Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
File: nkz1EkerV_Um84ByWaeNKwJZBgM.mft (raw, json)
Hash identifier: 3WBt6PJHMey+m1FWyl6BesfggEKGrvzr8p/LA/U2+oY=
Subject key identifier: 44:9D:C7:0D:18:84:D0:BB:60:19:A3:8A:BE:05:F4:CF:03:AF:D8:E3
Authority key identifier: 9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
Certificate issuer: /CN=9e4cf51247ab57f526f3807259a78d2b02590603
Certificate serial: 019A4E18F773E6B79904F753610A7719B272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 09:00:50 +0000
Manifest this update: Tue 04 Nov 2025 09:00:50 +0000
Manifest next update: Wed 05 Nov 2025 09:00:50 +0000
Files and hashes: 1: bUexMEG5KZ30YS3AFv2LLIm5VUk.roa (hash: 73jcglvdcT9moQ9QgtlZoUeROl6dwy33TWezKXRJ6GM=)
2: nkz1EkerV_Um84ByWaeNKwJZBgM.crl (hash: guF6GXgnz5AWP8SNwMP8+Sp3A9EkbJG3bKWiovylb8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:f7:73:e6:b7:99:04:f7:53:61:0a:77:19:b2:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4cf51247ab57f526f3807259a78d2b02590603
Validity
Not Before: Nov 4 09:00:50 2025 GMT
Not After : Nov 5 09:00:50 2025 GMT
Subject: CN=449dc70d1884d0bb6019a38abe05f4cf03afd8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d1:bb:25:62:4a:4e:03:79:97:23:8c:35:d2:
70:c7:0b:24:7a:0a:27:d0:87:b3:94:43:c8:91:c4:
05:ba:e0:25:d7:19:ee:ef:f9:ce:07:d5:2b:7f:82:
22:47:21:d5:a0:47:d1:bd:8f:eb:f5:73:e6:b1:46:
e1:be:9d:74:ad:60:69:ab:02:b4:39:4e:33:cd:01:
2d:90:95:1f:68:10:88:62:70:76:33:e6:7d:83:61:
a2:a0:57:fc:3f:06:8a:67:5c:b7:fc:29:ac:bf:04:
00:a3:6c:51:88:55:a8:bc:1e:9c:5f:53:f7:a7:30:
55:e6:40:1c:16:78:be:fc:e1:2f:d9:a6:bb:67:e1:
40:3c:7d:f4:c5:ec:81:bf:e1:cf:dc:76:7e:92:36:
f3:d4:58:84:e0:89:c0:1d:c1:65:ad:35:31:b2:58:
36:88:39:83:4d:ef:cd:e2:11:03:3c:c7:d7:e5:af:
90:9d:d3:18:4c:64:0e:c3:a9:65:24:40:3f:d6:ed:
e6:8f:c2:fd:e0:9d:b5:b1:1c:56:ca:0d:96:2d:18:
d6:3e:d9:fd:3c:38:f3:5b:4d:b5:a6:f6:4d:9a:15:
bf:65:22:26:07:5e:0a:a4:94:d8:2c:af:2d:2c:fd:
d4:34:ab:89:01:d4:ec:6b:3b:52:74:09:5a:e1:28:
b5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9D:C7:0D:18:84:D0:BB:60:19:A3:8A:BE:05:F4:CF:03:AF:D8:E3
X509v3 Authority Key Identifier:
keyid:9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:37:7e:2e:68:bf:03:8a:be:91:f5:93:24:dc:52:67:ec:5a:
29:8a:68:ff:d1:e5:4e:c8:1d:41:25:cc:84:2a:62:87:ae:0b:
10:d3:fb:f5:e4:ed:08:42:f4:87:c2:3e:5c:07:05:a8:88:f7:
b0:04:86:be:72:78:c5:85:e4:3d:e4:2f:23:e7:fb:e1:da:f4:
95:62:d6:7d:16:a6:76:76:09:28:a8:eb:2c:de:97:a0:0a:c3:
db:20:dd:34:a8:59:3d:f3:de:79:e0:6d:73:49:46:4b:3a:27:
f0:41:3f:2e:8c:c9:7b:92:47:8e:a1:53:d0:32:62:be:b3:a2:
22:4e:e8:7a:0a:42:0f:1d:0d:6d:5f:3b:79:32:49:3d:4c:da:
db:80:26:25:81:27:d6:43:ba:6b:5a:7c:aa:11:09:78:c3:a7:
70:2f:fe:34:7b:e2:97:3d:72:45:2a:5d:c0:3f:5f:27:a6:07:
54:58:3c:93:b7:87:66:12:64:ef:35:fc:e5:11:96:ff:6e:9e:
4f:00:7d:b5:75:60:93:fb:b8:ca:04:69:71:32:80:6a:a5:b3:
e6:c7:eb:bf:8d:b6:bb:ba:91:3b:60:d0:37:d8:00:f4:83:07:
83:0a:1e:f3:8e:0a:7a:ce:1b:5c:95:8b:46:9e:53:fa:06:cf:
2a:e6:a4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:35 2025 by rpki-client