Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
File: nkdckgJgbmZn6Up3npA9tpelkCU.mft (raw, json)
Hash identifier: n7vCWHEgAwsmNJBN6nylqdvHDnQIWdqJMEB31SQYLog=
Subject key identifier: A1:C4:85:FE:11:97:C1:43:A6:D6:43:63:D9:E4:AB:93:77:AB:E4:5C
Authority key identifier: 9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25
Certificate issuer: /CN=9e475c9202606e6667e94a779e903db697a59025
Certificate serial: 0199FCFD48EA34F33191797E497ACF060A6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
Manifest number: 05C6
Signing time: Sun 19 Oct 2025 15:01:21 +0000
Manifest this update: Sun 19 Oct 2025 15:01:21 +0000
Manifest next update: Mon 20 Oct 2025 15:01:21 +0000
Files and hashes: 1: mR809BzawsocXcAGIqvH25pMqQs.roa (hash: YeYkP56hsu5/L5Jhs1MWZsAFAw78/bEVuYQMAvS7nO4=)
2: nkdckgJgbmZn6Up3npA9tpelkCU.crl (hash: ochA0rYp+eFBy1h9PyfZ9W4Ec4iVZGv+J9/etawLV3Y=)
3: nmSg0-EK5kx_OFxZ-x2rJeid1NU.roa (hash: 8HytWsFdzKFviKTtfyGmrk77Cg5YhpoczU6o9u5sUno=)
4: qxkGe1Ztq8AC8Xy-vkslbb-4Yjc.roa (hash: Vk6as9yIInb4okYrwyyw/9HVRxpOcsbPGA6Y1uEJnuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:48:ea:34:f3:31:91:79:7e:49:7a:cf:06:0a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e475c9202606e6667e94a779e903db697a59025
Validity
Not Before: Oct 19 15:01:21 2025 GMT
Not After : Oct 20 15:01:21 2025 GMT
Subject: CN=a1c485fe1197c143a6d64363d9e4ab9377abe45c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9d:b4:6d:99:19:22:4b:04:76:e9:29:8d:69:
eb:2d:3e:a7:d8:1e:f2:30:52:b0:b1:7d:ea:59:50:
9c:17:30:9b:3d:91:2d:c1:a1:c7:41:e1:de:14:a0:
88:23:b9:00:7b:41:0c:27:f7:f7:a8:6b:f6:9c:9c:
0a:bd:c1:6b:b7:32:9c:c7:96:c8:0b:c0:3a:0a:a4:
9d:fa:d4:f4:1d:af:7c:79:aa:ea:09:ed:3b:55:fb:
25:08:00:37:3a:33:ec:96:cd:f6:2d:44:a9:53:34:
c4:65:fe:e9:c2:2f:da:1b:06:d8:69:5b:fa:68:f4:
bf:7c:71:bd:a2:4e:f6:67:3a:62:fc:88:d5:70:16:
27:c7:84:b8:67:72:02:ce:4c:69:a5:19:c5:96:c6:
5d:f2:0c:cf:bc:de:32:3e:b8:99:a1:47:a4:d6:6c:
d7:a8:a2:78:f6:36:72:cf:30:5e:0d:0a:8a:9b:0e:
5a:3a:64:16:57:29:d3:53:a9:a6:97:8d:f8:57:91:
e5:67:f7:ba:11:a4:6d:8c:a9:64:38:43:9c:e8:b5:
ba:22:d3:ac:00:89:f2:c6:54:98:f2:dc:26:22:a2:
4f:b2:c5:d4:a6:57:7b:bf:a6:56:fa:3c:07:07:82:
ee:85:cb:1f:db:13:79:ba:ef:1a:61:4b:ef:be:1b:
28:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C4:85:FE:11:97:C1:43:A6:D6:43:63:D9:E4:AB:93:77:AB:E4:5C
X509v3 Authority Key Identifier:
keyid:9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:60:e7:e8:61:2c:b4:83:e6:57:13:9f:f1:82:4f:c8:5f:0e:
a6:b4:6a:c3:bb:2e:db:4e:22:14:ad:63:83:b4:fd:78:cf:c4:
3c:72:94:f9:39:ab:bf:69:c7:15:7b:2c:26:5a:84:fb:34:5e:
f5:7d:a6:77:88:ad:ed:20:5e:84:a3:53:77:e2:fb:b5:83:f4:
0f:aa:b4:1c:38:a9:13:99:ef:12:7b:04:d5:04:6b:84:93:0a:
26:a5:a5:e1:6e:07:c8:bc:39:a5:2b:a1:7f:f3:18:4f:7b:84:
74:a8:66:2b:1b:08:10:d2:89:d6:b6:c8:7a:2b:2a:1b:54:f9:
7c:d8:76:46:1f:a9:8b:85:1c:38:f5:c0:7a:aa:87:13:34:63:
fa:dc:ea:8e:f9:b3:6f:97:ea:1a:f8:97:16:46:8b:1b:3a:50:
5a:8f:54:7a:c3:8e:80:38:e4:f5:08:71:b9:44:25:2c:71:18:
1f:15:aa:2b:cf:da:6c:fa:ee:3b:f2:cf:cd:b1:b0:7c:9b:3a:
10:52:34:93:c2:1e:b4:32:0a:32:19:80:ab:8f:73:21:c4:39:
88:04:0f:ed:de:b6:3e:d0:09:c8:6f:dd:4c:07:65:2a:f8:e4:
a1:22:e8:57:18:c7:46:c6:03:85:80:29:f5:3a:92:48:6c:97:
50:e3:ea:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:21 2025 by rpki-client