Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
File: nKihMlGaJClJSXNjuMqjPnLGc_g.mft (raw, json)
Hash identifier: 1kAP2+6UxWaEPPNqjTkDyFtqmdC/iheKrJIkJx06A50=
Subject key identifier: 49:18:64:DE:71:E5:BF:97:18:5D:73:93:8B:72:17:8A:FD:07:3A:89
Authority key identifier: 9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
Certificate issuer: /CN=9ca8a132519a242949497363b8caa33e72c673f8
Certificate serial: 019A51194C3075F05AB3A00D9E99E1EA3809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
Manifest number: 110D
Signing time: Tue 04 Nov 2025 23:00:03 +0000
Manifest this update: Tue 04 Nov 2025 23:00:03 +0000
Manifest next update: Wed 05 Nov 2025 23:00:03 +0000
Files and hashes: 1: dXm9nDAbHEfPr8e0rvdta5vcQCQ.roa (hash: ZAX5/DrLWdB1icFKrgXw3Y2Wbffkldc6zIYnws0ruBM=)
2: iRubAGtbRFzHiw3kU73WMgNN_Ew.roa (hash: zVFcmjx3cq29/V7ruFQJSBuo9AC0OuJEahRAn89+q2w=)
3: nKihMlGaJClJSXNjuMqjPnLGc_g.crl (hash: HJ3E6O8rmKsupJk76BxReZ+CZZI+qFHqwmAg/MZ7OTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:4c:30:75:f0:5a:b3:a0:0d:9e:99:e1:ea:38:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca8a132519a242949497363b8caa33e72c673f8
Validity
Not Before: Nov 4 23:00:03 2025 GMT
Not After : Nov 5 23:00:03 2025 GMT
Subject: CN=491864de71e5bf97185d73938b72178afd073a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:47:0f:7f:3f:6d:0e:0d:cb:3b:26:97:83:7f:
92:ea:7b:20:ab:fe:73:7e:9d:6b:54:84:c4:13:2f:
4a:55:f3:0f:8f:c5:b0:ec:c1:0a:d4:91:89:dc:e0:
ea:36:de:35:33:66:f9:d6:f9:d4:ef:47:56:7d:da:
eb:bd:4f:b4:61:e5:09:af:2e:4b:d5:bf:62:8e:fd:
08:d1:65:bc:68:9d:1a:ef:0a:ec:37:55:a0:40:eb:
23:2c:52:45:9b:37:4d:1e:a5:01:4f:93:dd:8f:41:
02:73:f5:82:66:43:81:9a:17:7a:41:03:b7:20:01:
b8:a9:dc:22:b7:2c:0d:c7:36:06:9b:8f:ef:c3:c9:
15:8e:d1:61:b8:bc:09:48:1c:53:b3:da:75:27:e0:
75:b8:75:40:9c:85:f7:22:1f:19:b3:23:9b:52:0a:
26:84:cd:3b:ff:3e:a6:99:2c:0e:45:6f:d7:2b:a7:
ea:04:3e:c1:9c:fa:40:87:29:91:f5:8c:e5:23:22:
c2:1b:3c:dd:4b:4d:f9:24:6e:ff:cd:e5:5c:91:5c:
77:a8:70:b0:5c:f4:2d:19:ff:8c:2e:2c:66:df:10:
2d:58:90:ab:f8:b4:fa:89:d8:88:23:71:f9:85:18:
87:93:33:45:36:8c:61:6c:8a:9e:9e:3a:1f:6f:0e:
03:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:18:64:DE:71:E5:BF:97:18:5D:73:93:8B:72:17:8A:FD:07:3A:89
X509v3 Authority Key Identifier:
keyid:9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:ed:71:04:78:05:59:fd:66:23:90:bd:05:ff:30:e0:17:cf:
