Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
File: nkQennBa2j-cHoJ80nbb0JdIdgg.mft (raw, json)
Hash identifier: kRcvmLXvGS58V858aAG7ZJLj+AclbHN5AjLR4pULfws=
Subject key identifier: 57:53:91:6B:2A:80:93:B8:2F:76:30:92:5F:49:13:8F:2F:23:42:C9
Authority key identifier: 9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
Certificate issuer: /CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Certificate serial: 019A4DAACB1DF425691629278DFBAF5F94B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
Manifest number: 108B
Signing time: Tue 04 Nov 2025 07:00:30 +0000
Manifest this update: Tue 04 Nov 2025 07:00:30 +0000
Manifest next update: Wed 05 Nov 2025 07:00:30 +0000
Files and hashes: 1: 7ySzESdDI-Eg0Y6xfFTDZOEQmZk.roa (hash: pTSWdDbQ1VFptqQJI8HP8UxKCCjXnA4njHY5srW26VY=)
2: BJvFiCQhGiEcXR3ndqL7T5BbDaU.roa (hash: Z+0E4ULnb/cJktOfFSiZcNmisROmxseIx6dqsZlDt4s=)
3: DfN89u0ZvthZxMTnUcXpfMOlKTs.roa (hash: msvl5pQNrCHYRzIqm+ZhzceMHlWNrK7pVc4fvVU8Aig=)
4: nkQennBa2j-cHoJ80nbb0JdIdgg.crl (hash: Cr9if7NGnM9li2mhJT/EpDMiI30HfJMhqsnP+vpDT0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:cb:1d:f4:25:69:16:29:27:8d:fb:af:5f:94:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Validity
Not Before: Nov 4 07:00:30 2025 GMT
Not After : Nov 5 07:00:30 2025 GMT
Subject: CN=5753916b2a8093b82f7630925f49138f2f2342c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1f:e1:d8:17:9b:ba:4f:1e:4b:c0:47:2b:d6:
16:91:e5:71:b8:cb:48:f2:09:6f:f3:f8:ea:2e:0d:
b7:89:b5:45:e1:bb:4f:a7:59:91:3d:e5:8b:bc:a1:
ea:67:5f:69:20:43:ec:9d:f7:e5:af:3a:d8:a2:58:
d5:7b:b4:15:1e:0d:e6:e6:08:44:e9:9a:19:66:8b:
1c:62:ee:2b:03:3f:37:cb:67:7e:4b:43:17:0b:23:
2b:3e:90:a8:a1:10:db:14:b3:8d:06:ed:d6:f2:51:
16:45:bc:97:6e:22:4a:0f:0b:39:da:04:34:5e:7c:
59:1f:f9:2c:e1:20:47:83:b4:a6:ca:42:98:eb:6f:
3f:74:a7:50:03:01:21:22:c7:d3:f2:01:19:1a:c8:
ab:94:56:5f:5c:81:5a:7b:27:d4:8c:6a:a6:89:02:
ac:e8:b8:6c:a2:5e:4b:b0:62:ef:4d:66:f6:53:68:
b9:95:5b:28:6b:b6:76:6b:24:5b:f2:7a:fa:26:16:
f3:58:b2:2a:14:28:f8:18:21:5c:b9:c5:d0:0a:ad:
08:93:84:f9:62:36:cf:20:ab:60:1a:a9:42:44:06:
87:21:ba:83:63:b4:8a:b3:f1:6f:68:4f:a2:99:78:
65:21:dc:0d:93:05:3a:c5:cb:c5:0d:59:7b:4f:0c:
8a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:53:91:6B:2A:80:93:B8:2F:76:30:92:5F:49:13:8F:2F:23:42:C9
X509v3 Authority Key Identifier:
keyid:9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a3:9a:61:12:8b:3e:b4:fd:4a:68:3d:8c:cb:92:ea:08:07:
bb:04:63:a1:5d:0b:65:54:a8:99:07:02:a0:55:ad:ed:f0:7d:
1e:28:db:e0:2d:3b:ba:f3:85:13:72:31:b4:a9:1d:75:ff:3f:
c2:53:67:da:f0:d3:6d:4e:1a:04:77:be:5f:0e:d8:8d:8f:e6:
d7:05:bb:1e:0f:a2:62:fe:ba:ce:a0:5e:44:3f:8e:48:4b:3c:
c4:2d:7e:05:0e:b3:64:24:d5:fa:d3:52:cc:b0:0c:01:9b:da:
08:69:0f:ad:6f:fc:67:e3:df:a6:dc:9e:d2:3d:a1:65:ad:e2:
f4:7c:70:08:85:69:62:7e:0d:88:e8:71:b4:f7:39:51:ce:9a:
0d:35:be:65:62:79:24:a5:a3:38:c4:2e:e0:5d:9b:66:90:99:
57:c6:0a:a3:6f:1c:96:f4:8e:8e:a0:53:61:95:df:19:2e:58:
12:09:56:94:db:9a:77:f7:92:ed:21:90:4f:87:d0:10:b5:51:
4a:2e:38:77:39:76:47:ae:cd:16:d5:0d:d4:dc:28:16:e1:46:
9d:43:a1:55:be:c5:da:09:b1:05:a9:4d:cf:14:a0:ae:aa:b0:
1c:24:91:15:5e:44:37:e5:be:01:76:88:a5:e3:22:a7:21:65:
a6:bd:6c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:54 2025 by rpki-client