Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
File: nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft (raw, json)
Hash identifier: wjNkkp0WEWZBJ1AmzIwzB8PwZu04HVVJNhhlGu9qVUM=
Subject key identifier: E7:CE:8D:BC:00:27:AB:8A:00:4C:2F:D3:A3:6B:02:6E:99:DC:65:09
Authority key identifier: 9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
Certificate issuer: /CN=9e42ca46688a837b575234ce6a1a326587d6c204
Certificate serial: 0199FB458DC9DE3302C8B633AFF791B91A1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
Manifest number: 1185
Signing time: Sun 19 Oct 2025 07:01:03 +0000
Manifest this update: Sun 19 Oct 2025 07:01:03 +0000
Manifest next update: Mon 20 Oct 2025 07:01:03 +0000
Files and hashes: 1: 2sz7XXaQR044rc-q4fD0WIzUxYQ.roa (hash: pi07prhyU4hZ/cG1dB+HetMAgpuPmtLhNCb2plULwQE=)
2: D2HSpId2VYXPjhlDPg7eWeC18Pw.roa (hash: UXPvVbmh0MzKjV4UFrcu58vEq8RZqO0eg1YthASI72I=)
3: UnUG9yNZwHFtxPW6hAKjubIbusM.roa (hash: xsmRUWemFAWw0xMxDEpqyiLbWsqfijBX0AOIJJiaM5U=)
4: nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl (hash: JtOniFWakkzVdL5K7tozMk4YvIEjrJkCg9zkFeXcs50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:8d:c9:de:33:02:c8:b6:33:af:f7:91:b9:1a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e42ca46688a837b575234ce6a1a326587d6c204
Validity
Not Before: Oct 19 07:01:03 2025 GMT
Not After : Oct 20 07:01:03 2025 GMT
Subject: CN=e7ce8dbc0027ab8a004c2fd3a36b026e99dc6509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f9:5f:22:37:9c:d0:f3:ef:e6:81:cb:8b:b4:
0f:59:ba:67:e0:da:5e:e1:ec:c1:1e:49:80:5e:f4:
cd:30:48:c0:2e:53:e1:f2:f3:7e:c0:9b:a6:9c:2c:
e8:a1:29:77:53:13:20:a2:b9:9d:76:62:6d:d3:2a:
4c:1e:39:32:a3:e9:2f:ab:7f:dd:43:e9:36:0b:e4:
32:b6:bc:09:16:b5:a0:2a:66:38:54:89:e1:db:3e:
ad:f5:a5:10:5d:30:27:8d:cd:cf:80:fe:76:3b:00:
7e:91:c6:29:c7:dd:90:0f:a7:cb:69:88:e8:74:0e:
72:c0:f5:a4:a1:db:fe:5f:d2:bf:5d:31:a4:79:4d:
70:2b:3d:40:b1:f5:89:ff:c4:8f:d1:32:5e:3a:e0:
4d:b9:c4:2c:0d:c1:17:72:09:1d:18:4b:ab:e5:1b:
f9:62:1d:6b:33:87:c1:03:f1:d0:b6:fc:5a:99:ec:
df:07:7d:45:67:10:a2:92:68:0f:6f:01:b1:3a:a9:
4b:5f:d0:a4:18:66:2a:d4:a5:08:1c:23:cb:a6:f8:
a7:31:33:be:75:22:c9:70:46:53:0f:47:39:1e:b2:
1d:59:ef:75:af:a7:35:11:d9:34:54:50:04:50:94:
b3:7d:60:d8:aa:11:17:42:b8:03:6d:82:57:8a:6e:
13:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CE:8D:BC:00:27:AB:8A:00:4C:2F:D3:A3:6B:02:6E:99:DC:65:09
X509v3 Authority Key Identifier:
keyid:9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:46:d8:cb:53:8b:75:f4:1e:90:00:77:c6:3b:8b:bc:43:59:
4c:ef:c9:82:a7:7b:7d:98:6e:f3:c1:a8:64:f3:b0:22:93:93:
a8:41:32:25:e0:f9:0f:e8:6a:39:4c:6c:60:f5:db:4c:fa:8a:
5b:f6:80:cc:f5:5e:a0:c8:90:c2:35:ec:b2:a3:7d:9b:76:a2:
da:3b:fe:cb:50:84:74:99:41:d2:e7:71:92:34:0a:f9:5b:99:
b7:d5:63:b7:e8:b7:7d:37:ac:6e:fa:2d:d1:f7:73:22:22:f6:
89:94:69:1e:2b:4b:c2:be:16:6e:a4:bb:ff:ac:19:3d:58:e4:
e7:f4:31:71:e3:85:e4:ad:00:d2:96:89:6a:8d:bc:14:99:37:
89:ea:90:3d:26:0f:6a:1d:ea:83:b6:53:b4:f5:59:56:9f:39:
1f:dd:52:c5:06:0b:76:b9:7b:60:e5:53:f7:e7:fb:e5:9a:77:
44:65:a9:f6:b7:09:08:1e:d2:a1:9b:79:cd:7e:37:18:10:09:
a0:18:89:d8:a1:b4:03:55:71:ef:4f:d5:46:8a:3f:af:ae:d5:
63:b0:6e:f2:07:6e:4f:10:ee:5b:18:d1:a6:67:d2:48:8e:7e:
31:4a:9f:53:4a:48:39:7b:fe:10:32:f5:c6:21:3e:dc:4e:c9:
10:72:ed:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:47 2025 by rpki-client