Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.mft
File: nUkl6XatC_tz4JfaaRfoD1vObIw.mft (raw, json)
Hash identifier: SrxqeI9XaPoGKqV1obpn1+yJVPwDF6hM3jIaqUQy0Zo=
Subject key identifier: 90:12:57:3B:38:C0:78:52:0E:E7:C6:61:84:6A:03:0C:AC:D6:72:2A
Authority key identifier: 9D:49:25:E9:76:AD:0B:FB:73:E0:97:DA:69:17:E8:0F:5B:CE:6C:8C
Certificate issuer: /CN=9d4925e976ad0bfb73e097da6917e80f5bce6c8c
Certificate serial: 019A71B83C3079BC3C073A36844FEE50DFF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUkl6XatC_tz4JfaaRfoD1vObIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.mft
Manifest number: 117D
Signing time: Tue 11 Nov 2025 07:01:30 +0000
Manifest this update: Tue 11 Nov 2025 07:01:30 +0000
Manifest next update: Wed 12 Nov 2025 07:01:30 +0000
Files and hashes: 1: 7Wfm8N_BNNM1ZIAzk65u_y1CoxQ.roa (hash: vGKhwTsZ6bUD5wem1afZhHCNpuoU8y3whIP7i2K9fc8=)
2: nUkl6XatC_tz4JfaaRfoD1vObIw.crl (hash: S+Ai1UhVpZfBpPPEj7GPs4N81IkdY9whRyVOHr2Ohug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUkl6XatC_tz4JfaaRfoD1vObIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:3c:30:79:bc:3c:07:3a:36:84:4f:ee:50:df:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d4925e976ad0bfb73e097da6917e80f5bce6c8c
Validity
Not Before: Nov 11 07:01:30 2025 GMT
Not After : Nov 12 07:01:30 2025 GMT
Subject: CN=9012573b38c078520ee7c661846a030cacd6722a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9f:5a:6d:d6:8f:e6:61:d9:00:54:e0:80:52:
34:ae:ac:86:d0:08:ca:47:97:64:bd:e0:07:e7:88:
0b:94:39:f0:73:c6:cb:5f:ba:c4:8e:82:31:f0:be:
a6:2d:da:df:54:ec:52:2e:22:5b:e8:cc:52:18:81:
3e:d0:40:b4:2f:e5:b3:36:d5:64:7b:b6:53:dd:df:
79:dc:9d:d5:fb:d3:21:d1:03:a4:16:2b:17:fd:59:
c7:91:22:68:85:d7:ce:c2:6f:5c:1f:1a:cd:3f:0d:
cf:04:b6:74:1d:a1:21:78:c7:23:57:79:50:3a:11:
05:a5:6b:ea:f0:16:2f:7a:20:1e:4b:50:0f:83:e2:
f3:bf:08:92:6f:b7:58:01:ce:eb:93:3c:15:c8:7c:
86:99:59:00:75:8d:52:a7:73:4f:62:22:44:ee:c9:
2e:3b:a5:a1:c9:2d:ba:1e:93:ca:a0:5e:1e:d5:8c:
3a:3b:cf:2e:cb:42:c5:ce:30:bd:89:e0:f7:be:bc:
a2:90:ca:55:f6:66:45:e3:ae:96:b1:e3:a5:2e:f8:
67:f8:4f:07:08:a7:74:2d:20:20:2e:59:16:e7:8f:
d8:82:87:11:cd:25:b6:e1:03:fb:d7:30:27:9e:f4:
cb:20:32:55:1d:fa:df:a0:15:e8:63:54:43:be:92:
62:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:12:57:3B:38:C0:78:52:0E:E7:C6:61:84:6A:03:0C:AC:D6:72:2A
X509v3 Authority Key Identifier:
keyid:9D:49:25:E9:76:AD:0B:FB:73:E0:97:DA:69:17:E8:0F:5B:CE:6C:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUkl6XatC_tz4JfaaRfoD1vObIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1f1cbd-fea6-4553-8db6-4e09f9e85723/1/nUkl6XatC_tz4JfaaRfoD1vObIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d4:f2:9d:1b:e3:1e:08:86:88:87:3e:11:98:c1:53:2f:12:
b8:71:cc:5c:ad:37:3f:75:51:48:a1:c7:65:f2:20:48:f5:ef:
17:fb:80:a5:d3:bd:f7:b2:f5:29:af:0d:d3:fe:4c:43:00:76:
d2:ba:11:05:f5:14:66:01:de:49:2a:fc:e5:1b:7b:5c:6a:a6:
a3:b6:d1:27:3d:92:f1:0d:da:3a:62:dd:92:24:69:68:08:99:
6c:f8:c1:10:d2:49:56:db:d0:7c:17:f4:d2:ee:b8:d5:c6:83:
d0:63:36:0f:5e:7e:1f:10:64:ba:f3:94:7e:7a:a1:a1:b6:e4:
9b:b5:d3:1e:09:82:09:75:b5:40:68:7b:62:7b:2d:66:8a:d1:
71:f6:ef:c1:6f:e5:7b:7f:aa:16:37:6d:32:b2:15:e4:11:6c:
84:cf:6f:cd:18:98:6e:3c:05:4e:7f:4f:a8:60:dd:28:ac:9d:
b2:6b:84:56:4d:72:3c:c4:6a:2d:2c:d5:6f:53:2a:43:cf:04:
2a:08:3c:fc:3d:ed:c8:e6:63:73:83:6f:6f:80:c5:53:33:b6:
92:ed:ed:cf:53:0d:0a:42:15:47:99:69:7e:24:96:49:88:8a:
c1:33:55:25:71:7d:ce:db:63:3b:ee:d1:b0:88:21:1e:71:13:
b3:bf:e4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:20 2025 by rpki-client