Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
File: nkJ08Tm9Zpqu93TWUDso2ZZje70.mft (raw, json)
Hash identifier: gPheRTLgKtEZYgvTlXb91ly3HPcd3MmbQ8P8JVba5gw=
Subject key identifier: E6:FA:0B:0F:78:59:37:20:0C:B3:EB:6B:67:0A:6F:E7:32:64:31:C5
Authority key identifier: 9E:42:74:F1:39:BD:66:9A:AE:F7:74:D6:50:3B:28:D9:96:63:7B:BD
Certificate issuer: /CN=9e4274f139bd669aaef774d6503b28d996637bbd
Certificate serial: 0199FC58F45D7872B05B000D68C672BCEB17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:01:52 +0000
Manifest this update: Sun 19 Oct 2025 12:01:52 +0000
Manifest next update: Mon 20 Oct 2025 12:01:52 +0000
Files and hashes: 1: j4Iq2zixx3mYag3J5EZ9oVMKB3Q.roa (hash: /Gl9L/9VfxRkLzepVwRrDXgXI17GQGF8IKxBmlZI9QI=)
2: nkJ08Tm9Zpqu93TWUDso2ZZje70.crl (hash: fcjGkM6diPJR310iv/h6xWNlkaZQTq1TZkHs/YFMNuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:f4:5d:78:72:b0:5b:00:0d:68:c6:72:bc:eb:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4274f139bd669aaef774d6503b28d996637bbd
Validity
Not Before: Oct 19 12:01:52 2025 GMT
Not After : Oct 20 12:01:52 2025 GMT
Subject: CN=e6fa0b0f785937200cb3eb6b670a6fe7326431c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:58:e8:be:7a:54:eb:ba:68:79:63:44:0e:f8:
2f:1e:01:f7:f8:0c:1f:cb:61:3c:4b:e0:7a:8a:52:
86:e2:28:bc:64:c6:bf:31:18:0c:28:04:38:7f:65:
54:66:ef:52:d0:69:7c:01:d2:38:31:01:ca:01:86:
20:b5:46:36:95:13:0a:f1:e1:cd:9c:51:bd:b2:21:
75:3b:5c:b0:48:76:12:93:d7:77:13:f8:84:f9:3b:
11:cb:b8:61:8b:1b:49:fd:5b:88:92:e3:87:70:bb:
c8:21:39:58:a4:cc:f6:77:5f:c2:2f:6e:ac:25:a3:
89:8b:84:93:ba:41:7d:26:34:23:92:93:25:de:0c:
18:db:e4:b1:15:2a:16:29:7e:a7:3e:fd:11:ba:7a:
08:2d:52:b2:f5:83:0e:96:18:ae:75:60:c7:d2:2e:
1d:93:50:02:11:20:83:73:6c:70:4e:e1:ca:41:5d:
fd:5f:45:35:15:56:1e:15:20:04:c3:58:c6:0c:6e:
ac:0f:ef:b9:57:4c:92:28:a8:d4:f6:cb:33:2d:0c:
dd:51:80:7a:ef:b8:b4:0e:be:6e:ae:8c:17:a6:2f:
63:42:60:6e:d4:68:ed:27:3c:2c:13:c9:cb:43:3b:
e9:48:26:8e:19:68:bf:1a:8c:01:df:db:1a:a3:02:
cf:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FA:0B:0F:78:59:37:20:0C:B3:EB:6B:67:0A:6F:E7:32:64:31:C5
X509v3 Authority Key Identifier:
keyid:9E:42:74:F1:39:BD:66:9A:AE:F7:74:D6:50:3B:28:D9:96:63:7B:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c4:86:f6:eb:f8:61:b2:55:da:19:f4:b7:80:5a:4d:ff:75:
86:75:1f:fa:22:f7:99:f8:5a:d3:66:50:a7:66:f8:37:b9:c2:
fa:09:a8:25:5b:07:6b:63:23:14:3e:9a:a4:92:ec:b2:8c:93:
e6:48:ca:b8:63:98:06:f8:f8:69:2c:3f:3d:e1:ea:22:63:fc:
24:a4:a1:62:07:b4:a1:42:01:5a:ae:77:e0:f1:89:d2:c9:0a:
85:70:cd:fe:ed:ac:45:0e:da:76:6d:25:d9:cc:18:b3:71:23:
58:59:59:5b:8b:36:63:b7:25:76:90:de:56:e1:54:30:4b:ae:
16:0c:12:db:37:76:c4:8c:eb:77:a7:58:91:99:c1:08:31:8c:
e7:9a:c1:12:98:13:a0:4f:a3:16:68:8f:4b:15:c2:4f:60:6c:
99:95:20:17:1e:b9:fe:03:8a:1e:89:fd:7c:3f:59:60:77:0e:
cd:8e:66:16:55:d1:15:ad:40:e6:31:c2:6e:1f:77:db:cf:71:
46:ab:74:d5:d4:fc:33:37:bc:6c:cf:77:a0:3a:77:d7:18:4b:
65:68:c4:0c:03:d2:64:a1:c3:e1:48:71:71:32:63:db:12:8d:
53:b7:6c:65:06:f5:db:0a:18:6e:0c:45:72:f2:05:99:cf:a8:
24:6a:fa:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:23 2025 by rpki-client