Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
File: nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft (raw, json)
Hash identifier: tJpbNyDRjs+IDpl2tBELqngLtz4pJai9zvTS6sce/pU=
Subject key identifier: AD:9F:DA:AF:5C:F9:E0:51:29:14:08:62:EB:5C:82:AC:05:92:80:E3
Authority key identifier: 9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C
Certificate issuer: /CN=9e481c098a649265291d402f5f02fc43dda0fc8c
Certificate serial: 01989712F2847BB372E55093D70FCE821D03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
Manifest number: 0922
Signing time: Mon 11 Aug 2025 03:00:57 +0000
Manifest this update: Mon 11 Aug 2025 03:00:57 +0000
Manifest next update: Tue 12 Aug 2025 03:00:57 +0000
Files and hashes: 1: 1-Z1UOZXHudz9pMndWhDGiE0wZos.roa (hash: j553aDGXg+Mu/H/OVwEn4NDDiMjFpdhHQa+Xk6WS3jQ=)
2: nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl (hash: gfYLZzBCr9ClJP2mhLxweB+30Ww3VMnkkhdUr1wKIcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:12:f2:84:7b:b3:72:e5:50:93:d7:0f:ce:82:1d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e481c098a649265291d402f5f02fc43dda0fc8c
Validity
Not Before: Aug 11 03:00:57 2025 GMT
Not After : Aug 12 03:00:57 2025 GMT
Subject: CN=ad9fdaaf5cf9e05129140862eb5c82ac059280e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f5:02:46:ad:17:c7:96:30:e4:1a:bd:e5:c5:
54:36:a8:12:b2:49:c7:07:35:99:0b:1c:49:23:07:
32:15:e4:5e:03:70:95:8f:52:52:ac:7a:49:e9:3b:
07:96:25:85:c5:c3:2c:23:ec:5d:76:6d:ee:d4:c3:
86:0b:0e:3c:a5:c0:2b:aa:cd:f4:ec:ef:f9:02:8b:
c5:4a:72:f6:59:f0:1f:f9:18:6b:5d:5d:44:88:fd:
f8:2c:da:bc:56:e1:50:98:ce:3a:5f:c0:b6:70:02:
e4:0a:89:a3:9b:51:8c:f8:4e:2d:de:11:d5:7c:52:
f7:a7:d9:93:2e:d7:c9:21:0f:9f:c2:c9:4f:d6:61:
5e:98:45:74:ae:cc:d9:bb:54:07:86:f0:34:f2:69:
b9:ac:cf:78:d2:94:fe:b3:e9:5e:85:8f:d6:63:97:
6c:61:fb:24:35:03:f4:72:f6:7d:d9:11:0b:66:c7:
ac:ed:9e:f3:1c:74:bd:a8:20:4d:69:97:f8:55:ba:
bf:d2:fb:06:c1:7a:76:7e:5a:21:70:95:3b:80:26:
09:37:9e:b7:be:a6:ea:7c:29:62:3f:78:a8:8e:d5:
5d:f0:03:eb:b4:72:be:04:2d:b7:05:15:21:15:c5:
7d:08:46:b3:81:f4:08:a7:1f:ad:f2:79:e7:15:17:
ec:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:9F:DA:AF:5C:F9:E0:51:29:14:08:62:EB:5C:82:AC:05:92:80:E3
X509v3 Authority Key Identifier:
keyid:9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:cb:62:13:48:cf:ff:4a:16:e0:8b:ac:39:fe:92:d7:49:b3:
