Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
File: nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft (raw, json)
Hash identifier: ftHlL/yDz8zzPpxXi50/Yyhd9O4KvaHAlJufmd8/YGg=
Subject key identifier: 71:A0:4F:15:74:DB:00:B3:AB:94:BF:FF:4E:BB:64:31:52:6F:AF:42
Authority key identifier: 9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C
Certificate issuer: /CN=9e481c098a649265291d402f5f02fc43dda0fc8c
Certificate serial: 0199FC586B0B69BBDCB5C0EDAC814CBE67A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
Manifest number: 09DB
Signing time: Sun 19 Oct 2025 12:01:16 +0000
Manifest this update: Sun 19 Oct 2025 12:01:16 +0000
Manifest next update: Mon 20 Oct 2025 12:01:16 +0000
Files and hashes: 1: 1-Z1UOZXHudz9pMndWhDGiE0wZos.roa (hash: j553aDGXg+Mu/H/OVwEn4NDDiMjFpdhHQa+Xk6WS3jQ=)
2: nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl (hash: UWgrjc/wXfowd30HhW4xj5eDOR1rvjwIWgVRmk1Bibo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:6b:0b:69:bb:dc:b5:c0:ed:ac:81:4c:be:67:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e481c098a649265291d402f5f02fc43dda0fc8c
Validity
Not Before: Oct 19 12:01:16 2025 GMT
Not After : Oct 20 12:01:16 2025 GMT
Subject: CN=71a04f1574db00b3ab94bfff4ebb6431526faf42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8e:fa:95:db:50:98:5c:60:51:01:29:a4:f5:
b6:5a:0f:b3:f8:7f:40:47:0e:71:60:25:f1:fa:55:
e5:bb:66:93:82:61:28:55:1d:4c:dc:f7:8a:05:b5:
04:1b:14:a6:06:c8:d5:88:d6:4e:97:93:a4:34:c8:
2f:dd:45:ea:43:31:d9:2c:4f:e5:61:2e:97:c4:a4:
86:d5:49:0f:da:dd:92:09:3c:a0:d8:26:25:06:40:
23:d0:67:87:87:0f:50:03:54:6b:97:64:03:95:96:
83:16:29:cb:cd:41:90:1a:7d:62:f8:76:42:1d:c5:
6b:3d:cd:49:15:db:42:7f:b3:68:22:f0:d1:14:d9:
40:c1:01:04:33:a0:ec:88:8f:70:76:8c:6b:11:0e:
11:36:c5:24:49:e5:96:63:95:44:9d:03:88:1d:33:
7b:3f:f7:6f:ac:3a:a3:54:1d:d5:75:b1:72:20:a6:
3f:64:d0:51:6a:8d:2b:e6:9c:5d:b0:1f:ca:b8:8b:
56:c4:2f:b1:b8:81:77:a2:af:24:3d:6b:e7:f7:92:
43:0a:3f:20:6f:78:65:1f:4d:66:2f:38:ae:52:f9:
78:a7:49:13:26:5a:42:34:00:39:31:c0:b9:85:e3:
e2:15:72:a3:c8:4f:61:b9:d3:8e:c1:a3:aa:37:29:
30:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A0:4F:15:74:DB:00:B3:AB:94:BF:FF:4E:BB:64:31:52:6F:AF:42
X509v3 Authority Key Identifier:
keyid:9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b8:36:ca:e7:5e:e4:a2:29:d3:62:95:7f:e4:9a:a9:a0:83:
