Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
File: NkYhMZiJnt-otCrdRzraIYdI4QQ.mft (raw, json)
Hash identifier: 6R8xo7SyNCZNnY/n3dg6sdbHwJE1cFauu3MMuKtnQNw=
Subject key identifier: 47:2B:53:76:4C:F6:32:A9:09:8E:78:23:31:E8:B9:69:F8:C4:8A:A2
Authority key identifier: 36:46:21:31:98:89:9E:DF:A8:B4:2A:DD:47:3A:DA:21:87:48:E1:04
Certificate issuer: /CN=3646213198899edfa8b42add473ada218748e104
Certificate serial: 0199FEEBA776E6790C47D3998C907A76EB81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
Manifest number: 0C58
Signing time: Mon 20 Oct 2025 00:01:20 +0000
Manifest this update: Mon 20 Oct 2025 00:01:20 +0000
Manifest next update: Tue 21 Oct 2025 00:01:20 +0000
Files and hashes: 1: G2aa7vj-d_CA2HuKW-IASCzWaSQ.roa (hash: pv32os3ZPwMAxeQUj3RBQ+FwWykK77hFOgeqqDGQkeE=)
2: NkYhMZiJnt-otCrdRzraIYdI4QQ.crl (hash: 107Y2BFgpHmkYAGX1VvpgqL7sojXdVbHCO9XHS1pwSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:a7:76:e6:79:0c:47:d3:99:8c:90:7a:76:eb:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3646213198899edfa8b42add473ada218748e104
Validity
Not Before: Oct 20 00:01:20 2025 GMT
Not After : Oct 21 00:01:20 2025 GMT
Subject: CN=472b53764cf632a9098e782331e8b969f8c48aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5c:e8:11:1e:77:f1:e0:2f:18:9c:76:4a:cc:
91:f9:ca:50:10:4f:47:28:30:6d:20:a9:84:8c:d8:
79:7b:f5:39:85:f9:55:6e:9a:56:69:f0:22:42:ae:
42:be:b4:d1:74:6a:a5:12:2b:1a:82:ca:79:71:c1:
8d:4f:73:72:2a:1a:26:42:9b:e4:30:3b:6e:6b:58:
c3:b7:ee:cc:08:2b:ed:8f:f8:22:4c:a3:0b:af:3e:
92:9a:87:fa:42:49:50:9a:4c:6c:b9:de:e1:b1:1e:
9e:28:66:b4:7a:e7:8b:f5:7c:24:d5:df:2d:de:5a:
c4:32:d8:e8:3d:fa:ee:12:19:6e:cd:5f:cd:88:7e:
cd:fc:2a:51:6d:cc:c4:be:54:55:f0:b2:3f:a9:92:
61:f4:82:2b:6a:0b:9e:0a:e0:7c:18:bc:a6:26:14:
c2:f3:c3:e2:45:bf:58:92:1e:9b:c1:9b:4a:3b:1b:
3f:2a:bc:f4:44:be:d1:91:22:ed:9f:d7:95:62:9a:
d3:9f:cb:9a:28:a4:76:57:d4:08:e3:12:16:82:1f:
d0:4d:90:99:af:dd:e4:d1:34:61:e1:76:04:3c:6b:
3b:dd:35:96:b4:f0:48:3e:c8:66:40:fa:1c:81:5d:
81:23:92:6a:72:97:73:d7:e7:df:a2:7f:77:5d:93:
eb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2B:53:76:4C:F6:32:A9:09:8E:78:23:31:E8:B9:69:F8:C4:8A:A2
X509v3 Authority Key Identifier:
keyid:36:46:21:31:98:89:9E:DF:A8:B4:2A:DD:47:3A:DA:21:87:48:E1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:3d:27:f9:b2:b5:fc:49:a7:d4:75:db:33:f2:39:6d:49:6e:
9c:c8:39:49:bb:60:30:6a:25:e9:89:47:28:25:e0:71:ba:38:
e7:57:78:1e:41:e8:ad:db:47:bd:a9:95:a1:95:bb:0a:cb:7a:
1c:38:16:75:d7:f8:9f:72:47:1f:3b:dd:a3:fe:79:fb:bc:72:
83:18:04:ab:77:22:f5:d1:5a:d8:88:3e:34:33:d3:30:b6:9c:
7c:c0:86:1c:d3:6b:f8:fe:3b:4d:0f:1a:92:7e:34:90:52:1c:
43:3e:fd:df:4c:65:f8:64:0c:24:65:0a:cb:57:c4:82:3b:4e:
ce:68:f8:d7:05:4e:55:9a:15:36:bf:63:45:dc:76:33:0b:55:
9b:cd:24:1c:8c:03:e9:51:48:a8:8a:81:67:39:8b:8f:b0:54:
36:bc:a7:b6:b6:50:ff:43:b1:99:e4:b8:b6:9d:6a:e9:85:29:
01:cb:ce:37:1e:63:f5:8b:3d:98:d3:48:c9:95:05:0b:68:78:
2f:9f:23:25:5c:f0:88:50:43:7a:5c:28:53:fe:92:4c:6a:60:
d5:a7:66:64:7f:d7:e2:6c:e6:7a:85:34:46:5a:c0:78:94:59:
e7:87:1d:54:7e:f9:94:81:b6:16:d3:0a:68:5c:76:5f:ca:2b:
01:26:81:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:15:39 2025 by rpki-client