78:d7:2e:5d:29:ce:03:fe:d8:59:06:be:f7:7f:24:d2:87:d6:
6d:a2:ac:26:0e:8e:72:af:b4:40:ad:f2:79:bf:2c:f0:f2:e6:
20:18:12:a9:8d:4d:31:f9:a4:3d:0c:24:de:3a:3f:1a:0b:a5:
fa:86:a6:87:17:55:18:81:f4:80:ad:fa:af:93:aa:52:48:92:
e5:78:45:95:89:9b:eb:03:2c:54:d6:91:a3:bb:45:20:47:82:
a5:cf:ae:dc:d7:28:a7:34:3e:5b:61:f4:a5:28:3f:67:90:eb:
49:b2:ac:ab:fd:f7:5d:d9:75:15:44:3c:58:41:7d:e3:20:e2:
1f:3e:26:40:13:04:05:c4:a1:06:30:d3:42:72:d3:05:63:53:
42:6d:9a:94:6b:dd:af:0d:81:c8:c1:6f:7f:7d:30:7b:7c:71:
e9:46:19:cb:93:a8:ea:bd:9f:11:b9:63:76:42:39:ea:0e:d7:
b7:0c:e2:4f:7c:1d:2d:fa:c2:09:9c:69:e0:a2:19:75:f1:75:
ac:58:a5:39:75:8d:d3:b9:39:15:91:8e:2a:18:42:72:f2:08:
ab:6a:84:e8:39:f7:01:96:c8:87:37:a1:a6:3c:17:7f:a3:38:
f5:ed:93:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiXEvKEe7Ny5VCT1w/Ogh0DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNDgxYzA5OGE2NDkyNjUyOTFkNDAyZjVmMDJmYzQzZGRh
MGZjOGMwHhcNMjUwODExMDMwMDU3WhcNMjUwODEyMDMwMDU3WjAzMTEwLwYDVQQD
EyhhZDlmZGFhZjVjZjllMDUxMjkxNDA4NjJlYjVjODJhYzA1OTI4MGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PUCRq0Xx5Yw5Bq95cVUNqgSsknH
BzWZCxxJIwcyFeReA3CVj1JSrHpJ6TsHliWFxcMsI+xddm3u1MOGCw48pcArqs30
7O/5AovFSnL2WfAf+RhrXV1EiP34LNq8VuFQmM46X8C2cALkComjm1GM+E4t3hHV
fFL3p9mTLtfJIQ+fwslP1mFemEV0rszZu1QHhvA08mm5rM940pT+s+lehY/WY5ds
YfskNQP0cvZ92RELZses7Z7zHHS9qCBNaZf4Vbq/0vsGwXp2flohcJU7gCYJN563
vqbqfCliP3iojtVd8APrtHK+BC23BRUhFcV9CEazgfQIpx+t8nnnFRfsKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK2f2q9c+eBRKRQIYutcgqwFkoDjMB8GA1UdIwQY
MBaAFJ5IHAmKZJJlKR1AL18C/EPdoPyMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtnY0NZcGtrbVVwSFVBdlh3TDhROTJnX0l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9lNjQxNjktZDJiZC00NDk0LWIxZjkt
ZDY5ODU3ZWY3ZDFhLzEvbmtnY0NZcGtrbVVwSFVBdlh3TDhROTJnX0l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9lNjQxNjktZDJiZC00NDk0LWIxZjktZDY5ODU3ZWY3ZDFh
LzEvbmtnY0NZcGtrbVVwSFVBdlh3TDhROTJnX0l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA8tiE0jP
/0oW4IusOf6S10mzeNcuXSnOA/7YWQa+938k0ofWbaKsJg6Ocq+0QK3yeb8s8PLm
IBgSqY1NMfmkPQwk3jo/Ggul+oamhxdVGIH0gK36r5OqUkiS5XhFlYmb6wMsVNaR
o7tFIEeCpc+u3NcopzQ+W2H0pSg/Z5DrSbKsq/33Xdl1FUQ8WEF94yDiHz4mQBME
BcShBjDTQnLTBWNTQm2alGvdrw2ByMFvf30we3xx6UYZy5Oo6r2fEbljdkI56g7X
twziT3wdLfrCCZxp4KIZdfF1rFilOXWN07k5FZGOKhhCcvIIq2qE6Dn3AZbIhzeh
pjwXf6M49e2Tog==
-----END CERTIFICATE-----
Generated at Mon Aug 11 10:08:51 2025 by rpki-client