Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
File: nkJ08Tm9Zpqu93TWUDso2ZZje70.mft (raw, json)
Hash identifier: oljc5YOLlM6BmX5gWVSUg4+6DW3x8/ef9zso4KGPNsE=
Subject key identifier: 1E:27:AC:56:F3:15:50:C2:4F:67:18:B6:A7:41:BD:9C:AE:96:79:FF
Authority key identifier: 9E:42:74:F1:39:BD:66:9A:AE:F7:74:D6:50:3B:28:D9:96:63:7B:BD
Certificate issuer: /CN=9e4274f139bd669aaef774d6503b28d996637bbd
Certificate serial: 019A4D73E262E243B51CA03A20547F8D186E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 06:00:31 +0000
Manifest this update: Tue 04 Nov 2025 06:00:31 +0000
Manifest next update: Wed 05 Nov 2025 06:00:31 +0000
Files and hashes: 1: j4Iq2zixx3mYag3J5EZ9oVMKB3Q.roa (hash: /Gl9L/9VfxRkLzepVwRrDXgXI17GQGF8IKxBmlZI9QI=)
2: nkJ08Tm9Zpqu93TWUDso2ZZje70.crl (hash: w2EnSOFRNlcjGrWwiurq6WcV7NFJXv8R+G6VNmRKKpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:e2:62:e2:43:b5:1c:a0:3a:20:54:7f:8d:18:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4274f139bd669aaef774d6503b28d996637bbd
Validity
Not Before: Nov 4 06:00:31 2025 GMT
Not After : Nov 5 06:00:31 2025 GMT
Subject: CN=1e27ac56f31550c24f6718b6a741bd9cae9679ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2b:4c:4e:24:ea:37:0b:4b:33:c2:e1:e7:a0:
f4:ea:d5:ae:c4:5b:f4:6c:f2:17:c3:93:7e:be:5b:
3e:b4:21:39:b9:5e:29:b8:89:60:ad:14:b1:ad:4a:
c0:07:98:e6:11:8b:0d:78:f9:0f:7f:89:88:77:ad:
8d:32:97:1c:0c:46:be:76:03:f2:dc:e0:7d:61:23:
72:bf:2f:63:88:b0:9b:b6:b0:c3:18:57:9a:55:1b:
a3:3e:bb:4d:ef:60:a7:3a:b9:21:b0:87:8a:2e:d1:
cf:55:e9:09:e3:b2:16:2d:89:85:76:5d:b4:96:ef:
d4:0d:6b:f5:ea:f0:c1:29:39:18:5b:dd:37:87:5d:
cc:7f:33:bf:44:03:2d:e9:c1:3b:3b:24:41:94:af:
23:79:72:55:56:e9:b4:6c:25:b6:1d:56:0b:9b:1c:
1e:79:83:28:5f:73:eb:5d:db:e9:3c:41:24:36:99:
37:23:55:fd:ea:7b:c3:c8:b3:72:19:60:96:ef:2d:
ba:aa:4e:32:6b:b7:be:fb:ac:2a:d6:59:ea:98:91:
d3:90:3c:f1:77:80:f4:9e:dd:0e:66:b7:88:12:63:
0a:f6:b7:84:39:b9:96:49:ce:16:57:b6:aa:88:0a:
9c:d1:33:a6:cf:0f:4f:f2:7e:49:31:6a:98:ce:fe:
14:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:27:AC:56:F3:15:50:C2:4F:67:18:B6:A7:41:BD:9C:AE:96:79:FF
X509v3 Authority Key Identifier:
keyid:9E:42:74:F1:39:BD:66:9A:AE:F7:74:D6:50:3B:28:D9:96:63:7B:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:89:0d:c5:aa:ce:24:14:b8:7d:e6:49:c6:14:6c:f9:1d:14:
c4:4f:fc:5b:07:94:89:62:4c:e4:f7:6c:0e:a4:47:25:c5:ad:
04:3a:f4:71:9f:dc:b1:b7:d8:29:05:9e:db:1d:0c:c5:df:40:
73:fc:5d:d8:c3:68:cd:0d:a0:89:08:ca:14:33:2d:c4:33:e0:
e9:4b:3f:29:0f:a9:d0:a9:09:48:b0:55:90:6e:dd:2a:9e:59:
2e:87:31:ba:93:f0:cc:6f:bb:4c:62:07:f8:6f:6c:bc:2a:d5:
0d:03:fe:c5:bb:b6:cb:60:f5:b9:38:5f:74:16:df:cb:dc:80:
41:e5:c3:d2:f0:6b:2d:aa:a1:51:32:19:e9:84:51:c7:65:cb:
aa:ba:3d:37:c3:17:9a:f1:7b:2d:52:27:d5:d6:b8:d1:70:bc:
9d:fb:91:36:97:fb:09:e1:f7:c3:4b:b1:30:07:be:0b:fb:14:
cd:49:b1:c8:2f:7b:cb:3e:94:17:18:54:c0:ae:0e:6f:2a:80:
d6:7c:fb:bf:cb:02:4f:33:0f:bf:d7:f7:66:03:3b:f7:d1:25:
b9:56:54:f6:7c:b2:b3:16:a9:ea:90:1a:1a:b7:38:af:66:77:
29:b0:b6:b4:60:5c:29:8f:a8:d0:13:d6:6e:21:60:39:14:cc:
7a:11:00:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:17:40 2025 by rpki-client