Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
File: nKxPYfRotyACqyXxEuUgEe14LM4.mft (raw, json)
Hash identifier: KMv2PmKfa6CnlTHwbww6pQKUTWaXUaFWf6XD+VtsJvA=
Subject key identifier: CB:B5:DA:8D:29:36:D9:55:2B:FB:BC:0B:B0:ED:DD:8E:83:36:DD:70
Authority key identifier: 9C:AC:4F:61:F4:68:B7:20:02:AB:25:F1:12:E5:20:11:ED:78:2C:CE
Certificate issuer: /CN=9cac4f61f468b72002ab25f112e52011ed782cce
Certificate serial: 0198D66021766ED6E93260ECF5BC50E07C84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
Manifest number: 0DC1
Signing time: Sat 23 Aug 2025 10:01:20 +0000
Manifest this update: Sat 23 Aug 2025 10:01:20 +0000
Manifest next update: Sun 24 Aug 2025 10:01:20 +0000
Files and hashes: 1: 1-ctCBWTM9YEJSb9HauIUKPqVwas.roa (hash: F+Ql00NFkP6u64/1DSJGoJFeSPLMPLBWzAqmumx63J4=)
2: nKxPYfRotyACqyXxEuUgEe14LM4.crl (hash: Oky4qC4g6YJu8pNYQnS1avQXSicDvEC7dIcWDWaG0W0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:21:76:6e:d6:e9:32:60:ec:f5:bc:50:e0:7c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cac4f61f468b72002ab25f112e52011ed782cce
Validity
Not Before: Aug 23 10:01:20 2025 GMT
Not After : Aug 24 10:01:20 2025 GMT
Subject: CN=cbb5da8d2936d9552bfbbc0bb0eddd8e8336dd70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ec:dc:64:c6:e4:9e:18:14:b6:98:88:f2:9c:
b4:86:78:34:d2:fe:3d:5c:92:97:9d:7a:21:49:93:
8b:0d:d2:bc:9d:95:cf:8e:34:5f:35:73:91:6c:01:
6c:a2:92:59:b5:e2:0d:1f:95:e2:69:16:52:17:c1:
24:9f:2a:64:cb:54:84:dd:f1:91:7d:f4:c2:c0:3a:
1f:21:ca:97:52:1a:0b:70:2d:cc:4e:7f:ff:68:53:
76:cb:55:37:b8:32:f3:b5:56:2b:5a:d3:aa:23:cd:
f1:34:54:aa:ce:46:43:4a:76:b5:91:82:1d:62:bb:
3c:67:41:25:a8:84:78:cc:04:26:79:91:be:e9:8a:
42:61:90:a6:d1:55:1e:da:cf:01:40:2b:7d:ea:93:
3e:1a:99:3e:d1:1c:98:76:0d:b8:ce:f3:8d:05:5e:
5a:0c:3b:7a:91:81:91:24:f6:99:55:3b:e2:5a:86:
0c:ff:f5:b5:0b:31:2b:f9:89:3e:05:92:fa:7d:68:
8f:b4:f7:bc:e6:60:30:ab:23:e0:4b:c8:1c:28:0f:
14:37:25:93:fa:f7:68:92:be:37:28:e9:bb:c7:fd:
b1:33:fe:51:22:19:5b:bd:15:73:8a:53:2c:89:4a:
cf:57:88:c2:27:a7:06:3e:77:4e:83:b6:eb:4b:4c:
e2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B5:DA:8D:29:36:D9:55:2B:FB:BC:0B:B0:ED:DD:8E:83:36:DD:70
X509v3 Authority Key Identifier:
keyid:9C:AC:4F:61:F4:68:B7:20:02:AB:25:F1:12:E5:20:11:ED:78:2C:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d0:09:b8:8a:37:ab:a4:fc:2d:c8:68:69:ad:18:13:6a:2d:
da:38:21:72:07:5c:79:c7:e9:c1:9f:8f:e8:4b:87:7d:cb:3e:
83:e5:a5:82:38:89:f2:fa:36:0f:0b:aa:2f:81:73:89:f3:5f:
ec:15:1a:07:5e:69:a4:47:1b:37:d6:70:05:84:26:38:0a:19:
1a:5c:5a:36:be:e9:0c:cf:36:93:d8:1a:ae:50:96:4f:9d:e3:
8a:0b:19:69:90:13:e4:10:c9:17:84:50:86:6a:3e:13:9c:38:
e4:77:9a:c6:af:7a:d7:42:ff:aa:07:2a:ce:bf:b5:fa:e0:a3:
35:d9:e3:16:96:d5:b7:95:c1:90:fc:6d:35:6f:b5:69:a7:87:
cc:83:30:6c:8d:6c:c7:a2:22:3c:df:9c:90:6a:e6:d9:80:4a:
b7:f4:8b:f6:34:86:ec:66:12:9d:19:97:b2:df:3c:d0:7b:3a:
e4:4e:31:46:1b:ae:5d:77:59:f2:a1:c4:26:84:25:65:c9:fe:
02:86:cf:d3:df:53:d4:34:51:c4:48:5c:58:3a:a5:d5:eb:b2:
60:15:87:0e:7e:e0:bb:fc:37:b6:bb:07:de:a0:32:3d:3c:43:
a7:1e:1b:b4:62:86:0c:cf:e3:50:4c:09:3c:14:e7:10:c0:c9:
1e:6d:ca:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:06:52 2025 by rpki-client