Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
File: nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft (raw, json)
Hash identifier: 0QuAePD/vhTcs4Bphdm8fEtey1PdyiBSRcOEXUQFgoA=
Subject key identifier: 07:36:DE:B9:05:BE:2D:93:ED:60:80:F1:1D:22:A7:99:8F:AF:1F:EC
Authority key identifier: 9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
Certificate issuer: /CN=9e42ca46688a837b575234ce6a1a326587d6c204
Certificate serial: 019A4E4FAD8C748B862787444F60D34D630B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
Manifest number: 11B0
Signing time: Tue 04 Nov 2025 10:00:35 +0000
Manifest this update: Tue 04 Nov 2025 10:00:35 +0000
Manifest next update: Wed 05 Nov 2025 10:00:35 +0000
Files and hashes: 1: 2sz7XXaQR044rc-q4fD0WIzUxYQ.roa (hash: pi07prhyU4hZ/cG1dB+HetMAgpuPmtLhNCb2plULwQE=)
2: D2HSpId2VYXPjhlDPg7eWeC18Pw.roa (hash: UXPvVbmh0MzKjV4UFrcu58vEq8RZqO0eg1YthASI72I=)
3: UnUG9yNZwHFtxPW6hAKjubIbusM.roa (hash: xsmRUWemFAWw0xMxDEpqyiLbWsqfijBX0AOIJJiaM5U=)
4: nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl (hash: eUlhvTOXH9DPgcB8Eed2UtdKmEt6rViIujL4fVIGQbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:ad:8c:74:8b:86:27:87:44:4f:60:d3:4d:63:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e42ca46688a837b575234ce6a1a326587d6c204
Validity
Not Before: Nov 4 10:00:35 2025 GMT
Not After : Nov 5 10:00:35 2025 GMT
Subject: CN=0736deb905be2d93ed6080f11d22a7998faf1fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:94:82:4e:38:81:66:2a:8e:b6:3b:1a:97:75:
63:a7:72:35:3b:4d:26:ec:9e:d8:72:58:ad:ae:14:
d7:e0:6d:5e:9c:49:bf:96:ef:1f:24:6d:3c:c1:17:
40:e7:75:67:c4:63:cf:25:ed:72:26:5b:fd:f2:75:
e4:1d:6e:03:11:9c:86:8b:81:bc:56:ce:f1:89:ba:
09:6e:26:3b:5c:09:b1:0d:3d:44:85:13:4c:0f:ea:
39:2d:15:79:33:61:0f:92:1a:a5:b5:4f:b8:3d:a9:
63:f0:85:12:fb:35:a2:b3:60:ab:0e:ed:0c:0d:6e:
26:0c:e5:b9:15:c6:20:75:5b:e0:c9:d0:f0:25:a3:
e2:99:12:23:e1:13:08:51:2b:b4:ad:4a:0d:f1:a2:
73:c7:5b:ec:57:a9:44:ef:9e:57:21:64:7d:b8:df:
a0:17:62:de:30:c7:42:9b:d6:3b:fd:85:a8:30:d9:
f1:eb:ed:52:4b:f6:ec:00:67:62:9c:62:23:5c:13:
bd:b5:20:40:34:e1:8c:d9:95:f9:3a:0f:d1:95:b9:
d7:bf:42:df:ca:8e:04:04:4d:a2:0f:5e:f4:22:16:
ef:bd:1a:6c:c3:03:ee:6b:6b:5c:96:64:56:3e:5f:
1b:b9:b3:37:3f:3f:58:13:52:6d:3b:b8:f6:59:73:
1b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:36:DE:B9:05:BE:2D:93:ED:60:80:F1:1D:22:A7:99:8F:AF:1F:EC
X509v3 Authority Key Identifier:
