Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft
File: NkUaLqQK8XFeYxMWlGiZaspxu4o.mft (raw, json)
Hash identifier: G7fAPIDSv0DTJFyU4aLu89vIUgdYaVQrZxeiO9EpFJI=
Subject key identifier: 0A:13:47:14:FC:36:2C:7F:0B:35:03:35:2D:04:A1:FA:F2:E8:9D:76
Authority key identifier: 36:45:1A:2E:A4:0A:F1:71:5E:63:13:16:94:68:99:6A:CA:71:BB:8A
Certificate issuer: /CN=36451a2ea40af1715e6313169468996aca71bb8a
Certificate serial: 0199FC58E107FE8C9D6717CFCAF800D4A009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkUaLqQK8XFeYxMWlGiZaspxu4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft
Manifest number: 0C27
Signing time: Sun 19 Oct 2025 12:01:47 +0000
Manifest this update: Sun 19 Oct 2025 12:01:47 +0000
Manifest next update: Mon 20 Oct 2025 12:01:47 +0000
Files and hashes: 1: NkUaLqQK8XFeYxMWlGiZaspxu4o.crl (hash: niEBrNS+ElEJSnTZ1+dqedfJX3nhD77jCvyFXY8zlTA=)
2: O0F84RWu36-icdnEP0gqMSZmFC0.roa (hash: VjIGx/MTrmEnOtVvtOZHwU506/ftw5kzWXyYKquguXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkUaLqQK8XFeYxMWlGiZaspxu4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:e1:07:fe:8c:9d:67:17:cf:ca:f8:00:d4:a0:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36451a2ea40af1715e6313169468996aca71bb8a
Validity
Not Before: Oct 19 12:01:47 2025 GMT
Not After : Oct 20 12:01:47 2025 GMT
Subject: CN=0a134714fc362c7f0b3503352d04a1faf2e89d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1c:ed:2a:f7:33:9f:91:46:80:f6:8d:5a:60:
d9:dc:7c:6b:ba:3c:71:34:6c:b5:76:59:74:8b:90:
2d:31:86:07:81:01:0e:7f:ef:b3:7a:35:39:dc:85:
0b:bb:c2:09:3c:4c:5a:93:30:16:49:d1:50:84:46:
f9:da:5e:6f:2c:52:04:6a:06:21:15:5a:ac:f1:c6:
f2:7b:e1:63:5d:65:5d:8a:2c:c9:5a:e6:29:47:6a:
a3:fc:1d:57:35:e3:29:69:d2:c6:c6:b2:b3:8b:a4:
a5:7d:78:f4:dd:ae:fd:5f:e1:1b:44:98:dd:df:5a:
2d:59:e2:f4:33:31:ad:de:df:e9:09:d6:3c:04:54:
3e:8f:1d:b4:b7:55:a9:95:0e:cd:03:92:e0:ca:11:
b5:64:e3:e5:40:e3:81:6a:ec:ea:71:3f:5d:73:49:
75:ad:c2:17:3e:c6:e6:b9:ef:9a:1b:0b:2e:8e:1c:
85:f3:f8:bd:e5:81:24:a4:ea:85:32:b6:82:b3:53:
53:d3:b7:f7:6b:88:c1:9f:97:6d:3c:13:8c:39:8f:
1b:99:f7:6b:ca:b9:58:35:d0:94:11:46:16:f4:06:
9a:48:82:e6:34:3e:c9:a2:d6:76:b9:41:d5:9b:80:
c7:1f:f3:92:2f:57:8c:4c:5b:82:d4:e1:4f:4e:4c:
13:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:13:47:14:FC:36:2C:7F:0B:35:03:35:2D:04:A1:FA:F2:E8:9D:76
X509v3 Authority Key Identifier:
keyid:36:45:1A:2E:A4:0A:F1:71:5E:63:13:16:94:68:99:6A:CA:71:BB:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkUaLqQK8XFeYxMWlGiZaspxu4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:2a:e1:f4:1e:19:cb:aa:a1:82:f3:b6:8e:e4:b6:61:f8:34:
55:ad:b4:68:f4:ed:f3:a0:c7:c3:ad:e5:4a:20:ed:3c:65:cc:
bd:16:cd:6d:b0:54:3b:9a:01:45:f7:bc:e0:99:ce:10:aa:00:
1c:a0:0b:20:3f:25:bd:62:7c:a4:29:44:de:52:8a:20:55:ed:
2e:38:57:17:b9:12:47:8d:e3:1f:e2:0a:59:bd:26:f2:91:dc:
8f:08:ce:40:84:96:5a:16:29:a9:19:b6:51:6f:61:f4:fc:38:
38:ad:f4:be:89:b2:c7:5a:0c:91:51:b0:24:be:80:3c:fa:fe:
86:4c:bf:72:85:12:b0:32:df:40:53:87:b8:26:2e:21:c1:d4:
56:2f:ea:9e:54:93:cb:20:6c:61:c2:95:42:fa:2f:5d:8d:b3:
57:f0:e3:d0:e8:00:78:fb:36:01:0a:cf:a5:75:0c:3e:ae:d1:
c4:5e:4f:90:71:e9:17:f5:1c:a2:0f:22:b7:f4:b1:7f:1b:6f:
41:96:a3:b0:d3:ed:ad:b0:c1:4b:40:f4:58:19:cd:e7:cb:2f:
31:14:f4:0b:59:8a:21:0a:70:8d:cb:be:b6:ec:10:6a:99:06:
24:29:02:4b:8a:44:13:60:0c:83:b5:a3:12:c4:d8:88:8d:af:
53:48:f6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:47 2025 by rpki-client