Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
File: NkgvLv77kno8r_6h2R8kF_PS59c.mft (raw, json)
Hash identifier: pEgFu5ZhbyOPL2TeP3IhpwABZsZDP0fku656+XPlNJc=
Subject key identifier: 59:05:E7:BA:C7:04:DD:0A:07:68:0A:7C:24:5A:72:9A:8B:C1:60:9E
Authority key identifier: 36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7
Certificate issuer: /CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7
Certificate serial: 019A50E409664560E639B006F29D9CE55C37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
Manifest number: 10CF
Signing time: Tue 04 Nov 2025 22:01:53 +0000
Manifest this update: Tue 04 Nov 2025 22:01:53 +0000
Manifest next update: Wed 05 Nov 2025 22:01:53 +0000
Files and hashes: 1: G4a30ttfjHFxij-eVrmW-fidH94.roa (hash: WeyOFJKV6AN+3rP0u3s/qWHiA31iewGjEQEJOzY4D5I=)
2: NkgvLv77kno8r_6h2R8kF_PS59c.crl (hash: n5MEfECd/ho3FcCdRCt7Bev6AtZnVTSyPwNifTZQ34k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:09:66:45:60:e6:39:b0:06:f2:9d:9c:e5:5c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7
Validity
Not Before: Nov 4 22:01:53 2025 GMT
Not After : Nov 5 22:01:53 2025 GMT
Subject: CN=5905e7bac704dd0a07680a7c245a729a8bc1609e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:aa:6f:41:a4:56:29:11:60:b7:29:1d:9a:eb:
67:c7:22:d6:1e:2f:ec:c3:41:b6:f9:9a:8a:cf:94:
94:14:bb:8d:30:1a:37:bc:99:8c:cf:30:94:d4:ae:
f4:19:c0:73:ce:ee:6c:8d:91:59:2b:59:60:c4:80:
80:dc:d2:bd:01:59:f6:49:64:27:88:f1:ae:fb:ad:
af:5a:9c:29:92:29:86:54:00:26:26:c5:34:b7:e5:
98:be:dc:af:f9:cf:0e:78:0b:51:4b:ba:eb:2d:f4:
3f:d1:a0:20:56:65:e5:7d:60:59:57:94:69:8d:42:
e0:53:b8:4f:51:26:c5:1f:d0:e9:e8:31:dd:55:59:
f8:78:d5:0a:93:6d:5d:b5:7b:b4:e1:93:7a:ab:25:
d8:52:67:c5:00:c3:2b:ed:e4:2f:2a:c8:49:b7:df:
77:4d:b1:a7:8d:c3:ca:e2:e3:cb:f1:f2:a6:c7:39:
31:d4:fd:ce:8d:bc:6b:ce:f9:a3:74:6c:cb:53:0a:
19:e0:85:24:6a:dc:ef:2d:14:26:f2:91:46:7a:51:
6d:5a:82:d2:68:8f:4d:c0:a3:42:92:b4:1d:ce:05:
09:0a:54:08:36:67:28:51:1e:00:76:59:f7:95:de:
b9:0e:64:48:8d:1a:f3:14:68:e0:45:2e:5d:e4:c7:
ff:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:05:E7:BA:C7:04:DD:0A:07:68:0A:7C:24:5A:72:9A:8B:C1:60:9E
X509v3 Authority Key Identifier:
keyid:36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:8f:a7:60:3b:0f:96:78:0e:07:92:fc:d8:10:32:b1:a0:d1:
96:bd:98:8f:f0:f4:ec:12:51:56:52:ba:e2:64:cb:9a:14:17:
50:e4:01:ad:08:35:7d:cb:1d:1d:3d:9c:af:27:be:0e:e2:a7:
b1:5e:08:5b:d9:d1:79:40:b0:12:28:b6:47:40:56:cb:13:11:
b5:05:bd:91:63:14:1e:2e:c2:43:24:35:82:d9:87:51:f5:d4:
f7:89:6a:e2:a2:9c:ee:a9:07:f0:50:ab:7e:44:79:6b:4a:97:
ce:c2:39:93:be:a8:b6:c6:d9:cd:93:62:54:0b:cc:52:f0:1e:
d0:6d:f8:3b:54:dc:c2:0c:7d:50:8d:4b:a6:5e:8b:33:f0:a2:
89:14:23:2f:cc:ba:2a:d5:cd:1f:62:73:37:a5:22:c9:73:f0:
f3:16:3b:8b:2a:28:b4:a1:7f:40:15:12:0f:7d:55:77:d3:76:
5e:17:d1:2e:9d:7a:70:4d:10:49:86:64:9d:77:7d:84:6d:3b:
1a:0f:ec:cc:91:5f:01:1a:77:5f:6d:b8:63:5f:2e:e5:91:7f:
42:c1:d0:f1:10:92:e6:cb:21:fe:f9:0c:d4:c3:d9:2c:75:05:
f2:2e:c8:51:f8:df:7e:8f:a3:3b:d4:61:d5:89:4c:b6:1d:19:
5d:80:70:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:05:51 2025 by rpki-client