keyid:9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b2:b8:9f:db:8c:fe:6b:96:4b:03:b5:d6:e9:b1:6a:70:fc:
a5:72:d8:c0:17:00:f7:ae:fd:ff:0c:c9:7f:ca:51:c5:e5:96:
51:84:6a:55:22:5e:ed:80:0c:bb:93:9d:15:58:c1:2f:a0:bb:
8e:11:23:74:1a:57:49:dc:6b:a4:4b:34:69:8a:fd:e7:64:eb:
0b:9b:12:1e:29:d4:03:e6:55:1a:80:79:11:fa:38:e1:ec:33:
28:dc:61:63:9d:3e:73:9c:26:ec:fc:27:40:5b:5b:69:d9:32:
c3:aa:28:58:de:1e:82:91:c9:bb:55:15:5a:02:68:5f:b4:21:
24:ca:9b:85:b6:ed:a4:91:40:c8:15:56:a8:d2:17:c5:e0:3c:
94:9b:2b:84:8b:a3:33:e1:39:40:58:93:d7:f1:d8:86:42:d4:
31:f0:17:e0:57:fe:08:42:3d:a5:30:42:ac:9f:6f:5a:29:2c:
c5:66:26:10:20:f2:a5:5a:a8:29:55:c5:57:91:ce:99:e3:81:
19:9d:2c:11:27:44:37:25:1b:e3:ee:f2:e5:3a:cf:23:23:be:
a4:ec:13:bc:9c:ce:e0:5e:6f:11:21:25:b3:ef:e1:b0:23:2b:
89:92:b1:5f:7c:2e:27:e7:61:ff:d0:1d:63:de:eb:81:50:e6:
79:0a:89:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT62MdIuGJ4dET2DTTWMLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNDJjYTQ2Njg4YTgzN2I1NzUyMzRjZTZhMWEzMjY1ODdk
NmMyMDQwHhcNMjUxMTA0MTAwMDM1WhcNMjUxMTA1MTAwMDM1WjAzMTEwLwYDVQQD
EygwNzM2ZGViOTA1YmUyZDkzZWQ2MDgwZjExZDIyYTc5OThmYWYxZmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JSCTjiBZiqOtjsal3Vjp3I1O00m
7J7YclitrhTX4G1enEm/lu8fJG08wRdA53VnxGPPJe1yJlv98nXkHW4DEZyGi4G8
Vs7xiboJbiY7XAmxDT1EhRNMD+o5LRV5M2EPkhqltU+4Palj8IUS+zWis2CrDu0M
DW4mDOW5FcYgdVvgydDwJaPimRIj4RMIUSu0rUoN8aJzx1vsV6lE755XIWR9uN+g
F2LeMMdCm9Y7/YWoMNnx6+1SS/bsAGdinGIjXBO9tSBANOGM2ZX5Og/RlbnXv0Lf
yo4EBE2iD170IhbvvRpswwPua2tclmRWPl8bubM3Pz9YE1JtO7j2WXMbIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAc23rkFvi2T7WCA8R0ip5mPrx/sMB8GA1UdIwQY
MBaAFJ5CykZoioN7V1I0zmoaMmWH1sIEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtMS1JtaUtnM3RYVWpUT2Fob3laWWZXd2dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9lZTI3OTMtYTBjOS00MmRjLWE2YTIt
MzI5YmEzODhiN2NmLzEvbmtMS1JtaUtnM3RYVWpUT2Fob3laWWZXd2dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9lZTI3OTMtYTBjOS00MmRjLWE2YTItMzI5YmEzODhiN2Nm
LzEvbmtMS1JtaUtnM3RYVWpUT2Fob3laWWZXd2dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADLK4n9uM
/muWSwO11umxanD8pXLYwBcA9679/wzJf8pRxeWWUYRqVSJe7YAMu5OdFVjBL6C7
jhEjdBpXSdxrpEs0aYr952TrC5sSHinUA+ZVGoB5Efo44ewzKNxhY50+c5wm7Pwn
QFtbadkyw6ooWN4egpHJu1UVWgJoX7QhJMqbhbbtpJFAyBVWqNIXxeA8lJsrhIuj
M+E5QFiT1/HYhkLUMfAX4Ff+CEI9pTBCrJ9vWiksxWYmECDypVqoKVXFV5HOmeOB
GZ0sESdENyUb4+7y5TrPIyO+pOwTvJzO4F5vESEls+/hsCMriZKxX3wuJ+dh/9Ad
Y97rgVDmeQqJhA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:41 2025 by rpki-client