Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
File: nKihMlGaJClJSXNjuMqjPnLGc_g.mft (raw, json)
Hash identifier: lNUpL2wK9mxEws4rtftEH9XvjsEOvIaf5km27hb4iZY=
Subject key identifier: 2E:60:CF:FC:A0:E5:32:57:AD:19:98:97:F8:D1:47:E1:23:2F:46:7D
Authority key identifier: 9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
Certificate issuer: /CN=9ca8a132519a242949497363b8caa33e72c673f8
Certificate serial: 0199FC2165430B6565663ACDED74348522CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
Manifest number: 10E1
Signing time: Sun 19 Oct 2025 11:01:10 +0000
Manifest this update: Sun 19 Oct 2025 11:01:10 +0000
Manifest next update: Mon 20 Oct 2025 11:01:10 +0000
Files and hashes: 1: dXm9nDAbHEfPr8e0rvdta5vcQCQ.roa (hash: ZAX5/DrLWdB1icFKrgXw3Y2Wbffkldc6zIYnws0ruBM=)
2: iRubAGtbRFzHiw3kU73WMgNN_Ew.roa (hash: zVFcmjx3cq29/V7ruFQJSBuo9AC0OuJEahRAn89+q2w=)
3: nKihMlGaJClJSXNjuMqjPnLGc_g.crl (hash: VULSPNwHEt/tQRksWbMSJLGnU/2Lrx0AnKSDC3lXWss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:65:43:0b:65:65:66:3a:cd:ed:74:34:85:22:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca8a132519a242949497363b8caa33e72c673f8
Validity
Not Before: Oct 19 11:01:10 2025 GMT
Not After : Oct 20 11:01:10 2025 GMT
Subject: CN=2e60cffca0e53257ad199897f8d147e1232f467d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:07:0a:c9:82:40:c7:be:a5:f9:1c:0f:92:56:
01:d8:37:1a:3a:e5:c8:52:ac:77:d4:94:44:02:75:
3d:87:1a:98:a5:ef:37:03:77:d1:56:a9:30:c2:c1:
66:ac:21:8f:9b:dc:39:b8:e2:43:f5:d2:17:69:53:
e3:d3:1d:ed:f7:85:10:b0:96:93:3e:6c:4f:4a:6e:
a9:dd:63:ae:c2:9b:64:a9:67:34:89:4b:ec:40:f2:
a7:f9:1e:3c:41:25:f3:c6:f3:d2:d7:82:ae:7d:3a:
6a:b5:fe:7e:97:17:27:ac:27:57:2f:28:14:17:57:
49:43:08:8d:61:89:0f:51:32:90:dc:d6:17:a3:c9:
66:c8:a0:ea:96:18:bf:7b:7f:6f:b8:da:64:36:f5:
2b:e1:d0:3d:47:c1:c3:72:16:0d:7f:28:2f:58:fc:
ea:e1:15:93:70:84:8f:50:bb:4d:ff:ae:92:11:8c:
df:f6:f3:79:3f:b1:05:c1:e6:70:a8:2f:71:77:13:
ea:f5:ad:bb:96:3f:59:67:15:11:00:82:01:21:79:
8a:85:7b:13:d8:de:23:ca:0c:a2:10:37:0d:19:f1:
d1:24:ca:ea:0d:45:4c:82:6e:57:87:7a:83:ff:5d:
aa:36:70:71:7c:55:d6:08:a5:fa:22:8c:51:01:98:
61:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:60:CF:FC:A0:E5:32:57:AD:19:98:97:F8:D1:47:E1:23:2F:46:7D
X509v3 Authority Key Identifier:
keyid:9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:67:e3:99:f2:21:f0:af:5a:7c:e3:f3:11:b7:a4:34:78:99:
18:ef:e7:cd:f2:79:c8:3c:c8:e8:ba:31:09:d5:5b:c2:40:ec:
ed:84:d5:e2:c9:3c:55:1a:72:0e:0e:8c:32:8f:91:09:47:22:
a5:9d:2b:e3:24:a5:b7:a9:5b:9b:f0:d7:57:c4:dd:73:8d:9d:
da:c1:27:03:ff:ba:42:f7:ca:1a:7d:d6:8f:87:27:ad:da:0c:
5f:08:72:13:e3:7a:ba:60:33:bb:79:00:a1:53:e8:72:c1:94:
c9:c0:bb:84:00:0c:52:63:fc:c7:eb:3e:32:36:6d:71:cf:f8:
e5:8e:c6:af:5a:8f:5d:b6:43:0d:14:91:29:4d:84:9d:96:9b:
70:ef:11:b3:39:d1:03:fd:f7:87:76:f3:57:0e:a9:f9:7b:ac:
d8:30:6d:f1:63:75:35:87:19:a9:22:b2:46:08:f6:90:ac:72:
a4:68:87:53:af:97:e8:4e:3a:72:5e:bb:10:3a:43:e8:83:91:
b4:09:ba:d6:44:f4:36:1a:91:74:12:85:af:9e:a7:54:65:12:
12:fa:4d:7b:c0:f6:92:ca:c8:1d:36:75:9b:da:47:ae:0d:b3:
41:9a:66:c0:10:2d:e4:2a:cc:ac:08:64:2e:b7:b5:4b:0d:79:
58:35:44:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:29 2025 by rpki-client