Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
File: nkuBjJLE5paGs8KBAIVd-lA6BXo.mft (raw, json)
Hash identifier: XBljLO1wEqrtpKHs9XgGHGzPuOf0vxJvIr/ub0X+qfE=
Subject key identifier: F9:E0:02:F2:08:50:09:3C:51:A3:17:F1:D2:BE:8F:B2:60:1F:DD:3C
Authority key identifier: 9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A
Certificate issuer: /CN=9e4b818c92c4e69686b3c28100855dfa503a057a
Certificate serial: 019A5150DC365C540849DE78B2740A377EFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
Manifest number: 170B
Signing time: Wed 05 Nov 2025 00:00:44 +0000
Manifest this update: Wed 05 Nov 2025 00:00:44 +0000
Manifest next update: Thu 06 Nov 2025 00:00:44 +0000
Files and hashes: 1: nkuBjJLE5paGs8KBAIVd-lA6BXo.crl (hash: ad0CHNq6GlCMxxNblEwCqdpXO+XLe9xSBqX4sfgjEqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:dc:36:5c:54:08:49:de:78:b2:74:0a:37:7e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4b818c92c4e69686b3c28100855dfa503a057a
Validity
Not Before: Nov 5 00:00:44 2025 GMT
Not After : Nov 6 00:00:44 2025 GMT
Subject: CN=f9e002f20850093c51a317f1d2be8fb2601fdd3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:41:bd:25:2e:3c:55:c3:17:55:27:3a:2d:32:
73:e0:a7:aa:9f:8a:3b:a3:d7:15:b4:47:49:36:3e:
51:cc:db:eb:ef:73:4e:55:84:08:d2:34:b8:b0:fd:
e2:2f:e8:d3:33:9c:cd:bf:9c:3e:f5:96:bb:7f:ff:
22:74:a2:25:a1:c2:b6:91:33:05:0a:59:1b:c7:5e:
6a:81:39:e5:90:4f:1f:8e:6e:82:91:92:1c:04:01:
ec:55:15:14:0a:26:32:71:43:c3:20:92:dc:3c:f8:
8e:92:71:53:fa:d5:2f:81:9d:a0:08:6c:41:19:1b:
62:6c:53:8d:98:b7:48:52:cd:26:af:a6:b7:c3:c6:
b3:9e:47:3b:bd:5a:2d:69:c3:ce:14:e6:07:a6:89:
c7:2f:38:b1:12:d3:01:d8:28:d6:9c:d5:4f:cf:23:
0d:df:75:49:51:cf:8a:a3:6c:71:54:62:ab:a8:cb:
fd:af:4c:ad:fd:7a:36:d2:a7:bf:3e:8c:13:78:8b:
d5:e5:32:e7:4b:b9:ff:9a:e2:9e:1d:55:0b:ec:53:
14:af:07:01:e9:a5:28:91:00:d9:d3:1b:af:24:a4:
e6:8c:9a:37:f2:af:57:9c:1a:96:bd:36:c0:9d:43:
5b:83:96:38:41:bc:cc:24:5e:6c:0f:73:3c:63:c6:
52:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E0:02:F2:08:50:09:3C:51:A3:17:F1:D2:BE:8F:B2:60:1F:DD:3C
X509v3 Authority Key Identifier:
keyid:9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:de:87:77:52:ea:4a:d6:f2:79:16:88:f8:c3:e0:b8:38:16:
a7:35:e3:71:d3:76:f9:0f:f3:5c:aa:ee:72:fb:6a:6c:75:e5:
d8:41:4f:26:60:a1:ed:dc:6b:c6:53:ed:ac:f1:10:e6:5d:72:
fd:d1:d4:79:46:15:3c:9b:a9:db:62:ad:4c:ac:0d:7e:48:50:
d2:66:ef:c3:2f:72:48:0d:ef:e8:ee:b6:8a:13:b2:ae:f0:00:
5f:77:d8:d9:10:97:c7:e9:89:ed:70:8d:f5:90:33:a4:21:ca:
44:8a:f9:b0:5c:ac:c8:71:2a:3e:72:ff:57:f8:0f:b2:82:d3:
67:4b:74:b5:b9:c9:2f:8a:79:7e:15:31:62:b3:53:96:14:02:
5f:39:02:0f:f8:48:d1:60:bc:ba:b5:10:87:cb:68:82:ae:25:
1d:7c:1f:84:a7:f4:b1:c6:da:35:45:5d:d7:82:c7:99:7b:64:
04:b0:5c:31:4f:d4:f5:16:d9:88:13:8d:30:0c:c2:b3:51:2d:
5e:ce:13:8b:23:cd:7b:1d:04:fb:c6:f0:b0:bd:96:82:f0:91:
36:51:92:ce:30:72:f0:0e:3e:0e:63:c2:9c:e1:b6:bc:d9:ea:
e4:02:74:31:0d:41:f3:44:db:dd:2b:6f:66:e7:72:bb:64:ad:
95:cb:3f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:45:14 2025 by rpki-client