Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
File: nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft (raw, json)
Hash identifier: 7pi8Ukhe+NlmFrRIRtA9wVRWCxoBp8HPVClm719OL+g=
Subject key identifier: F6:0A:40:D5:8C:AE:A0:33:43:98:22:3B:57:62:66:5F:7E:E3:47:49
Authority key identifier: 9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91
Certificate issuer: /CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991
Certificate serial: 019A4EF58CBD5E6893D752F7E0B06A0D014F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
Manifest number: 1293
Signing time: Tue 04 Nov 2025 13:01:46 +0000
Manifest this update: Tue 04 Nov 2025 13:01:46 +0000
Manifest next update: Wed 05 Nov 2025 13:01:46 +0000
Files and hashes: 1: nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl (hash: 98ogGs+ichhfGL6CN/JD6IdJKNfeTl9i2fdLYcH1CJs=)
2: rbFhRWy7PnH1-c74EqjQ8O_SsH8.roa (hash: +OgMhgDQLZldm2bdOQKGi3uI3dnjtK1GBopk2ba9vPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:8c:bd:5e:68:93:d7:52:f7:e0:b0:6a:0d:01:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991
Validity
Not Before: Nov 4 13:01:46 2025 GMT
Not After : Nov 5 13:01:46 2025 GMT
Subject: CN=f60a40d58caea0334398223b5762665f7ee34749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f7:87:d6:af:46:fa:58:15:81:eb:ac:35:9b:
b3:25:c7:74:e1:4a:bd:a7:98:61:a5:3c:07:76:3d:
8b:68:93:e3:b5:d5:86:75:14:87:6e:6f:bb:db:0f:
eb:96:2a:c7:dc:5b:21:f6:32:3b:46:67:82:e4:c3:
ff:ac:1d:18:6b:33:23:3e:4c:11:d3:a5:e2:94:0b:
ba:ae:a8:3c:ad:60:37:62:70:43:f2:f8:4d:73:3a:
5f:75:3f:e0:99:ce:fe:df:2c:8d:df:84:df:78:7d:
69:b8:e5:7f:39:d2:08:27:27:4f:ba:42:bc:68:23:
fa:e0:18:be:51:9a:a2:04:c3:5a:33:a1:77:39:0f:
dc:62:b6:5e:f8:92:7f:42:68:21:78:6c:ba:f3:48:
24:5e:c1:ac:6e:ca:c0:d3:78:e6:18:c9:38:b2:7e:
62:bc:9a:81:84:1d:33:d3:b4:c2:9b:34:9e:5a:6c:
98:c1:d2:9b:ce:60:10:26:e1:93:77:6c:ec:b7:e0:
06:58:b6:42:a8:ff:37:40:86:a1:ba:3a:6d:33:82:
4d:2a:72:d3:73:3e:91:dd:a9:ba:16:b2:41:59:43:
f9:ad:bb:55:f9:f1:aa:66:12:05:b4:a0:6e:54:e7:
5b:50:37:1c:75:bd:00:cf:87:04:07:06:d6:86:08:
bd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:0A:40:D5:8C:AE:A0:33:43:98:22:3B:57:62:66:5F:7E:E3:47:49
X509v3 Authority Key Identifier:
keyid:9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:fc:47:1b:06:a2:0e:75:4c:4d:e3:1d:a8:94:bc:cb:fd:0e:
63:33:13:40:5c:44:2f:78:32:0e:cb:39:99:c9:05:ed:47:78:
6d:0d:be:f8:f8:1c:1b:99:b0:91:f0:96:17:5a:c6:ef:b6:a4:
47:3f:45:49:95:b5:d8:08:1c:73:1c:d3:9a:87:cc:db:09:93:
24:fa:bc:8c:2a:e4:ea:c1:b5:76:99:ce:7c:4c:f9:7a:5a:55:
cf:fb:3e:45:f5:40:31:d4:cd:29:93:52:a5:a5:75:97:ad:73:
f2:85:f9:d0:f3:48:4d:8d:76:2a:fa:71:39:d4:dc:ca:74:ac:
34:ce:da:69:a9:bc:4f:d0:ad:d7:32:66:3f:7d:4e:48:65:8c:
ce:29:a1:99:5a:97:4d:7a:99:98:6e:cd:18:7a:a0:45:9f:40:
86:67:c8:f3:ff:5e:0d:6b:a3:fd:db:86:a3:a1:6b:70:62:9a:
dc:65:a6:9d:04:6a:b8:33:83:e8:5d:98:8c:10:ba:62:24:66:
1d:f2:35:07:d4:6a:f2:34:1f:9c:56:3f:02:49:12:79:14:36:
56:46:b1:26:52:46:b6:22:bd:1f:ff:38:d7:4e:dd:b3:64:35:
11:60:4f:f4:41:5a:fe:fd:fc:c1:40:d3:02:df:6e:00:55:8d:
54:c2:86:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:16 2025 by rpki-client