Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
File: NkYULOMpCrZ4bT0w8mteQf1oTd4.mft (raw, json)
Hash identifier: e/0uNWYh0cjCnfvr/gecHpM83Ixz37Q6JfwhXoyuKKM=
Subject key identifier: 06:C8:FF:3B:77:14:26:B2:00:E8:36:62:4C:F8:39:BE:F6:79:26:26
Authority key identifier: 36:46:14:2C:E3:29:0A:B6:78:6D:3D:30:F2:6B:5E:41:FD:68:4D:DE
Certificate issuer: /CN=3646142ce3290ab6786d3d30f26b5e41fd684dde
Certificate serial: 0199FCC66149676001B4129AC236BEF20FE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
Manifest number: 0AC0
Signing time: Sun 19 Oct 2025 14:01:23 +0000
Manifest this update: Sun 19 Oct 2025 14:01:23 +0000
Manifest next update: Mon 20 Oct 2025 14:01:23 +0000
Files and hashes: 1: NkYULOMpCrZ4bT0w8mteQf1oTd4.crl (hash: lIYzHdo2rf0Niz1HxioTF1aYz3acKH8sWP24ekHosAo=)
2: _1qhZEmD1ZR0wevnSQ5eeTD9plU.roa (hash: ZVkFLKtKLY5Jyd68UAmKFP29SRBsL9mEyi4TVzPBvdA=)
3: yrfnq6Apo3g6hYK2SXicNIxd3BQ.roa (hash: mz8tGW+kk5vYLIpkvgBjBz5ynzM4w4t5pl379UMfAPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:61:49:67:60:01:b4:12:9a:c2:36:be:f2:0f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3646142ce3290ab6786d3d30f26b5e41fd684dde
Validity
Not Before: Oct 19 14:01:23 2025 GMT
Not After : Oct 20 14:01:23 2025 GMT
Subject: CN=06c8ff3b771426b200e836624cf839bef6792626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7e:80:63:8f:9d:0f:14:25:7b:0e:af:d4:70:
3e:03:0f:06:1f:63:7c:d1:de:a3:99:da:33:0d:31:
36:aa:af:9a:56:95:bd:f3:ec:38:08:24:6c:7a:6e:
c7:6d:23:63:6d:24:77:eb:55:9b:1d:34:ea:7f:52:
70:c2:46:1c:8f:5d:b6:14:e2:a0:6c:93:f9:c0:d7:
b8:37:6a:d1:ca:aa:b1:50:88:7a:54:ec:b5:c5:67:
e4:2d:45:c0:aa:70:b9:2a:17:c6:a8:8d:aa:61:99:
45:2f:a0:0a:ad:22:25:1d:64:ee:99:3d:49:28:15:
15:e9:21:b5:11:52:be:fe:5a:a2:01:4b:5c:01:01:
0e:62:5c:fd:ee:a5:a1:db:1a:dd:5f:b7:ec:a7:f5:
f9:c9:02:52:f3:49:67:8e:5f:4e:fb:85:c9:db:7f:
d1:43:46:bc:3f:d9:4a:29:14:b5:39:6f:01:0f:e5:
b7:bc:f8:73:4c:16:0d:66:64:f7:b4:fc:cc:2d:ad:
a0:4e:1e:bb:3d:73:be:65:9a:f2:e7:d4:cd:4c:90:
55:53:a3:1c:ac:42:8c:7f:29:30:a7:1e:e6:2b:3d:
32:4d:98:74:57:7b:80:aa:59:dc:9b:5e:51:24:21:
e3:fb:fd:74:68:91:97:37:de:0e:fe:1c:f0:ef:bd:
cd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C8:FF:3B:77:14:26:B2:00:E8:36:62:4C:F8:39:BE:F6:79:26:26
X509v3 Authority Key Identifier:
keyid:36:46:14:2C:E3:29:0A:B6:78:6D:3D:30:F2:6B:5E:41:FD:68:4D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:61:13:fa:cc:d6:0a:4e:c4:0a:fd:da:67:57:86:2c:3a:c8:
11:ce:cd:99:ed:bf:b5:f7:c9:77:e2:6b:3b:22:28:2d:9c:9c:
58:ee:e1:4c:18:52:9e:a5:69:01:3a:7f:04:a6:73:ac:10:5d:
5d:e1:b8:0c:9f:8c:cb:15:70:f4:57:34:4f:b0:b9:86:77:cc:
bf:0e:e4:39:ca:4e:2f:b2:b0:0f:ef:7b:2e:88:e1:3a:a5:8e:
d1:36:22:29:3f:b7:fc:b3:b1:08:b9:58:bd:d8:ac:c5:82:28:
de:98:f2:20:b2:3d:fb:f8:04:24:b3:67:a5:0b:a8:2f:d4:c3:
72:ed:e1:0d:20:28:99:43:ca:54:8b:3a:b8:53:bb:e3:f4:66:
fd:52:61:95:14:99:94:7b:85:7e:b2:d9:b5:28:85:34:83:80:
4d:a8:09:fc:52:b1:61:27:20:04:13:e2:d5:d5:fe:5d:3a:cf:
0a:fe:0e:e4:af:8f:bb:cf:45:8e:ec:d4:f8:7d:fe:50:5b:94:
9f:70:9b:61:29:e5:36:a6:d0:dc:c8:32:e0:ff:62:bf:49:e6:
ea:0f:dc:67:da:bf:88:7f:e4:40:bd:d7:23:7c:27:fd:c3:32:
ac:1b:88:98:b2:ad:65:6e:10:7f:2e:5a:ec:48:dd:6a:4e:f4:
4c:5f:72:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:22 2025 by rpki-client