Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
File: nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft (raw, json)
Hash identifier: pzDozFlHpZzkKiijOPG3TDsqsj0ZhTdRzAyBqd7Di1I=
Subject key identifier: FA:F0:06:21:61:8C:E9:C1:EB:17:23:DF:2A:4F:CB:19:1A:B8:75:DE
Authority key identifier: 9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA
Certificate issuer: /CN=9e4372f63932ba7fe8f161b564b93860614a80ba
Certificate serial: 019A71B8548BB412FEDA9E9746D10188B318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
Manifest number: 0712
Signing time: Tue 11 Nov 2025 07:01:36 +0000
Manifest this update: Tue 11 Nov 2025 07:01:36 +0000
Manifest next update: Wed 12 Nov 2025 07:01:36 +0000
Files and hashes: 1: TaAxyGE0YZ7m-xRwM6T1q9wMqQw.roa (hash: 76tscvyJdodgkrjTmEZQdEHR921zYs8tliL/2ouT7RA=)
2: nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl (hash: Fw3+8CHEMjtR1AXC5jAzsfuESCTPZNv2MXEUhaWem9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:54:8b:b4:12:fe:da:9e:97:46:d1:01:88:b3:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4372f63932ba7fe8f161b564b93860614a80ba
Validity
Not Before: Nov 11 07:01:36 2025 GMT
Not After : Nov 12 07:01:36 2025 GMT
Subject: CN=faf00621618ce9c1eb1723df2a4fcb191ab875de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0c:f4:c9:1c:77:bb:7c:d0:c4:24:8c:1d:b2:
30:b5:66:2c:ec:b0:15:e0:46:9f:46:af:d7:2b:e6:
8d:5e:71:1f:c8:c0:9c:8d:7c:8e:57:c3:c3:7a:40:
89:5d:2a:41:4d:31:2a:fc:3d:e2:af:6d:49:8a:f3:
ce:0f:06:b7:b5:98:3d:ec:01:0f:f8:b6:ac:66:cd:
10:f3:7f:0a:51:43:2f:16:cc:3a:48:35:80:ee:8c:
69:1c:32:10:4b:48:60:09:8d:3d:5d:d3:fc:e3:05:
cf:c8:9e:e0:b4:2d:17:f5:51:65:bb:9a:e4:80:48:
2a:ed:e5:de:f1:7c:4c:ac:8e:36:cb:91:22:03:fe:
2a:cb:51:74:19:0e:0b:e2:b1:ed:50:1a:48:10:17:
fd:97:80:74:ac:e0:52:f9:1a:ce:67:d3:f4:26:cc:
e5:7e:22:cb:18:ac:0c:c0:a0:2c:0d:1b:34:f8:51:
9f:d5:f7:1f:6b:4c:eb:bb:70:e7:53:08:95:8b:99:
36:93:15:47:23:27:e6:7b:09:3a:60:c9:9b:2b:41:
40:85:dd:09:3b:d8:a2:13:23:1c:e1:c9:97:a1:41:
0d:33:57:16:55:36:07:90:b5:c4:ab:fa:40:63:fe:
22:68:69:cd:a2:c3:f0:a3:fc:cb:12:aa:5a:8b:88:
ef:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F0:06:21:61:8C:E9:C1:EB:17:23:DF:2A:4F:CB:19:1A:B8:75:DE
X509v3 Authority Key Identifier:
keyid:9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b0:e7:dd:74:fd:9b:7c:59:9d:25:1f:0e:3c:a2:34:66:cb:
a2:39:26:fc:e0:ee:5e:53:df:1f:d1:0d:03:85:b9:ad:0e:2d:
d3:9f:28:c5:ba:01:f9:68:a6:3a:4b:65:90:af:5d:33:d6:0a:
ad:eb:3a:e8:3a:3e:2d:15:c5:19:93:94:90:61:f6:8d:4c:75:
7a:45:47:5d:53:61:ba:fc:6e:d4:92:dc:7f:f1:dc:bd:c9:b2:
55:cf:b3:6e:a4:e1:71:ee:3f:3f:0a:10:80:43:37:96:d2:d7:
7f:9b:9b:b1:42:77:7b:72:39:5a:61:03:ea:d9:48:99:b3:93:
88:61:c9:f6:00:0c:1a:e6:99:e9:21:61:4d:07:f7:db:d1:49:
ad:40:ba:0f:58:ee:bf:4c:25:5d:62:52:80:9e:d8:23:74:ed:
ca:ac:e7:73:2d:13:fa:8a:15:e6:63:c4:1e:51:2a:97:96:cd:
3f:53:05:70:d9:8e:98:bd:b6:80:a4:ae:e5:1d:92:bb:4b:18:
3b:bf:c2:4a:ea:66:22:83:26:d3:2b:c4:ea:36:86:e6:3d:b8:
5f:25:fa:be:20:fe:c6:35:39:73:ad:31:3e:62:fd:52:78:7e:
ce:16:0f:bc:e1:f7:3a:d5:66:40:65:22:13:03:3a:5c:03:44:
f6:bc:c9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:35 2025 by rpki-client