:3D:82:48:7C:88:A3:49:4D
Authority key identifier: 36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
Certificate issuer: /CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Certificate serial: 019931240A63034BBD77041D45C311B9BEDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
Manifest number: 1175
Signing time: Wed 10 Sep 2025 01:01:09 +0000
Manifest this update: Wed 10 Sep 2025 01:01:09 +0000
Manifest next update: Thu 11 Sep 2025 01:01:09 +0000
Files and hashes: 1: NkK7yD4owQPBfVogHt71ZyY02-g.crl (hash: bqFcinHmzPz7Org6F97wBPnsXbrVoc9YfNCIjZtZylE=)
2: saaFFJdprL2UcH3v0LL3zZpp7jc.roa (hash: YyF7BBYn0BiV4oWuG7tgrnT28h9nKay6fwuXu0twrBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:24:0a:63:03:4b:bd:77:04:1d:45:c3:11:b9:be:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Validity
Not Before: Sep 10 01:01:09 2025 GMT
Not After : Sep 11 01:01:09 2025 GMT
Subject: CN=530809f008c7954c0b0b60643d82487c88a3494d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:63:af:8e:72:ea:2d:24:41:dd:45:f4:a4:c9:
34:d8:69:f6:db:19:60:86:7b:f2:dd:f0:93:df:d2:
16:f7:7b:e7:96:d0:b9:49:f1:78:0d:6f:e7:42:ce:
a5:87:61:6b:14:59:4f:af:b7:9f:ad:20:f1:13:1e:
64:e7:12:5b:be:44:de:6e:99:fb:20:a2:af:04:65:
0a:74:6e:ff:98:3e:9f:8f:09:f8:9e:be:1f:32:0c:
42:98:65:5f:72:0b:43:57:20:86:2e:c6:fd:ca:8d:
6f:49:a7:ab:a9:50:7c:dd:49:18:b0:7e:cb:52:f3:
6c:f0:74:2b:bf:c2:91:9d:3b:77:fb:a5:69:4d:de:
50:58:08:5a:3a:9a:eb:1c:93:7e:c9:27:10:7a:e7:
70:fd:86:c6:72:40:76:d4:d4:02:00:a9:18:56:f5:
69:7e:0f:e3:69:d1:e3:7e:6b:bc:c7:a2:a7:2a:cb:
8c:84:c2:2b:a9:17:5a:64:fb:b7:dc:39:57:ee:a3:
5e:1a:26:13:9f:f1:4a:6a:85:93:95:26:6a:0e:d5:
c3:d2:a6:cb:26:c0:41:0f:38:7d:b5:f2:07:5d:5d:
4f:8b:c0:0c:f1:fc:63:76:1b:e6:81:21:a8:4c:1b:
82:25:8e:e1:1b:f1:6d:5a:53:3f:08:20:54:0b:a6:
1f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:08:09:F0:08:C7:95:4C:0B:0B:60:64:3D:82:48:7C:88:A3:49:4D
X509v3 Authority Key Identifier:
keyid:36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:13:aa:40:9b:e4:de:db:94:b2:8e:bc:ef:27:1b:f1:ca:31:
37:cc:82:09:11:9e:cd:bb:66:63:e0:79:bb:2f:45:11:bc:cf:
32:b8:3f:ef:55:12:28:34:2b:04:86:73:58:68:70:d5:42:7f:
54:ee:d3:8f:d6:f7:88:da:20:2a:ba:7f:9d:30:51:ac:77:9d:
21:5a:0f:10:be:a2:27:55:f2:2b:15:56:7d:96:5d:a5:66:a9:
37:62:29:9d:7e:21:c6:cf:dc:e8:5b:6e:51:33:ad:18:0b:b8:
c5:7c:a6:5b:a9:a6:e5:e9:ce:0a:24:c9:d4:5e:70:58:10:e2:
12:fa:ba:58:29:54:02:be:62:3b:91:43:b7:cc:54:53:ac:44:
a1:33:ef:e8:16:b7:d3:f5:cb:36:3e:d7:7a:6d:e8:73:52:af:
4f:4a:d1:08:ed:61:cb:18:02:18:9c:fe:4a:a0:0b:4f:d4:17:
5c:ed:52:21:bd:db:a4:49:f3:11:0e:b4:f6:95:75:10:61:ed:
87:e3:21:3b:31:2e:95:3c:eb:a4:dd:04:94:fb:13:9b:b1:4b:
9a:91:52:9c:f6:6b:bb:a5:c2:00:cc:0e:1b:fe:d7:f9:75:33:
82:fd:c2:ef:ca:a7:f0:fe:7e:d4:66:c1:10:7f:02:2d:dd:c1:
bf:8f:b0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:17:16 2025 by rpki-client