Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
File: nkz1EkerV_Um84ByWaeNKwJZBgM.mft (raw, json)
Hash identifier: 7QWQbUutYv9VhCYHNfrs3ZMOlXJsP7iubCn/DwmpZvI=
Subject key identifier: 02:0A:FE:DE:F4:A3:D1:08:8E:FD:7B:CE:A3:A4:76:91:FB:37:94:E2
Authority key identifier: 9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
Certificate issuer: /CN=9e4cf51247ab57f526f3807259a78d2b02590603
Certificate serial: 0199FCFD63F29F77FBDDC8CA62A9ADD8F738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 15:01:28 +0000
Manifest this update: Sun 19 Oct 2025 15:01:28 +0000
Manifest next update: Mon 20 Oct 2025 15:01:28 +0000
Files and hashes: 1: bUexMEG5KZ30YS3AFv2LLIm5VUk.roa (hash: 73jcglvdcT9moQ9QgtlZoUeROl6dwy33TWezKXRJ6GM=)
2: nkz1EkerV_Um84ByWaeNKwJZBgM.crl (hash: f4XT5tsmnHrm3yrRaoZj03U7jZj2NG1lQBvOkd4f8ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:63:f2:9f:77:fb:dd:c8:ca:62:a9:ad:d8:f7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4cf51247ab57f526f3807259a78d2b02590603
Validity
Not Before: Oct 19 15:01:28 2025 GMT
Not After : Oct 20 15:01:28 2025 GMT
Subject: CN=020afedef4a3d1088efd7bcea3a47691fb3794e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cc:51:fa:46:d0:19:38:2c:75:7a:8a:97:f2:
68:48:df:63:99:65:06:b1:fa:3e:c8:7e:a5:a9:8a:
13:7d:fd:25:24:22:b0:0f:17:b1:aa:2c:9f:eb:7d:
fb:98:47:99:8a:68:10:df:41:fa:66:b1:3c:0a:39:
16:56:7a:71:58:88:29:06:07:08:ec:92:75:d1:c0:
e6:cb:04:aa:74:fc:e1:6a:a3:f4:5c:d8:96:89:54:
4d:28:cb:cb:68:8e:18:be:01:e0:58:ce:fb:f6:c4:
0b:bd:fa:3a:2b:9d:20:d3:09:05:73:0e:e3:e3:b3:
cd:fc:ac:bc:21:98:4d:9c:59:ef:79:65:a9:68:91:
d1:76:16:8a:c5:ce:2a:10:c1:76:90:78:cd:8a:d0:
1f:02:4f:cc:2d:8d:42:06:2d:d3:49:a9:c0:bc:e7:
2e:3b:70:b6:48:41:a3:ca:6d:ff:ae:3d:77:c9:65:
12:da:3d:1c:f1:4f:e6:40:77:02:dd:e9:4c:24:60:
05:06:39:32:1e:9f:bb:be:dd:43:08:c5:4b:18:92:
77:27:67:92:ec:c8:a7:60:fc:17:a9:9f:79:18:16:
3c:81:cc:57:3e:5e:9b:06:0b:72:74:a3:a7:53:d0:
f8:61:a2:35:be:6d:bd:c4:fa:ac:93:36:83:16:da:
6e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0A:FE:DE:F4:A3:D1:08:8E:FD:7B:CE:A3:A4:76:91:FB:37:94:E2
X509v3 Authority Key Identifier:
keyid:9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:88:43:1f:09:d3:ec:a7:3f:24:ab:8f:5f:f2:08:e3:13:c4:
cb:84:66:1f:17:27:41:dc:83:8a:03:f7:62:1d:8b:a7:b2:27:
64:2f:24:f7:46:5b:ec:8f:dd:19:67:89:d0:23:4d:4e:ff:cb:
b0:a2:b6:8d:da:03:79:8a:c2:da:f2:be:8e:63:7e:a6:c2:a8:
82:dc:f4:2d:60:1e:a9:c0:5e:9f:4d:a4:ee:d3:10:3b:11:78:
63:ed:10:13:c4:b6:d3:08:fc:04:3b:7b:bd:10:e6:00:da:8f:
ab:50:6b:50:3b:39:a1:58:95:65:3f:a6:1b:99:ef:0d:2b:1f:
1d:82:cf:1d:35:3e:c2:e4:d9:0c:3b:01:43:63:ec:73:06:cd:
ef:9e:6d:a1:1c:6c:ff:81:e3:a4:c8:48:24:f6:30:ad:1a:23:
aa:00:b7:b2:fb:e1:9f:0a:39:44:21:d3:66:da:d5:cc:15:e5:
1d:f0:d7:06:13:49:bd:64:66:36:b3:a0:b5:c0:03:53:be:9e:
84:bf:97:4a:15:ac:02:ef:5c:ea:12:ea:22:c3:60:61:a9:f0:
23:56:70:8f:19:5f:93:bf:c6:57:8a:0d:7c:7d:21:c4:39:6d:
66:c4:77:64:76:27:c2:67:62:8c:ec:71:eb:ea:e0:f3:aa:fb:
55:73:8a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:26 2025 by rpki-client