c8:3b:47:84:7b:c8:d2:49:68:97:1b:8a:a4:5f:24:2b:12:a3:
1c:16:34:63:a6:60:0b:bd:de:28:d2:55:dd:31:c9:77:f2:68:
c1:d4:29:db:c4:fc:be:f0:ab:2f:34:d9:2e:19:d6:b9:7a:42:
91:02:a1:43:9b:2f:ed:c5:2b:86:8f:9f:28:25:2e:1a:84:b0:
d3:0a:97:e5:79:68:4e:01:2c:53:61:c6:40:28:e3:a4:bc:c2:
b3:20:f0:e3:31:be:44:b5:07:cc:23:c4:6a:d5:f9:05:3d:bb:
3f:0e:35:f0:b6:c2:31:1e:56:b7:bd:af:f3:64:70:06:5e:5b:
1b:00:4f:17:e1:b8:70:8c:a0:52:3a:88:dc:4a:19:b7:4b:d3:
20:83:04:cc:c7:d6:67:d4:01:9a:82:17:68:ea:6a:bc:45:80:
79:0b:bf:2e:65:6d:24:f9:85:c4:46:98:33:1d:cc:fd:4c:29:
62:65:d7:61:22:5c:3c:79:4f:69:a0:4f:4c:75:05:e9:87:3e:
18:fe:4a:0b:f4:f1:f9:6a:40:45:0c:b9:d1:dc:d3:bd:27:ec:
a2:95:6d:e5:71:7d:db:9e:35:15:2a:64:4e:5f:94:87:a4:ff:
18:17:5f:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WGsLabvctcDtrIFMvmelMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNDgxYzA5OGE2NDkyNjUyOTFkNDAyZjVmMDJmYzQzZGRh
MGZjOGMwHhcNMjUxMDE5MTIwMTE2WhcNMjUxMDIwMTIwMTE2WjAzMTEwLwYDVQQD
Eyg3MWEwNGYxNTc0ZGIwMGIzYWI5NGJmZmY0ZWJiNjQzMTUyNmZhZjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY76ldtQmFxgUQEppPW2Wg+z+H9A
Rw5xYCXx+lXlu2aTgmEoVR1M3PeKBbUEGxSmBsjViNZOl5OkNMgv3UXqQzHZLE/l
YS6XxKSG1UkP2t2SCTyg2CYlBkAj0GeHhw9QA1Rrl2QDlZaDFinLzUGQGn1i+HZC
HcVrPc1JFdtCf7NoIvDRFNlAwQEEM6DsiI9wdoxrEQ4RNsUkSeWWY5VEnQOIHTN7
P/dvrDqjVB3VdbFyIKY/ZNBRao0r5pxdsB/KuItWxC+xuIF3oq8kPWvn95JDCj8g
b3hlH01mLziuUvl4p0kTJlpCNAA5McC5hePiFXKjyE9hudOOwaOqNykwoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGgTxV02wCzq5S//067ZDFSb69CMB8GA1UdIwQY
MBaAFJ5IHAmKZJJlKR1AL18C/EPdoPyMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtnY0NZcGtrbVVwSFVBdlh3TDhROTJnX0l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9lNjQxNjktZDJiZC00NDk0LWIxZjkt
ZDY5ODU3ZWY3ZDFhLzEvbmtnY0NZcGtrbVVwSFVBdlh3TDhROTJnX0l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9lNjQxNjktZDJiZC00NDk0LWIxZjktZDY5ODU3ZWY3ZDFh
LzEvbmtnY0NZcGtrbVVwSFVBdlh3TDhROTJnX0l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHrg2yude
5KIp02KVf+SaqaCDyDtHhHvI0klolxuKpF8kKxKjHBY0Y6ZgC73eKNJV3THJd/Jo
wdQp28T8vvCrLzTZLhnWuXpCkQKhQ5sv7cUrho+fKCUuGoSw0wqX5XloTgEsU2HG
QCjjpLzCsyDw4zG+RLUHzCPEatX5BT27Pw418LbCMR5Wt72v82RwBl5bGwBPF+G4
cIygUjqI3EoZt0vTIIMEzMfWZ9QBmoIXaOpqvEWAeQu/LmVtJPmFxEaYMx3M/Uwp
YmXXYSJcPHlPaaBPTHUF6Yc+GP5KC/Tx+WpARQy50dzTvSfsopVt5XF92541FSpk
Tl+Uh6T/GBdf+w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:05 2025 by rpki-client