Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
File: nKihMlGaJClJSXNjuMqjPnLGc_g.mft (raw, json)
Hash identifier: 2Nxc2Y0KUjsgFJWZQ1UGrTo9F+B3c9cZZ9XfOqB424Y=
Subject key identifier: BC:85:E1:43:B0:6B:0E:98:CA:28:48:57:8F:26:3F:47:D7:BC:D0:5B
Authority key identifier: 9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
Certificate issuer: /CN=9ca8a132519a242949497363b8caa33e72c673f8
Certificate serial: 0199334962178F42045593930CAB868B18E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
Manifest number: 1079
Signing time: Wed 10 Sep 2025 11:01:11 +0000
Manifest this update: Wed 10 Sep 2025 11:01:11 +0000
Manifest next update: Thu 11 Sep 2025 11:01:11 +0000
Files and hashes: 1: dXm9nDAbHEfPr8e0rvdta5vcQCQ.roa (hash: ZAX5/DrLWdB1icFKrgXw3Y2Wbffkldc6zIYnws0ruBM=)
2: iRubAGtbRFzHiw3kU73WMgNN_Ew.roa (hash: zVFcmjx3cq29/V7ruFQJSBuo9AC0OuJEahRAn89+q2w=)
3: nKihMlGaJClJSXNjuMqjPnLGc_g.crl (hash: 10TGGxoMzuw2+DbFA/khrL9JMF3xrLzlFUeMvCxU8cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:49:62:17:8f:42:04:55:93:93:0c:ab:86:8b:18:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca8a132519a242949497363b8caa33e72c673f8
Validity
Not Before: Sep 10 11:01:11 2025 GMT
Not After : Sep 11 11:01:11 2025 GMT
Subject: CN=bc85e143b06b0e98ca2848578f263f47d7bcd05b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3d:4e:62:8a:fe:eb:37:3f:97:76:4d:17:37:
d2:c7:fc:d7:60:39:2e:6e:43:f8:39:66:78:f3:c0:
16:b7:7a:24:69:dc:b5:10:d6:85:b9:a3:99:a4:5c:
2f:30:17:58:e5:4d:7e:7e:55:8f:a7:d4:02:f7:83:
ca:58:8d:c6:27:72:45:21:fc:a8:a3:a6:9d:b8:17:
c5:ef:62:23:5a:f3:fa:6c:6e:ba:aa:6f:e3:2f:0d:
3a:95:6f:bb:cf:a9:ae:fc:47:85:a8:06:97:c7:7e:
bd:11:ec:24:46:4b:14:ed:40:9c:40:62:b1:aa:ec:
ef:a7:3b:46:32:e8:cf:30:0c:37:0e:55:78:a5:66:
4e:5a:2e:3f:17:60:f7:05:ff:f0:35:49:25:7e:be:
8c:2f:b2:13:a5:64:34:3d:6a:60:2a:7c:85:12:46:
1e:ca:1f:08:81:f5:93:28:d9:a9:13:08:f0:30:ef:
35:98:65:dc:6c:6b:f3:82:9a:d4:73:18:8f:c4:cc:
5b:28:27:db:5a:e8:cf:14:93:cc:17:4e:6f:39:1a:
76:89:3c:a9:a9:05:10:31:54:65:38:e4:16:30:09:
da:52:be:62:af:16:f6:1f:98:b7:19:06:7c:f9:0d:
d3:cf:18:5a:8f:24:41:d6:c3:9a:69:04:0f:94:de:
b6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:85:E1:43:B0:6B:0E:98:CA:28:48:57:8F:26:3F:47:D7:BC:D0:5B
X509v3 Authority Key Identifier:
keyid:9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:03:d4:26:4c:99:a7:03:6a:eb:51:d6:ee:aa:07:2f:01:11:
82:95:1e:84:7a:b7:20:eb:cd:78:ff:fd:e2:88:91:1a:44:4e:
d0:ae:bd:02:8b:19:dd:cc:3f:f7:18:d5:f3:47:24:c0:07:af:
f1:29:2a:d7:60:be:aa:bb:37:c4:41:6f:5e:d3:4e:2f:05:db:
d5:6e:40:d1:f5:7c:24:ac:99:20:eb:49:d1:5f:5b:22:88:80:
38:78:35:c2:86:e6:27:20:00:7d:23:5c:3c:b5:3e:69:15:f8:
36:70:40:a6:be:6b:82:63:97:65:b0:75:b3:f2:a4:89:0f:45:
78:40:a1:f0:50:ea:e2:12:bc:44:d8:89:97:b5:59:44:2a:19:
11:44:36:cd:68:52:e4:b0:9d:2f:5c:08:2f:20:84:cd:2d:e8:
a9:34:b0:87:97:33:c1:a9:de:d1:c7:87:d4:b4:2d:d7:ad:4e:
bd:3a:04:6b:f2:ad:98:07:28:dc:16:ab:40:2b:42:fa:74:e8:
3d:92:da:e1:c6:60:62:85:a8:3b:f8:f9:5d:fe:df:26:62:1b:
e3:2f:0e:65:c5:06:06:e9:c2:7a:b8:86:f7:5c:30:02:ae:2d:
2c:c2:48:fd:5d:05:22:84:36:aa:00:3c:7c:b6:87:b0:d2:77:
11:d0:b4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 21:12:49 2025 by rpki-client