Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
File: NkYULOMpCrZ4bT0w8mteQf1oTd4.mft (raw, json)
Hash identifier: 6ZFjMnslgi0ncg70flo9YVLvwTFt/H9FH3enAhPMAGM=
Subject key identifier: FC:04:E1:F2:21:94:2F:28:5F:9F:7B:A2:53:05:CD:98:25:A5:EE:1A
Authority key identifier: 36:46:14:2C:E3:29:0A:B6:78:6D:3D:30:F2:6B:5E:41:FD:68:4D:DE
Certificate issuer: /CN=3646142ce3290ab6786d3d30f26b5e41fd684dde
Certificate serial: 019A274278D3C8806858C38CB06E8EEC6570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
Manifest number: 0AD6
Signing time: Mon 27 Oct 2025 20:00:58 +0000
Manifest this update: Mon 27 Oct 2025 20:00:58 +0000
Manifest next update: Tue 28 Oct 2025 20:00:58 +0000
Files and hashes: 1: NkYULOMpCrZ4bT0w8mteQf1oTd4.crl (hash: +rjIxGXWcMxg2enQeIqbIHIx7rgjZcNjIsI9uQqLnXY=)
2: _1qhZEmD1ZR0wevnSQ5eeTD9plU.roa (hash: ZVkFLKtKLY5Jyd68UAmKFP29SRBsL9mEyi4TVzPBvdA=)
3: yrfnq6Apo3g6hYK2SXicNIxd3BQ.roa (hash: mz8tGW+kk5vYLIpkvgBjBz5ynzM4w4t5pl379UMfAPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:42:78:d3:c8:80:68:58:c3:8c:b0:6e:8e:ec:65:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3646142ce3290ab6786d3d30f26b5e41fd684dde
Validity
Not Before: Oct 27 20:00:58 2025 GMT
Not After : Oct 28 20:00:58 2025 GMT
Subject: CN=fc04e1f221942f285f9f7ba25305cd9825a5ee1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a0:b2:ce:b1:2a:23:4e:1b:f3:68:b5:6a:b6:
80:b1:a7:c1:9e:8e:9e:cd:1f:e4:9b:6b:08:8a:e9:
80:40:35:40:57:3f:e8:03:8d:d5:2d:83:b8:4c:7b:
d1:2c:51:73:e1:bb:c6:75:27:82:57:b2:a6:b3:b8:
94:5d:dd:d5:dc:ce:c6:ab:3e:e9:ed:67:e3:8b:42:
5e:69:df:ad:82:b5:a1:22:13:1f:78:90:65:94:a6:
b4:0b:bb:8e:bc:79:93:f0:0b:de:ae:6e:05:05:ee:
8d:76:a9:93:1d:eb:ed:c6:c4:b7:44:88:06:ea:87:
03:86:45:35:e7:34:27:64:06:da:de:56:fe:8c:2e:
1f:4f:21:f4:ad:2b:ee:9b:e4:7b:66:25:f0:27:4f:
bd:2c:da:bd:93:f7:9f:7f:f4:75:22:1e:6b:75:2a:
49:f3:35:5e:a9:2e:01:e9:9a:7c:32:dc:d0:cf:c3:
0e:ca:2d:ae:38:e6:66:44:c0:13:1d:b2:85:54:d6:
f1:be:eb:eb:aa:75:73:92:6d:eb:b1:7c:e8:a7:81:
f9:3f:7c:97:c6:3a:e8:50:7e:10:d9:e8:76:49:e0:
3c:05:fe:17:14:a9:dd:69:c4:fe:42:87:b4:18:d8:
3f:71:10:28:ac:d9:8e:ea:97:59:05:a5:60:cd:8e:
c7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:04:E1:F2:21:94:2F:28:5F:9F:7B:A2:53:05:CD:98:25:A5:EE:1A
X509v3 Authority Key Identifier:
keyid:36:46:14:2C:E3:29:0A:B6:78:6D:3D:30:F2:6B:5E:41:FD:68:4D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:76:47:2e:b1:f1:ed:ba:f4:a3:7c:86:56:5c:82:b1:ef:73:
43:54:5d:ef:fa:cd:27:39:7b:e9:2f:85:dc:ee:9d:ca:1e:40:
13:34:ed:90:52:e2:04:76:73:01:65:ca:20:68:d9:ce:61:e1:
bb:b3:c6:09:f4:6b:3e:89:ad:8d:f5:92:83:a2:15:04:b6:a8:
82:bc:9c:be:c7:5a:0d:47:6c:f0:54:10:92:c8:55:46:c3:5e:
3b:92:39:38:a1:ce:63:29:f0:ca:5d:f3:00:1d:12:1a:25:b5:
09:f3:af:11:4a:f2:9f:4d:61:27:80:8a:1e:28:7e:bb:4d:e2:
bb:1f:4a:90:4e:03:af:a5:d5:2b:5c:83:0c:e6:cf:61:3b:8d:
9a:0f:dc:13:b3:32:26:e0:64:55:f1:71:7b:c2:53:bf:0d:09:
6a:5e:af:3d:fe:72:08:9a:c3:fd:e2:04:25:19:bb:6c:81:16:
ae:f9:b8:15:2b:ed:03:b1:f9:b9:2d:73:95:fb:fd:0a:d9:ad:
68:2d:22:fa:a1:6b:0b:25:a3:5a:a1:7a:2d:9b:e7:59:a1:75:
ef:6e:44:b3:2b:c5:c3:41:35:a1:b7:3c:a2:69:97:e5:61:84:
66:f2:a3:fa:78:a6:69:b5:99:ee:46:1f:6c:75:d4:87:a3:02:
c5:48:48:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:23:12 2025 by rpki-client