Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft
File: Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft (raw, json)
Hash identifier: LlP2cP5k2ZUJ+nsq+ZRA/UXVCrULSOh4BoSWvqeMCiQ=
Subject key identifier: B2:EE:4F:3D:D0:35:D5:9B:2C:E8:0E:C9:24:A5:F5:1E:8F:E2:36:B7
Authority key identifier: 36:4C:EC:AD:BB:FC:BE:96:1B:42:ED:06:27:77:C8:C5:68:7C:36:71
Certificate issuer: /CN=364cecadbbfcbe961b42ed062777c8c5687c3671
Certificate serial: 019A4F61E0B923062FA178554DE54029F1D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft
Manifest number: 060A
Signing time: Tue 04 Nov 2025 15:00:05 +0000
Manifest this update: Tue 04 Nov 2025 15:00:05 +0000
Manifest next update: Wed 05 Nov 2025 15:00:05 +0000
Files and hashes: 1: Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.crl (hash: LQembffmmTS7u4AcCB8r/qSAPAdfhZzY0vjnBfO40uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:e0:b9:23:06:2f:a1:78:55:4d:e5:40:29:f1:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=364cecadbbfcbe961b42ed062777c8c5687c3671
Validity
Not Before: Nov 4 15:00:05 2025 GMT
Not After : Nov 5 15:00:05 2025 GMT
Subject: CN=b2ee4f3dd035d59b2ce80ec924a5f51e8fe236b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dc:3f:c7:d9:53:ff:bc:4f:82:90:15:10:35:
1f:ac:cb:9b:27:7a:20:24:8b:1d:93:2b:1b:13:8f:
e7:e3:24:2e:00:24:0f:87:1b:db:53:0d:6c:d0:ba:
04:c2:8b:a7:f5:ba:1a:d2:00:4b:41:2f:6e:0b:99:
0c:25:88:a0:fd:c4:9b:f0:ff:ac:9f:7b:2d:62:3e:
85:8e:77:bb:49:c7:fe:06:13:c0:74:5e:fd:39:a6:
6b:1b:a8:51:60:de:33:fd:06:80:b2:72:6c:5a:c1:
d3:82:67:df:d6:83:fb:1b:73:ba:5d:08:fe:7e:2a:
78:a2:3e:da:0b:56:3f:29:13:00:28:1f:6f:b3:8f:
57:35:15:c0:b1:c0:eb:ee:cc:1d:a8:47:6d:26:c5:
85:14:46:f0:0a:6c:a6:c2:ab:d0:cf:da:ff:04:ba:
44:d5:6c:20:eb:45:f4:ac:4c:70:0f:53:81:48:f6:
7e:b4:17:68:b3:e3:81:e6:cd:11:4a:45:7b:26:6e:
64:6c:5f:39:2f:1b:93:5d:7b:e6:a3:c5:57:ea:4e:
15:6e:a3:03:4f:f4:d7:85:8e:ee:e8:51:97:15:c1:
96:b3:0e:f6:66:40:0e:e9:85:83:79:5e:8a:4f:33:
f8:26:20:76:97:83:fc:ba:2e:ef:09:a2:af:0f:97:
f4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:EE:4F:3D:D0:35:D5:9B:2C:E8:0E:C9:24:A5:F5:1E:8F:E2:36:B7
X509v3 Authority Key Identifier:
keyid:36:4C:EC:AD:BB:FC:BE:96:1B:42:ED:06:27:77:C8:C5:68:7C:36:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ce6274-b87b-4a5d-be24-35660e71ba38/1/Nkzsrbv8vpYbQu0GJ3fIxWh8NnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:0e:cd:8b:59:74:83:73:82:2d:38:ab:77:5f:f7:46:f4:d3:
e7:fe:53:d1:55:21:c6:fa:a6:c8:9b:8a:17:bf:13:b8:3f:02:
0b:a9:7e:be:28:b1:8c:87:10:54:5e:5b:15:57:e7:f1:a2:89:
37:36:f5:2a:a1:64:8c:97:0a:9a:72:d7:de:de:38:72:cd:88:
d9:43:a9:41:11:2a:c5:67:12:e8:be:fa:f1:e9:08:f9:b9:53:
7b:37:4f:27:1e:83:7e:88:04:2f:30:18:7a:bd:d3:80:b9:f7:
f9:60:50:57:ac:a0:73:5a:e1:ff:e2:05:b7:90:08:0b:f1:f8:
4b:78:b3:15:52:b6:f1:30:69:cb:90:dc:ee:cd:98:48:9d:52:
7b:9d:bd:c5:65:cf:77:a2:85:0a:4f:f2:6b:a0:10:9a:15:41:
98:a8:a8:1b:5a:f0:8e:08:ac:d2:5a:5b:dc:c0:c5:6d:ca:65:
47:fa:c6:75:81:8a:b6:ea:1e:f7:42:22:ab:4d:81:f3:82:0d:
aa:34:76:d3:f3:ac:fe:74:c9:f1:61:36:6f:76:34:6b:10:e5:
7d:59:1c:4f:d5:a2:4a:de:3f:20:21:e5:80:67:14:22:62:54:
23:bc:ca:b6:d7:73:80:c2:81:4a:cf:d6:56:f4:72:1b:f9:71:
af:17:ff:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:20:26 2025 by rpki-client