Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
File: nkuBjJLE5paGs8KBAIVd-lA6BXo.mft (raw, json)
Hash identifier: PHRwdoNy5lz66L9WJ0luWSmz4wLVnbtTI5guCLXJlxo=
Subject key identifier: 20:6B:F1:38:7F:EF:0F:FD:F9:61:A8:BA:44:59:9B:6F:23:91:64:19
Authority key identifier: 9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A
Certificate issuer: /CN=9e4b818c92c4e69686b3c28100855dfa503a057a
Certificate serial: 0199FC5852A507EFD2A183536879598CCB79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 12:01:10 +0000
Manifest this update: Sun 19 Oct 2025 12:01:10 +0000
Manifest next update: Mon 20 Oct 2025 12:01:10 +0000
Files and hashes: 1: nkuBjJLE5paGs8KBAIVd-lA6BXo.crl (hash: jaDwH+5zGmnhHEysc0TUhsZY8lVanvWZu88NdcwVX2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:52:a5:07:ef:d2:a1:83:53:68:79:59:8c:cb:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4b818c92c4e69686b3c28100855dfa503a057a
Validity
Not Before: Oct 19 12:01:10 2025 GMT
Not After : Oct 20 12:01:10 2025 GMT
Subject: CN=206bf1387fef0ffdf961a8ba44599b6f23916419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:69:08:94:cd:a0:1f:46:b3:74:69:4c:97:71:
de:28:44:6e:c0:93:87:e5:06:33:99:fc:d8:19:31:
eb:c8:77:fa:20:5e:f2:8f:c2:ca:ac:18:21:c0:b3:
da:bc:c5:d5:42:46:d2:4f:82:37:87:1a:e3:fa:57:
0f:71:fa:83:96:2b:ce:e0:ec:c4:a8:00:44:24:78:
81:c4:10:42:fd:56:c0:00:60:77:0e:f2:f6:b4:5b:
e5:1e:91:09:7c:a1:3a:69:e0:44:b5:5d:9c:ce:f4:
0a:ae:ae:fd:42:c9:fe:5f:96:f0:b6:7b:1a:25:14:
f6:9f:53:63:00:dd:ff:dd:f9:ac:2c:1c:6d:14:40:
b1:44:41:1b:85:09:78:79:5d:1a:b2:38:75:38:d3:
80:4d:09:e6:2a:3f:3d:59:40:5d:f9:9b:77:d2:a3:
99:a2:01:bf:b4:96:4f:ff:bc:0e:ee:c8:30:12:fe:
f3:ea:db:b3:c7:ba:64:67:08:aa:1c:c7:8c:f9:c5:
5a:c4:da:56:b7:05:11:11:c3:d7:e1:13:2a:2e:da:
34:09:bd:0a:6f:5a:de:be:a1:9e:3d:47:46:78:22:
3e:94:6f:e4:06:7f:d6:65:b5:e4:b5:07:93:1a:1b:
d9:19:67:42:93:d2:dc:f2:bc:34:cd:d1:02:a4:f6:
23:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6B:F1:38:7F:EF:0F:FD:F9:61:A8:BA:44:59:9B:6F:23:91:64:19
X509v3 Authority Key Identifier:
keyid:9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:98:24:5c:fc:c3:da:de:00:c5:90:95:3b:06:37:cd:74:9b:
20:8a:b9:a1:04:8b:1a:36:56:8e:88:00:91:bf:b4:40:6c:6a:
e5:af:ae:2a:1d:b6:4a:99:0b:4e:84:c0:d3:15:c2:0b:03:06:
1e:a2:99:45:1d:37:e1:36:d3:14:07:c1:a1:df:8d:04:8a:f6:
75:7c:54:a4:16:8d:22:5b:28:56:41:71:b1:13:13:c9:52:89:
9d:0d:c0:b4:f4:ee:19:61:39:d0:63:c3:7d:79:21:43:42:45:
98:5e:db:66:f1:49:0f:20:68:03:b6:87:75:57:87:51:b8:6d:
b8:79:29:8b:a3:4c:7d:d9:0d:dd:cd:88:4d:2b:71:81:58:60:
e7:bd:3c:f8:02:8d:f7:d7:21:7c:d4:33:2d:cc:a7:90:29:5e:
59:32:f6:89:87:ed:7f:0c:7a:27:e2:da:b3:93:e0:ce:33:9b:
ed:9e:41:c2:82:ce:d0:d7:8d:c0:2f:a0:1f:e3:68:4b:12:9a:
09:57:2a:23:3b:4e:03:de:96:37:92:5c:ec:d0:1e:29:3f:69:
35:d9:31:a6:98:d2:41:8e:47:3c:6f:a7:3f:0c:cb:31:4d:25:
80:8c:1f:1b:69:d4:40:52:10:ad:49:29:68:15:2c:ec:5e:10:
05:8a:2c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:12 2025 by rpki-client