Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
File: nKMZ6lHIADqtlKjifOaUkqouM6g.mft (raw, json)
Hash identifier: A8lbj66nw5s2X7LLrX3lL89KqLwJ/fkvdZD/Ag094MU=
Subject key identifier: 20:AE:CE:47:14:D8:A9:DA:C0:70:8D:EA:3B:E4:F7:52:B1:11:08:56
Authority key identifier: 9C:A3:19:EA:51:C8:00:3A:AD:94:A8:E2:7C:E6:94:92:AA:2E:33:A8
Certificate issuer: /CN=9ca319ea51c8003aad94a8e27ce69492aa2e33a8
Certificate serial: 0198D583D6D79323AC1D823E1CB9952E4C73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 06:00:43 +0000
Manifest this update: Sat 23 Aug 2025 06:00:43 +0000
Manifest next update: Sun 24 Aug 2025 06:00:43 +0000
Files and hashes: 1: F76FpI_z3pp7FvEBXhJ_sZMIEq4.roa (hash: 1qsVc/WLV0a8wJB91bXtNOSX8a5UYSQoJwoErMzZDKk=)
2: nKMZ6lHIADqtlKjifOaUkqouM6g.crl (hash: 6mKvpCPAXKpydaCF3RiWMF2H4QrJ7iipcRBtzVFhW1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:d6:d7:93:23:ac:1d:82:3e:1c:b9:95:2e:4c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca319ea51c8003aad94a8e27ce69492aa2e33a8
Validity
Not Before: Aug 23 06:00:43 2025 GMT
Not After : Aug 24 06:00:43 2025 GMT
Subject: CN=20aece4714d8a9dac0708dea3be4f752b1110856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f1:b1:4f:90:3a:1a:96:e3:a1:01:d6:d0:b4:
c4:d4:fe:a3:ae:2b:6e:70:ed:39:d9:ef:fd:ef:fe:
79:22:1c:bc:7d:2c:88:00:da:f4:73:98:9e:ae:f6:
46:21:fd:f4:ad:5d:58:27:e1:ee:e1:a6:7f:2d:00:
3b:28:dd:ba:d9:3a:b7:ed:8d:7c:ac:95:6c:b5:19:
b6:c8:f5:dc:9f:3b:62:f9:15:74:a8:23:01:92:2f:
79:07:66:cf:64:c2:2e:ad:05:bd:00:68:4e:e8:76:
ab:75:91:bc:f6:b0:86:da:ad:a9:9a:c1:29:87:64:
8f:6f:94:2e:6c:9f:52:e4:a4:e6:2b:54:ab:ec:cd:
79:a6:b6:da:91:2f:f7:e9:a1:85:bd:78:24:36:e7:
4f:6a:bd:61:69:09:8d:3c:ac:2a:0e:72:b4:f9:31:
f8:d6:86:43:de:dc:47:12:c7:fe:81:a1:86:04:09:
d2:74:7c:db:3e:a3:af:54:65:5f:83:8b:31:83:7d:
dd:05:27:f5:08:45:1a:8d:20:e7:36:38:29:ce:16:
a7:08:2c:8c:25:59:aa:ac:5e:d9:34:ff:48:be:7a:
98:3b:e8:fb:a9:34:4c:08:9d:45:be:18:38:38:b2:
48:27:b4:83:86:ab:33:dd:5e:32:ab:18:b1:f8:15:
87:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AE:CE:47:14:D8:A9:DA:C0:70:8D:EA:3B:E4:F7:52:B1:11:08:56
X509v3 Authority Key Identifier:
keyid:9C:A3:19:EA:51:C8:00:3A:AD:94:A8:E2:7C:E6:94:92:AA:2E:33:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:73:a3:74:90:e3:1f:73:69:f8:85:b5:8b:85:e9:bd:34:01:
83:8b:7c:69:1c:98:40:40:dd:d0:96:b2:84:4c:91:1e:d2:63:
