Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
File: nKMZ6lHIADqtlKjifOaUkqouM6g.mft (raw, json)
Hash identifier: YG5OZmsGZ7Qn+kupHmaAx0s4PQdhgk5h4oFbg6M8MZw=
Subject key identifier: AE:F4:1D:36:EE:4A:6A:6C:27:CE:61:07:CE:3D:E7:72:92:6F:AD:7C
Authority key identifier: 9C:A3:19:EA:51:C8:00:3A:AD:94:A8:E2:7C:E6:94:92:AA:2E:33:A8
Certificate issuer: /CN=9ca319ea51c8003aad94a8e27ce69492aa2e33a8
Certificate serial: 0199FCFD200E1E10B25339A3A7C4CEB3C227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 15:01:11 +0000
Manifest this update: Sun 19 Oct 2025 15:01:11 +0000
Manifest next update: Mon 20 Oct 2025 15:01:11 +0000
Files and hashes: 1: F76FpI_z3pp7FvEBXhJ_sZMIEq4.roa (hash: 1qsVc/WLV0a8wJB91bXtNOSX8a5UYSQoJwoErMzZDKk=)
2: nKMZ6lHIADqtlKjifOaUkqouM6g.crl (hash: AgciSPT/URtGXPnyYyh+uaZAoS1GAA+Rz4rPaaveURo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:20:0e:1e:10:b2:53:39:a3:a7:c4:ce:b3:c2:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca319ea51c8003aad94a8e27ce69492aa2e33a8
Validity
Not Before: Oct 19 15:01:11 2025 GMT
Not After : Oct 20 15:01:11 2025 GMT
Subject: CN=aef41d36ee4a6a6c27ce6107ce3de772926fad7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:00:c9:9b:9e:e9:56:ff:2e:26:12:f0:54:85:
23:64:9c:a4:a0:9f:87:3f:6c:5e:51:a4:86:51:5d:
a4:59:77:a1:b1:5b:6d:92:0f:8f:dd:07:41:5f:47:
67:3f:bd:93:da:d9:f1:48:35:6d:05:3f:ff:d9:85:
dc:ed:60:40:66:08:72:06:86:e9:3b:b8:29:d0:e4:
fd:b5:48:28:4e:d9:0d:8b:7f:b1:01:9d:24:72:01:
79:47:f6:c0:42:76:a0:e1:b6:21:05:99:34:fb:98:
d7:0e:4b:fa:d9:a4:18:f5:63:87:4c:a7:cd:00:0d:
b3:b1:78:de:c6:83:ab:6e:84:24:66:5d:a1:b5:b1:
24:9f:01:ac:0c:65:73:be:8a:cd:01:8a:64:2c:6d:
cc:6f:0b:8c:43:fb:95:26:ec:e4:b4:0f:78:48:0a:
11:ae:60:2f:d2:1d:4c:fd:9a:49:63:ac:a3:9f:0f:
be:d3:b0:c2:5c:f3:47:b7:08:4c:ea:89:5b:a9:fe:
a1:f4:3b:51:80:67:9f:40:f7:91:bc:17:78:c7:40:
cd:d2:3b:cf:a0:79:f0:d0:0b:2d:59:d2:cf:38:5d:
72:f5:7d:d0:db:15:97:0d:e0:fb:7e:7c:c4:ea:95:
95:eb:18:ce:a8:7d:17:87:5c:4f:a5:31:ca:cb:01:
86:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F4:1D:36:EE:4A:6A:6C:27:CE:61:07:CE:3D:E7:72:92:6F:AD:7C
X509v3 Authority Key Identifier:
keyid:9C:A3:19:EA:51:C8:00:3A:AD:94:A8:E2:7C:E6:94:92:AA:2E:33:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:84:f6:f9:34:b7:b2:7a:78:dd:56:7a:6a:6b:3e:8e:1a:22:
c3:bf:1d:b9:3e:10:6e:26:8f:c5:6f:f3:95:af:1d:79:6f:9a:
91:23:30:63:9e:a3:ab:c6:9a:fb:61:31:ca:75:a2:b5:ee:09:
9c:43:f5:c2:66:2c:68:91:d6:a0:0c:93:f1:cb:ac:c0:e5:3a:
5c:44:7f:06:6e:26:7d:6d:4c:05:fe:34:f6:f9:f6:f5:4c:51:
36:82:bc:40:d8:66:8b:c0:9b:57:30:81:58:27:e2:53:9a:8a:
e3:95:c3:2d:2c:8a:82:6e:7e:cf:c3:8b:68:14:82:1e:2d:22:
89:7b:96:65:14:2c:5f:f7:e5:4f:80:7a:14:c9:97:11:8a:fd:
21:bb:88:ba:b6:78:d4:43:45:8c:d5:d7:ea:48:27:97:b7:0f:
01:04:13:71:0b:9a:d8:89:dd:8e:2c:5b:cd:d7:db:46:0d:14:
5f:a4:b1:f8:d3:88:c2:0f:66:5a:a8:1c:b0:6e:5f:40:97:4b:
06:50:14:9a:1e:b0:c6:e0:e5:da:d3:8c:0c:44:72:11:04:85:
b5:90:eb:68:fb:dd:43:74:63:7f:24:26:96:f0:de:2c:c7:9e:
95:4d:17:58:ca:9c:4b:e2:67:31:a6:c2:10:49:5b:b4:4d:6e:
bc:68:17:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:21 2025 by rpki-client