Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
File: NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft (raw, json)
Hash identifier: m3mSk5xsbv33WW6eLnq6VZEF4IcTr+XgkQVtmriRzg8=
Subject key identifier: 4D:82:84:74:B4:82:B6:20:4C:E1:1D:A9:71:C3:23:EC:A1:A6:63:FD
Authority key identifier: 34:A6:3D:C8:61:20:E8:7F:4C:FF:8C:59:AF:32:61:E6:E1:29:2F:D9
Certificate issuer: /CN=34a63dc86120e87f4cff8c59af3261e6e1292fd9
Certificate serial: 019A7293D46CDD98D08D7E5C25568B2AB427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
Manifest number: 1056
Signing time: Tue 11 Nov 2025 11:01:22 +0000
Manifest this update: Tue 11 Nov 2025 11:01:22 +0000
Manifest next update: Wed 12 Nov 2025 11:01:22 +0000
Files and hashes: 1: MjfPB6z00e-ff7RNJtIi20gDUz8.roa (hash: Cpw1zTo9jE0fDsY0ux+7L1DgxTy3Nnzm8fXHw47pw5Q=)
2: NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl (hash: FQKKHL6UuQ1vAZs2gA1aYsB0IN7MOV2YjDqXllgJt+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:d4:6c:dd:98:d0:8d:7e:5c:25:56:8b:2a:b4:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34a63dc86120e87f4cff8c59af3261e6e1292fd9
Validity
Not Before: Nov 11 11:01:22 2025 GMT
Not After : Nov 12 11:01:22 2025 GMT
Subject: CN=4d828474b482b6204ce11da971c323eca1a663fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ab:00:68:7b:8e:d6:9e:71:49:dd:a2:18:8d:
b0:ea:b9:ce:32:52:d5:07:8e:6b:6c:fa:3f:04:ce:
a9:a5:21:2c:64:cc:88:d4:f6:b4:98:7b:68:70:a6:
52:42:e8:0a:30:d5:b9:08:e5:b8:91:8d:b8:b4:7c:
e6:6c:6c:1f:75:d2:a6:70:b5:70:6f:79:0a:c9:04:
a5:dd:b8:82:95:26:be:dd:e5:06:84:99:76:21:58:
01:cc:b9:0c:79:d3:11:86:f1:9a:1f:b1:01:2e:35:
67:d5:f4:ef:06:8a:3e:76:b2:98:11:4f:fa:f0:33:
56:65:5c:74:80:91:0a:10:b0:10:f1:e2:61:ee:2f:
bc:24:7a:4f:93:44:e5:39:a7:91:ec:c5:62:84:58:
54:75:40:9f:31:18:7e:be:3b:7d:ee:68:3a:3a:be:
11:82:d8:0e:8e:ab:ab:8e:7d:54:bd:61:03:83:70:
60:ed:97:aa:96:57:ff:ae:7f:64:f7:17:70:f2:13:
f3:f6:93:58:ba:2c:8a:c3:3b:ec:47:3e:39:c4:e2:
6c:f3:da:1b:15:e1:5e:f3:e3:84:88:1e:2e:d5:1f:
bf:00:e0:54:3c:8d:f7:cd:f9:18:fa:ab:27:ee:04:
b7:7a:36:3b:15:0a:57:4b:23:13:63:c2:7e:65:e7:
13:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:82:84:74:B4:82:B6:20:4C:E1:1D:A9:71:C3:23:EC:A1:A6:63:FD
X509v3 Authority Key Identifier:
keyid:34:A6:3D:C8:61:20:E8:7F:4C:FF:8C:59:AF:32:61:E6:E1:29:2F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ca:9c:90:6c:20:15:dd:ec:bc:4b:86:94:2e:a7:63:2c:30:
70:e8:c0:84:86:58:70:ef:43:35:f4:df:24:50:04:e6:71:83:
67:38:b3:a6:84:05:4d:1a:c0:24:e8:e6:9f:6f:55:1e:c0:82:
2d:61:e0:2a:86:23:c9:73:9f:5f:39:3b:6c:9e:d2:2e:64:43:
c4:fc:4d:b4:b2:bf:a5:9d:18:b7:68:6c:17:94:6b:4c:b8:4d:
ae:38:c3:e8:de:96:f2:c0:2f:e5:31:c7:b2:19:8d:1b:03:7f:
79:2c:c7:f4:fb:fe:73:59:ee:bc:24:f5:9f:f2:c5:9d:82:23:
d4:5e:9c:91:47:a2:76:0e:64:d0:f1:b5:16:ab:db:06:b1:79:
8c:85:81:07:c0:4f:ee:cd:9b:ce:ff:3a:1f:1b:91:17:dd:c6:
48:e1:c1:a6:ed:c3:6b:1f:4c:24:00:b7:21:aa:83:e9:32:30:
41:0f:b6:9c:c0:35:c2:d9:8b:ea:ba:78:88:fb:14:31:7f:77:
85:b3:78:ce:48:a0:cd:5b:b4:28:60:0e:f7:b5:f8:d9:e9:de:
52:87:6d:c5:f8:36:31:da:b2:58:3e:fe:85:b5:6e:dd:fb:f9:
dd:b2:0d:d1:c4:2f:7f:70:76:08:75:83:5f:8c:5e:3d:6a:1b:
2e:42:46:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:45 2025 by rpki-client