13:58:b3:53:17:57:85:f4:a1:79:bc:23:a5:4d:1d:bf:04:1f:
a7:12:6f:1c:d0:c9:8e:88:2c:64:d5:2a:7f:55:f0:39:dd:36:
ff:92:fb:3b:c8:53:85:13:57:fc:2a:16:e9:76:f3:32:39:ac:
71:62:6e:82:79:3f:d0:cb:f4:44:01:44:4f:32:99:e6:94:a2:
fd:49:a1:df:2c:e5:bb:52:a6:2a:8f:42:92:d7:1a:3f:da:da:
9f:41:52:58:5e:4c:22:13:90:d4:38:57:28:ae:6e:47:87:da:
69:77:36:57:0c:08:99:da:87:82:2b:05:50:c2:64:22:9e:2a:
53:25:58:73:1d:3f:db:68:36:c6:b4:5b:5d:18:dc:39:d6:0e:
ce:98:d5:ca:30:ca:f2:3d:d4:1d:f6:d0:8f:18:26:9e:08:3c:
28:ee:b3:1a:49:ab:48:ab:c4:af:cd:e1:9b:15:87:20:c7:0f:
6e:9e:b0:8e:f7:83:39:8b:23:08:f1:61:99:6a:47:c7:a6:af:
65:e8:47:dc:f6:ba:7c:ef:25:21:74:b9:1c:75:1a:68:57:ed:
ea:75:d9:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg9bXkyOsHYI+HLmVLkxzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYTMxOWVhNTFjODAwM2FhZDk0YThlMjdjZTY5NDkyYWEy
ZTMzYTgwHhcNMjUwODIzMDYwMDQzWhcNMjUwODI0MDYwMDQzWjAzMTEwLwYDVQQD
EygyMGFlY2U0NzE0ZDhhOWRhYzA3MDhkZWEzYmU0Zjc1MmIxMTEwODU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vGxT5A6GpbjoQHW0LTE1P6jritu
cO052e/97/55Ihy8fSyIANr0c5iervZGIf30rV1YJ+Hu4aZ/LQA7KN262Tq37Y18
rJVstRm2yPXcnzti+RV0qCMBki95B2bPZMIurQW9AGhO6HardZG89rCG2q2pmsEp
h2SPb5QubJ9S5KTmK1Sr7M15prbakS/36aGFvXgkNudPar1haQmNPKwqDnK0+TH4
1oZD3txHEsf+gaGGBAnSdHzbPqOvVGVfg4sxg33dBSf1CEUajSDnNjgpzhanCCyM
JVmqrF7ZNP9IvnqYO+j7qTRMCJ1Fvhg4OLJIJ7SDhqsz3V4yqxix+BWHGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCuzkcU2KnawHCN6jvk91KxEQhWMB8GA1UdIwQY
MBaAFJyjGepRyAA6rZSo4nzmlJKqLjOoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbktNWjZsSElBRHF0bEtqaWZPYVVrcW91TTZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82MTQ5NGMtMDc0NC00OTkxLWFiNjct
MGFkM2M3OTYyYzA5LzEvbktNWjZsSElBRHF0bEtqaWZPYVVrcW91TTZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC82MTQ5NGMtMDc0NC00OTkxLWFiNjctMGFkM2M3OTYyYzA5
LzEvbktNWjZsSElBRHF0bEtqaWZPYVVrcW91TTZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh3OjdJDj
H3Np+IW1i4XpvTQBg4t8aRyYQEDd0JayhEyRHtJjE1izUxdXhfShebwjpU0dvwQf
pxJvHNDJjogsZNUqf1XwOd02/5L7O8hThRNX/CoW6XbzMjmscWJugnk/0Mv0RAFE
TzKZ5pSi/Umh3yzlu1KmKo9CktcaP9ran0FSWF5MIhOQ1DhXKK5uR4faaXc2VwwI
mdqHgisFUMJkIp4qUyVYcx0/22g2xrRbXRjcOdYOzpjVyjDK8j3UHfbQjxgmngg8
KO6zGkmrSKvEr83hmxWHIMcPbp6wjveDOYsjCPFhmWpHx6avZehH3Pa6fO8lIXS5
HHUaaFft6nXZ9Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:53 2025 by rpki-client