Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
File: NkgvLv77kno8r_6h2R8kF_PS59c.mft (raw, json)
Hash identifier: yluF4WvqwQVWxGV/g8yUiOFkVxRIL2cFtI1TiukhOE4=
Subject key identifier: C6:ED:AA:B3:96:69:88:80:9D:36:E1:2C:B4:21:3B:1E:0E:54:8E:11
Authority key identifier: 36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7
Certificate issuer: /CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7
Certificate serial: 0199FFC7EF552641DF55D196B50D643FE2C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
Manifest number: 10A5
Signing time: Mon 20 Oct 2025 04:01:57 +0000
Manifest this update: Mon 20 Oct 2025 04:01:57 +0000
Manifest next update: Tue 21 Oct 2025 04:01:57 +0000
Files and hashes: 1: G4a30ttfjHFxij-eVrmW-fidH94.roa (hash: WeyOFJKV6AN+3rP0u3s/qWHiA31iewGjEQEJOzY4D5I=)
2: NkgvLv77kno8r_6h2R8kF_PS59c.crl (hash: icmQspugkpKbq0OlqJWxG6TZ/cV1ew/rhJ+TbuH+3o8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:ef:55:26:41:df:55:d1:96:b5:0d:64:3f:e2:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7
Validity
Not Before: Oct 20 04:01:57 2025 GMT
Not After : Oct 21 04:01:57 2025 GMT
Subject: CN=c6edaab3966988809d36e12cb4213b1e0e548e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e6:cf:d1:cc:ef:ac:94:ce:8b:5a:c0:f7:38:
d5:02:dc:17:fc:0e:e6:ab:a5:1f:8c:c2:a9:b8:1b:
b3:45:f6:4a:d0:e7:bd:15:a7:fb:03:f2:07:fb:44:
f3:13:85:53:6b:c5:70:92:23:d8:63:37:1c:83:53:
ee:a1:54:fd:d0:79:d7:10:07:ba:5f:26:0c:68:af:
3a:49:6c:54:fd:6d:f6:0e:d2:90:ae:c5:1f:e0:66:
e6:c1:9a:a0:6d:1a:88:db:a7:b1:08:3f:1c:b3:a7:
a5:43:19:57:38:60:b8:31:90:e7:f3:a7:24:1a:d0:
74:03:1c:d5:ab:d1:fe:e7:6b:c6:2c:48:83:35:cd:
f9:9f:17:5c:28:69:6e:48:81:ec:9e:3a:58:b6:62:
df:dd:52:c6:01:4f:fe:75:04:fb:86:f7:c7:9f:20:
04:96:d3:74:59:14:a2:2f:67:10:4a:72:e0:60:20:
3a:91:ac:07:6e:53:56:87:aa:3b:29:d9:44:81:c7:
c6:c5:ef:4c:31:49:37:4f:a4:c1:a8:92:48:a1:2e:
2c:62:a0:d6:86:f3:d7:d7:a5:a1:e8:4e:75:e9:4c:
b2:5e:0a:06:5c:da:7e:37:b7:f4:5b:30:95:82:b0:
ae:40:8e:79:76:6e:ca:54:c4:2c:b5:7b:93:76:44:
6a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:ED:AA:B3:96:69:88:80:9D:36:E1:2C:B4:21:3B:1E:0E:54:8E:11
X509v3 Authority Key Identifier:
keyid:36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:3c:ec:6b:8d:4b:f3:bf:6f:05:61:5c:07:29:71:32:07:2e:
24:fb:c7:d6:5b:40:be:c6:83:96:82:81:b7:68:ab:16:1f:64:
b9:b8:aa:64:bc:c8:f6:9e:ff:f5:80:75:87:24:5e:6f:3a:84:
1d:4c:9e:ed:3c:db:15:de:d1:a4:45:c8:a7:72:ce:bc:55:b2:
8f:12:5c:2d:4f:fc:51:ae:8d:a4:45:ac:4d:24:a7:72:a4:fa:
fd:11:33:23:60:78:12:eb:30:6d:94:21:43:c5:b2:f0:e5:65:
d2:34:60:93:be:cb:8b:bf:ef:40:d3:78:20:b4:fe:b4:99:62:
52:30:d9:fa:ac:a0:71:f6:94:20:88:a4:f8:de:1d:7c:38:cf:
f6:0a:48:42:fb:ec:b0:1c:c5:66:d9:14:61:1a:71:2b:e1:79:
34:25:77:f4:a7:63:35:4b:67:1a:37:0f:2c:da:70:d3:cb:51:
9e:40:2e:f0:9f:f7:6d:ea:fc:ab:16:52:51:2d:9e:73:69:55:
ec:2b:ed:ce:4c:4f:2a:b1:54:72:7c:57:8e:08:12:6e:94:ce:
d5:68:f3:c0:4e:a9:c1:6c:9a:90:a5:1c:0f:5b:de:8d:76:10:
26:cd:ea:54:c9:14:8c:f2:14:8e:38:e4:63:11:4d:ba:31:cc:
d0:e8:48:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:02:31 2025 by rpki-client