Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
File: nKihMlGaJClJSXNjuMqjPnLGc_g.mft (raw, json)
Hash identifier: TuYMNtzqsmFzJiYW44RIZ/dv+kcO5yFODuC0KNlpOvs=
Subject key identifier: EE:FB:3C:AA:9D:A5:E1:D9:59:7B:62:C5:3F:C3:D9:7F:04:B1:E7:C8
Authority key identifier: 9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
Certificate issuer: /CN=9ca8a132519a242949497363b8caa33e72c673f8
Certificate serial: 019A2E566068AFE31C1229CB09CA201CF115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
Manifest number: 10FB
Signing time: Wed 29 Oct 2025 05:00:03 +0000
Manifest this update: Wed 29 Oct 2025 05:00:03 +0000
Manifest next update: Thu 30 Oct 2025 05:00:03 +0000
Files and hashes: 1: dXm9nDAbHEfPr8e0rvdta5vcQCQ.roa (hash: ZAX5/DrLWdB1icFKrgXw3Y2Wbffkldc6zIYnws0ruBM=)
2: iRubAGtbRFzHiw3kU73WMgNN_Ew.roa (hash: zVFcmjx3cq29/V7ruFQJSBuo9AC0OuJEahRAn89+q2w=)
3: nKihMlGaJClJSXNjuMqjPnLGc_g.crl (hash: U/lQSnIu5TaAk5ykcGbzilLXJpy7Bz5Pm1rf1zqtoWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 05:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:56:60:68:af:e3:1c:12:29:cb:09:ca:20:1c:f1:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca8a132519a242949497363b8caa33e72c673f8
Validity
Not Before: Oct 29 05:00:03 2025 GMT
Not After : Oct 30 05:00:03 2025 GMT
Subject: CN=eefb3caa9da5e1d9597b62c53fc3d97f04b1e7c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b0:1e:21:6a:aa:30:cc:51:0a:3a:50:86:e1:
85:34:7c:d1:e7:28:45:2f:2d:fb:b7:aa:76:c9:93:
be:19:76:0b:7d:d4:7f:d6:48:d7:22:b9:99:93:46:
f5:b6:46:32:03:9a:3b:e3:0a:a0:f6:03:7d:16:65:
0a:0b:7d:d2:d2:bf:bd:42:63:88:d5:a4:fa:a7:95:
89:89:4c:10:f1:65:98:fa:76:0c:f7:a1:a9:4f:36:
ac:12:41:ee:a3:c4:b3:54:bb:42:b7:59:f0:10:be:
be:5a:c7:84:9e:30:b3:b1:3c:d0:14:1a:9c:b3:d8:
59:1f:ba:48:fe:aa:9b:fe:e7:bb:38:22:29:44:ec:
72:0d:5d:dd:12:eb:c0:e2:5b:b6:6f:0e:93:86:d7:
ea:04:50:61:92:d9:0e:bb:c7:f0:98:3a:49:bd:7b:
e0:68:9e:35:61:d6:8f:82:32:f6:9c:fc:d7:f1:a6:
45:54:02:14:76:ea:03:6b:c6:57:79:8e:b6:1a:48:
e7:03:83:e8:5c:c5:d7:63:83:50:f8:aa:13:3d:0d:
55:d2:7b:e4:b7:da:b6:8b:d7:77:f2:9e:0c:98:08:
5a:44:ff:c3:7d:f1:99:72:66:3c:3f:65:b0:28:11:
18:59:c0:c3:9a:e7:e3:9a:84:04:c8:be:00:50:6c:
bb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FB:3C:AA:9D:A5:E1:D9:59:7B:62:C5:3F:C3:D9:7F:04:B1:E7:C8
X509v3 Authority Key Identifier:
keyid:9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:54:71:d3:81:81:bc:2b:c8:42:0f:e2:b1:78:49:fe:eb:c5:
14:fd:56:95:c3:64:42:bd:e7:27:b2:a6:a7:3b:9d:8f:b2:47:
d8:90:23:b0:56:0f:e8:39:09:06:e9:6a:96:a1:8f:b9:b1:0a:
c0:55:fb:f4:e4:f4:59:9e:7b:09:ff:d8:fd:6f:30:c8:28:c2:
f8:97:5d:68:c5:86:61:ab:00:38:4f:5a:bb:3b:ce:c7:74:4c:
b0:df:23:e5:e2:77:9f:2d:df:c6:5e:a5:e4:82:ee:31:b8:87:
6e:7f:12:95:83:23:6a:b6:2b:c2:04:d0:f8:dc:51:d3:47:14:
77:8b:49:9e:d5:46:e8:bc:16:6b:ef:9d:7a:9c:eb:68:1e:aa:
b4:f0:e7:07:01:4a:b0:26:d2:cb:6c:79:de:04:e6:a9:3d:7e:
e3:c6:65:fd:34:1e:0a:d6:5e:5f:47:d5:3e:9e:06:dc:1f:54:
24:71:24:87:2c:23:55:28:73:04:14:f9:38:76:33:f9:1d:f2:
f3:a4:20:c3:72:a5:67:b5:63:b3:04:52:97:dc:02:c7:69:64:
1a:80:24:ff:54:03:7a:fa:c3:71:e1:28:bd:67:f9:07:29:db:
4e:c2:c6:14:12:27:f0:f6:0a:db:c4:01:53:d9:81:db:60:7b:
5e:ad:6f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 15:43:31 2025 by rpki-client