Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
File: nKxPYfRotyACqyXxEuUgEe14LM4.mft (raw, json)
Hash identifier: ic0j2A16QJ3Acl9ke1ou6HiKP2wrkdXSBprbyacLuyM=
Subject key identifier: EA:F2:95:0C:89:71:77:92:D9:6F:4C:FE:19:04:09:09:F3:48:3A:DC
Authority key identifier: 9C:AC:4F:61:F4:68:B7:20:02:AB:25:F1:12:E5:20:11:ED:78:2C:CE
Certificate issuer: /CN=9cac4f61f468b72002ab25f112e52011ed782cce
Certificate serial: 0199FBB361352CC280D1590EE81FAEA000B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
Manifest number: 0E59
Signing time: Sun 19 Oct 2025 09:01:00 +0000
Manifest this update: Sun 19 Oct 2025 09:01:00 +0000
Manifest next update: Mon 20 Oct 2025 09:01:00 +0000
Files and hashes: 1: 1-ctCBWTM9YEJSb9HauIUKPqVwas.roa (hash: F+Ql00NFkP6u64/1DSJGoJFeSPLMPLBWzAqmumx63J4=)
2: nKxPYfRotyACqyXxEuUgEe14LM4.crl (hash: Q8UI+zZy/DA/XBccFey5yZqoKzW0Tg7ifLDEMnTVNys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:61:35:2c:c2:80:d1:59:0e:e8:1f:ae:a0:00:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cac4f61f468b72002ab25f112e52011ed782cce
Validity
Not Before: Oct 19 09:01:00 2025 GMT
Not After : Oct 20 09:01:00 2025 GMT
Subject: CN=eaf2950c89717792d96f4cfe19040909f3483adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:64:c2:4a:70:b9:e8:7c:bf:ab:30:7b:e5:bd:
d1:63:d7:af:e6:d9:3c:e9:49:30:0f:25:39:be:fe:
a4:4a:60:f9:90:92:cb:41:db:08:62:ac:70:57:e7:
81:5e:8b:87:1e:bc:84:56:3f:ca:c8:37:ff:53:14:
cd:e4:b9:46:79:27:fe:f7:1d:8f:17:f2:c6:1c:2b:
9b:7f:d4:d1:c1:63:ea:8b:61:02:4c:3a:bf:1b:99:
08:08:3a:89:19:6b:6b:04:65:98:dc:26:e2:e1:af:
59:7a:47:48:dd:f5:e6:47:54:7b:90:c5:ae:18:6c:
e1:db:21:cc:8e:0a:25:b0:e9:eb:f2:f4:af:1e:22:
86:54:30:b0:db:dd:82:01:98:9d:3c:0c:a6:80:cc:
f3:bd:f5:4f:c9:26:da:c2:bf:cb:51:ef:c8:a5:e7:
03:00:65:d1:4d:f1:3f:6b:f2:30:33:b7:d8:2e:fe:
1a:de:d8:d4:a2:37:d0:57:08:83:e4:de:ac:58:3c:
29:89:75:69:f6:29:ad:b5:38:41:8f:47:28:1b:18:
31:22:30:28:31:9c:20:1b:9d:ba:be:78:b4:d5:00:
d6:e0:f8:97:74:bb:85:ad:12:2d:bc:85:dc:e7:a4:
fe:13:d0:17:30:3d:79:b4:8b:5b:fb:87:38:bb:03:
90:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F2:95:0C:89:71:77:92:D9:6F:4C:FE:19:04:09:09:F3:48:3A:DC
X509v3 Authority Key Identifier:
keyid:9C:AC:4F:61:F4:68:B7:20:02:AB:25:F1:12:E5:20:11:ED:78:2C:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:7b:57:8c:7e:86:e0:68:62:60:88:37:22:2c:30:3a:d2:54:
13:22:ff:09:4e:69:a9:ad:b4:09:0b:02:7f:91:e9:a3:e2:b1:
a0:92:a0:f7:3f:cc:57:03:11:72:3e:67:d0:4a:0f:55:28:89:
9c:92:f2:13:f9:df:d7:b4:48:32:cf:f7:96:47:2e:52:ac:60:
62:05:68:19:77:a6:1a:3a:09:06:62:64:98:51:82:86:79:bb:
69:b5:e1:8e:d5:20:73:e2:e0:1f:13:be:af:11:5e:ee:ff:ab:
63:9a:b2:05:c3:57:49:cf:81:6f:86:fd:db:04:45:1f:a2:36:
a4:17:b8:c4:f5:4d:5c:dc:79:e0:3e:b6:d0:75:e1:37:e3:47:
84:70:25:6e:18:d5:a4:f9:3a:4e:21:7f:31:f1:76:ce:b3:03:
dd:da:a4:6d:fd:a7:24:33:cc:b7:5c:7a:69:b1:49:e4:30:94:
23:91:3e:3b:d9:3f:7f:25:d9:1b:7d:6a:b4:b7:ea:fe:45:07:
24:af:de:a2:09:2d:c2:fe:5d:44:25:0e:84:85:47:7f:5d:de:
f4:41:fe:42:8c:2d:5b:4e:9f:8f:b2:49:ec:90:5b:55:1b:ec:
a0:1e:de:83:4e:9d:78:61:59:87:4d:2b:41:be:1a:60:3c:8a:
79:da:61:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:06 2025 by rpki-client