
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
File: nKihMlGaJClJSXNjuMqjPnLGc_g.mft (raw, json)
Hash identifier: gwQYFV9+C6kiARM+2+qrCaPIvc6LjEC3rhQSJqMvJFE=
Subject key identifier: 8B:14:B5:AC:98:76:38:20:D7:88:5C:A1:B0:05:47:DA:A8:E0:C2:53
Authority key identifier: 9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
Certificate issuer: /CN=9ca8a132519a242949497363b8caa33e72c673f8
Certificate serial: 01987DC13F64B9D7E871F5381A79310F0536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
Manifest number: 101B
Signing time: Wed 06 Aug 2025 05:01:13 +0000
Manifest this update: Wed 06 Aug 2025 05:01:13 +0000
Manifest next update: Thu 07 Aug 2025 05:01:13 +0000
Files and hashes: 1: dXm9nDAbHEfPr8e0rvdta5vcQCQ.roa (hash: ZAX5/DrLWdB1icFKrgXw3Y2Wbffkldc6zIYnws0ruBM=)
2: iRubAGtbRFzHiw3kU73WMgNN_Ew.roa (hash: zVFcmjx3cq29/V7ruFQJSBuo9AC0OuJEahRAn89+q2w=)
3: nKihMlGaJClJSXNjuMqjPnLGc_g.crl (hash: y0rluMx5P1dRAz5qHNB4sOioXcmaWCkjUuiOPmFsOlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c1:3f:64:b9:d7:e8:71:f5:38:1a:79:31:0f:05:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca8a132519a242949497363b8caa33e72c673f8
Validity
Not Before: Aug 6 05:01:13 2025 GMT
Not After : Aug 7 05:01:13 2025 GMT
Subject: CN=8b14b5ac98763820d7885ca1b00547daa8e0c253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:34:60:19:33:4e:9b:0b:10:4d:76:41:3e:56:
ae:66:cc:99:09:c3:ab:0f:99:1c:6b:49:e2:f8:4e:
f1:aa:73:82:86:38:eb:59:c6:00:c0:e6:52:78:ff:
33:04:08:4c:27:81:56:e1:62:f9:df:c2:1e:f3:71:
6b:6e:2e:14:26:ea:6c:1e:ac:c7:d1:a5:93:e0:5f:
36:6e:aa:96:fa:8f:fe:dd:19:4f:8e:c8:53:9a:8d:
ed:56:c3:19:82:1b:89:83:25:ef:6a:0f:0d:1d:54:
74:43:fd:2a:d1:c7:f4:84:d4:20:23:ae:a0:53:23:
43:89:86:07:29:47:f8:1b:87:5b:f7:37:d9:e5:13:
37:e0:95:fa:51:6f:d9:91:c5:14:df:2a:b9:3e:c9:
5a:2b:26:8d:7a:2d:d5:73:d9:b5:88:3d:02:fe:79:
2b:2d:68:9a:95:6e:50:8d:a0:20:06:44:f9:50:45:
05:98:5a:cf:53:8c:a3:16:12:ec:f7:26:65:94:3a:
dc:73:f8:22:03:fb:e9:37:0f:83:37:2f:86:bd:79:
ed:a4:58:26:26:a6:ce:5e:06:e0:35:37:24:96:12:
c5:2f:c8:6b:83:27:ef:fc:e8:4d:23:52:dc:fb:46:
6e:c5:8c:b7:00:d8:17:33:c5:25:de:a1:76:bd:08:
50:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:14:B5:AC:98:76:38:20:D7:88:5C:A1:B0:05:47:DA:A8:E0:C2:53
X509v3 Authority Key Identifier:
keyid:9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:bb:05:46:57:bb:c4:e8:b5:b8:99:42:30:00:c6:2c:9e:b5:
73:1b:9b:df:a6:3b:c1:e2:6b:1e:77:43:b5:0e:97:14:ab:7d:
9a:45:f3:8f:e3:30:77:c3:79:18:7c:b6:ea:e8:a5:fb:3d:d7:
74:ad:b0:40:b2:bf:f2:f0:24:9c:41:7a:e6:23:8b:72:40:e2:
d6:3e:c1:06:eb:18:12:6a:91:83:21:88:0b:a7:65:0e:54:70:
bb:9e:a7:c0:90:aa:54:e7:52:cd:64:12:d1:2f:50:8b:85:50:
32:39:f8:68:49:b5:65:a7:a7:87:32:e7:37:d9:86:1c:d6:8a:
e9:ae:2e:cb:97:c3:cb:86:51:ba:9d:65:ef:81:f6:0e:ca:76:
5a:03:55:59:d2:ca:54:cc:cc:07:b3:ca:d1:c7:e4:10:3f:08:
74:b8:e2:0c:2c:a5:54:46:4d:e0:79:ac:51:57:e0:53:a0:02:
1d:99:f4:e4:d8:c7:eb:a2:71:26:e4:ec:6b:27:99:9a:69:30:
2e:d9:76:49:c8:65:ee:7b:c6:a2:73:73:22:d6:dd:b2:94:84:
ec:ee:42:af:d9:e6:45:c5:fa:9e:1d:79:07:ec:0d:be:23:90:
cb:3f:fb:6d:92:33:2e:8b:bd:3f:87:27:e2:85:2b:c0:29:ad:
e9:57:11:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:28:58 2025 by rpki-client