34:c2:09:57:8a:e7:3b:5e:88:b6:b8:94:ab:74:98:af:74:de:
47:fc:9e:ee:da:4e:2d:e4:fb:d3:e1:74:ce:4d:77:a0:3f:b1:
2f:e2:88:1c:37:22:e9:a5:4b:cb:11:e2:c4:66:07:26:b9:86:
9c:48:86:20:f4:ff:ed:63:0c:0c:d8:d3:98:d6:3f:25:31:91:
2b:b3:11:a0:b7:16:38:47:21:66:61:71:e2:83:04:b9:26:b7:
4b:99:d0:ae:88:b0:eb:b8:90:e1:2f:a6:40:72:33:49:ef:74:
c6:78:8d:7c:66:a8:91:b3:d2:84:be:eb:3b:fe:62:80:14:6a:
f7:a4:a2:38:ab:f3:fe:43:ac:8c:a1:a2:06:af:85:ae:6a:88:
d0:38:f8:aa:1f:67:2d:bf:ed:af:e3:30:61:0c:69:fa:ea:ec:
66:74:db:39:56:73:7d:8c:8d:70:cb:02:f2:dc:22:3b:10:f6:
9d:a8:72:2a:b7:d3:a1:67:5b:89:6d:4a:6c:44:64:a8:56:ec:
9c:12:8f:0c:42:96:38:1a:d9:7d:dc:4d:7d:20:9a:b2:d3:e0:
79:0f:80:f2:12:87:04:e5:b6:6c:32:f9:19:b7:12:96:3e:76:
2b:dd:bf:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRGUwwdfBas6ANnpnh6jgJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYThhMTMyNTE5YTI0Mjk0OTQ5NzM2M2I4Y2FhMzNlNzJj
NjczZjgwHhcNMjUxMTA0MjMwMDAzWhcNMjUxMTA1MjMwMDAzWjAzMTEwLwYDVQQD
Eyg0OTE4NjRkZTcxZTViZjk3MTg1ZDczOTM4YjcyMTc4YWZkMDczYTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkcPfz9tDg3LOyaXg3+S6nsgq/5z
fp1rVITEEy9KVfMPj8Ww7MEK1JGJ3ODqNt41M2b51vnU70dWfdrrvU+0YeUJry5L
1b9ijv0I0WW8aJ0a7wrsN1WgQOsjLFJFmzdNHqUBT5Pdj0ECc/WCZkOBmhd6QQO3
IAG4qdwitywNxzYGm4/vw8kVjtFhuLwJSBxTs9p1J+B1uHVAnIX3Ih8ZsyObUgom
hM07/z6mmSwORW/XK6fqBD7BnPpAhymR9YzlIyLCGzzdS035JG7/zeVckVx3qHCw
XPQtGf+MLixm3xAtWJCr+LT6idiII3H5hRiHkzNFNoxhbIqenjofbw4D2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEkYZN5x5b+XGF1zk4tyF4r9BzqJMB8GA1UdIwQY
MBaAFJyooTJRmiQpSUlzY7jKoz5yxnP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbktpaE1sR2FKQ2xKU1hOanVNcWpQbkxHY19nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8zZTBlOWEtNTFmMy00OWRlLTlkMWIt
MDBjZDg2YWY4NDlkLzEvbktpaE1sR2FKQ2xKU1hOanVNcWpQbkxHY19nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8zZTBlOWEtNTFmMy00OWRlLTlkMWItMDBjZDg2YWY4NDlk
LzEvbktpaE1sR2FKQ2xKU1hOanVNcWpQbkxHY19nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGO1xBHgF
Wf1mI5C9Bf8w4BfPNMIJV4rnO16ItriUq3SYr3TeR/ye7tpOLeT70+F0zk13oD+x
L+KIHDci6aVLyxHixGYHJrmGnEiGIPT/7WMMDNjTmNY/JTGRK7MRoLcWOEchZmFx
4oMEuSa3S5nQroiw67iQ4S+mQHIzSe90xniNfGaokbPShL7rO/5igBRq96SiOKvz
/kOsjKGiBq+FrmqI0Dj4qh9nLb/tr+MwYQxp+ursZnTbOVZzfYyNcMsC8twiOxD2
nahyKrfToWdbiW1KbERkqFbsnBKPDEKWOBrZfdxNfSCastPgeQ+A8hKHBOW2bDL5
GbcSlj52K92/zA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:45 2025 by rpki-client