
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
File: nkQennBa2j-cHoJ80nbb0JdIdgg.mft (raw, json)
Hash identifier: 1zxj42vnKjsupqt4/vGRpeHLc2uOo/RY7R7y+0/KpGE=
Subject key identifier: AA:62:B5:71:C1:86:7E:08:BC:67:1D:50:A9:D9:CD:65:2E:F1:FC:71
Authority key identifier: 9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
Certificate issuer: /CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Certificate serial: 0199FC8FB25D682F32A996ADFA93CCE2164F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
Manifest number: 1061
Signing time: Sun 19 Oct 2025 13:01:39 +0000
Manifest this update: Sun 19 Oct 2025 13:01:39 +0000
Manifest next update: Mon 20 Oct 2025 13:01:39 +0000
Files and hashes: 1: 7ySzESdDI-Eg0Y6xfFTDZOEQmZk.roa (hash: pTSWdDbQ1VFptqQJI8HP8UxKCCjXnA4njHY5srW26VY=)
2: BJvFiCQhGiEcXR3ndqL7T5BbDaU.roa (hash: Z+0E4ULnb/cJktOfFSiZcNmisROmxseIx6dqsZlDt4s=)
3: DfN89u0ZvthZxMTnUcXpfMOlKTs.roa (hash: msvl5pQNrCHYRzIqm+ZhzceMHlWNrK7pVc4fvVU8Aig=)
4: nkQennBa2j-cHoJ80nbb0JdIdgg.crl (hash: l1Awnqesz2mULPx4i1Q7EFcwoZHF3LsR1/rKpu39kTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:b2:5d:68:2f:32:a9:96:ad:fa:93:cc:e2:16:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Validity
Not Before: Oct 19 13:01:39 2025 GMT
Not After : Oct 20 13:01:39 2025 GMT
Subject: CN=aa62b571c1867e08bc671d50a9d9cd652ef1fc71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2a:19:57:1a:62:7e:d5:7e:a0:4f:3e:50:c9:
bd:1b:e5:de:3a:83:2b:f0:96:5a:ce:27:f6:a9:2b:
fe:9c:ab:68:f7:f6:98:1a:56:b4:e8:6c:01:56:45:
8e:67:78:8c:1f:b5:23:08:eb:b1:53:e9:c3:ad:4c:
8e:da:d0:c0:52:1a:2a:e9:08:c8:ca:a7:61:c4:b2:
a3:56:0b:49:2f:af:13:31:b3:a9:68:4e:da:cd:36:
c4:87:8f:93:34:14:19:d1:dc:a5:11:db:40:15:be:
37:50:21:9e:f2:b3:63:66:2f:18:ee:06:41:ad:c1:
b2:2b:32:16:dd:1a:af:77:08:59:d2:72:5b:b7:6d:
d2:b3:8d:92:cd:8b:2b:ae:18:de:13:6f:8f:c2:db:
2f:bc:6a:68:4c:32:72:e4:e8:66:68:ab:ae:0f:fb:
92:f2:b0:46:a0:dc:31:a2:18:55:18:97:11:ee:23:
c0:18:7c:24:8f:87:da:6e:a0:cc:23:c2:66:78:54:
a9:32:b7:e8:87:bd:f5:91:ed:d3:47:47:33:6a:2c:
77:61:ae:c4:21:ab:08:40:64:d3:2d:07:76:f3:0a:
3a:69:52:6f:02:f2:08:3c:41:a9:4b:a5:42:82:61:
64:8a:70:33:06:a6:6d:47:8d:55:c7:ab:86:2e:5d:
4d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:62:B5:71:C1:86:7E:08:BC:67:1D:50:A9:D9:CD:65:2E:F1:FC:71
X509v3 Authority Key Identifier:
keyid:9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a7:ff:ee:1e:ee:3c:d3:a8:e4:e0:15:2a:e8:26:80:65:a0:
e5:b3:fa:e6:a1:bb:eb:70:b8:a5:bb:d9:f5:1c:6e:3f:86:6a:
5a:61:8d:65:24:6f:ab:45:00:bd:04:53:f5:31:dd:a1:0d:4e:
22:d6:a2:10:7a:8a:96:f5:3f:32:cc:50:09:f2:ca:2f:fe:17:
2b:5c:54:d7:e5:ac:8b:fe:a9:8e:fc:0c:45:57:ba:35:9b:2d:
0e:92:00:8f:21:c6:48:16:68:60:90:b7:74:fd:ee:8b:3f:f6:
a1:75:fc:e6:36:47:d0:51:85:f7:31:27:e1:27:6a:19:87:cd:
99:06:f2:3c:23:f7:b8:0e:b9:7f:01:70:c0:00:b3:49:5c:f9:
d2:4d:62:9e:69:7a:e4:70:26:bd:cc:64:15:05:44:68:eb:82:
71:33:30:43:a5:6e:12:22:63:e5:ad:aa:38:93:27:12:0a:22:
b4:cd:8b:11:0c:af:aa:af:24:c7:b1:15:f1:be:65:d0:88:af:
6c:c1:c9:89:4c:f9:7d:12:ac:4c:28:f0:17:a7:fe:4e:64:9b:
50:ea:4b:c1:b4:a8:d5:75:8a:72:b7:b0:2c:3a:c6:be:54:74:
77:8d:33:fa:86:25:f6:80:1c:76:98:41:a1:9e:36:0b:27:95:
7c:bc:d8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:28 2025 by rpki-client