Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
File: NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft (raw, json)
Hash identifier: 9YYqSTi+Zu34q8wQPX7nEYpeFCwUw764NIV/CHgJKfE=
Subject key identifier: 46:BE:CE:BC:08:36:DB:FA:9F:5E:7C:BD:22:EF:02:38:E5:A1:FF:08
Authority key identifier: 34:A6:3D:C8:61:20:E8:7F:4C:FF:8C:59:AF:32:61:E6:E1:29:2F:D9
Certificate issuer: /CN=34a63dc86120e87f4cff8c59af3261e6e1292fd9
Certificate serial: 0198D54E17E396962970D7BBF53167C03E9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
Manifest number: 0F80
Signing time: Sat 23 Aug 2025 05:02:01 +0000
Manifest this update: Sat 23 Aug 2025 05:02:01 +0000
Manifest next update: Sun 24 Aug 2025 05:02:01 +0000
Files and hashes: 1: MjfPB6z00e-ff7RNJtIi20gDUz8.roa (hash: Cpw1zTo9jE0fDsY0ux+7L1DgxTy3Nnzm8fXHw47pw5Q=)
2: NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl (hash: UAg3RzNz9KI7ydAqoXmucQNxCnPWMkDmIbTy0NIzeLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:17:e3:96:96:29:70:d7:bb:f5:31:67:c0:3e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34a63dc86120e87f4cff8c59af3261e6e1292fd9
Validity
Not Before: Aug 23 05:02:01 2025 GMT
Not After : Aug 24 05:02:01 2025 GMT
Subject: CN=46becebc0836dbfa9f5e7cbd22ef0238e5a1ff08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3d:c9:12:45:e6:00:f2:fe:3a:b4:59:f6:17:
3d:5f:76:0e:32:36:fc:26:11:ee:6b:9d:a0:da:6e:
75:f1:60:28:6d:dd:e1:8d:29:f4:71:fa:67:49:9f:
51:c5:46:a0:4c:48:7c:e9:b5:db:4a:e1:8a:24:71:
9e:6c:ad:c8:84:ed:1f:24:a5:1b:5d:a2:c6:c4:bc:
77:c0:26:c7:df:73:5b:f0:3a:98:2d:d4:59:ba:68:
24:d7:76:b2:ad:2a:ac:ae:12:22:90:08:f5:04:5a:
b8:28:df:71:3c:73:4f:32:0c:58:97:39:ae:13:c7:
d6:88:3f:14:73:68:25:b4:96:7e:44:15:8e:27:49:
40:49:78:18:27:d6:f2:b4:9a:52:5a:2a:91:fc:7b:
9d:0d:53:73:34:56:1b:8d:f9:9f:8d:10:eb:91:7d:
2c:c3:5a:bd:49:5d:93:ba:a2:1d:1d:d7:7c:f0:72:
15:83:9f:2a:79:79:2b:b6:a9:2e:1d:0c:09:87:d3:
c3:1a:04:92:09:3b:3d:f1:43:f9:ef:c9:75:8d:50:
7a:4f:48:16:e1:c7:cb:98:dc:8d:d1:55:31:11:a2:
71:05:37:76:6a:8b:2c:65:f1:2f:fd:0f:d6:d8:e5:
05:a8:aa:4e:3c:a2:da:b7:d8:ad:af:27:96:d8:37:
b1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BE:CE:BC:08:36:DB:FA:9F:5E:7C:BD:22:EF:02:38:E5:A1:FF:08
X509v3 Authority Key Identifier:
keyid:34:A6:3D:C8:61:20:E8:7F:4C:FF:8C:59:AF:32:61:E6:E1:29:2F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:55:4f:ac:70:df:e1:be:dc:70:72:7a:1f:75:fa:20:a9:bc:
06:ad:fc:a7:12:0b:66:d0:b8:f1:53:49:33:1f:d3:49:85:bb:
9b:eb:a1:6a:cd:06:be:56:cf:1d:84:00:8d:0f:97:2a:c8:55:
2a:4c:98:21:89:f0:3a:45:d3:17:55:10:3f:1d:db:f8:0e:b2:
f3:61:98:13:50:a3:dd:6d:30:20:80:11:c3:a4:6e:1e:ea:ba:
ec:90:41:c6:a7:92:ad:30:71:20:c3:a9:9b:f9:f2:fe:0a:9d:
3c:2b:8b:61:e2:79:79:cf:03:ac:d0:68:97:1b:79:3d:5d:14:
24:20:9b:70:47:f7:88:0d:98:c2:c3:9f:af:68:43:09:4e:02:
24:89:7e:00:99:1c:5a:da:95:fe:e7:55:37:7c:4b:13:77:c1:
73:70:d0:82:12:c5:0d:91:66:94:4e:56:6e:a2:4c:40:6e:37:
a7:06:e6:38:f6:56:88:4b:50:ba:8d:d7:f0:ed:42:b8:83:c6:
fb:52:44:32:1f:1e:ff:17:72:c8:7f:0f:78:16:93:0c:b4:7d:
b5:04:79:69:94:d0:84:82:43:4c:0d:c5:8c:0b:f0:c6:85:a6:
b8:26:13:90:4e:e1:72:db:5c:2e:bb:db:dc:cb:60:4a:8c:12:
69:f2:13:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:55 2025 by rpki-client