Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
File: nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft (raw, json)
Hash identifier: LGRqRJ5a5RsayXpUvXz6SmyrwRbs0l8pEFPbzM7OLTc=
Subject key identifier: 46:6C:15:92:66:65:F5:EB:A3:F8:5D:70:EE:F9:06:D2:11:16:E6:16
Authority key identifier: 9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
Certificate issuer: /CN=9e42ca46688a837b575234ce6a1a326587d6c204
Certificate serial: 019A730165C227A41C6035AEEDF6D5B509B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
Manifest number: 11C3
Signing time: Tue 11 Nov 2025 13:01:02 +0000
Manifest this update: Tue 11 Nov 2025 13:01:02 +0000
Manifest next update: Wed 12 Nov 2025 13:01:02 +0000
Files and hashes: 1: 2sz7XXaQR044rc-q4fD0WIzUxYQ.roa (hash: pi07prhyU4hZ/cG1dB+HetMAgpuPmtLhNCb2plULwQE=)
2: D2HSpId2VYXPjhlDPg7eWeC18Pw.roa (hash: UXPvVbmh0MzKjV4UFrcu58vEq8RZqO0eg1YthASI72I=)
3: UnUG9yNZwHFtxPW6hAKjubIbusM.roa (hash: xsmRUWemFAWw0xMxDEpqyiLbWsqfijBX0AOIJJiaM5U=)
4: nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl (hash: PaEiAEZBh7X2sRp7MyRmj06sBO8bWnWQHylasWpj90I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:65:c2:27:a4:1c:60:35:ae:ed:f6:d5:b5:09:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e42ca46688a837b575234ce6a1a326587d6c204
Validity
Not Before: Nov 11 13:01:02 2025 GMT
Not After : Nov 12 13:01:02 2025 GMT
Subject: CN=466c15926665f5eba3f85d70eef906d21116e616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e3:4b:38:48:79:08:92:cf:e4:87:8f:82:b9:
39:05:14:9f:a3:97:9f:45:06:8d:ce:99:2d:96:42:
a2:13:c9:5e:19:eb:97:ef:49:df:a3:91:fd:0b:cb:
1f:e3:25:d1:3b:16:72:da:21:94:47:10:de:25:ec:
9a:b3:23:37:f4:c3:65:3b:61:1c:f7:82:32:cc:ef:
17:12:83:5f:96:23:70:1c:d2:1f:b4:97:d8:ff:b9:
c6:f2:59:82:0d:f9:6e:5f:c0:74:c6:54:ba:32:b6:
6b:2a:d3:08:e6:59:e6:25:28:e2:79:e7:0b:d2:0d:
2c:dc:f7:8e:a3:d3:da:f5:9c:b7:ed:1b:22:4e:46:
54:c6:59:a5:4c:f5:7c:da:11:f7:22:9e:0e:38:6b:
ba:0b:97:94:93:d2:89:f8:06:b9:96:8f:0e:70:ce:
85:69:04:d5:aa:da:93:17:21:6f:03:2b:c0:87:3e:
fe:f4:0b:dd:7e:06:8d:6a:ab:af:8e:03:06:ba:a3:
3a:8f:ab:36:2c:7f:10:56:e4:e8:02:16:d9:e5:10:
02:68:71:b5:f0:bc:50:f8:49:bc:2e:a2:5a:67:80:
92:92:c2:71:a4:8c:55:32:d2:5b:a3:ba:8f:5e:54:
18:2d:07:15:06:43:99:3c:cb:b5:b9:df:7d:d6:49:
dc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:6C:15:92:66:65:F5:EB:A3:F8:5D:70:EE:F9:06:D2:11:16:E6:16
X509v3 Authority Key Identifier:
keyid:9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:bb:59:61:f4:b5:69:cc:cc:1d:05:93:d8:fe:ea:10:25:3b:
2b:ce:d1:68:3f:41:f6:d3:f3:ac:16:bf:a6:2c:47:0e:86:4f:
cc:29:44:a1:bb:40:7a:3d:ab:85:68:5a:4a:16:d9:d9:62:6a:
61:49:41:ab:a9:e3:10:bd:fa:e3:b6:ca:14:30:8a:26:39:ed:
4f:96:8c:8d:e9:ab:ff:30:c8:ce:a2:67:1e:17:83:ae:81:2a:
f9:d6:5a:80:fb:c0:61:39:1d:34:de:99:93:0e:0c:7c:1d:e4:
ab:a2:a8:6b:bd:1b:83:37:83:0f:63:62:ad:7a:28:c9:63:f1:
89:90:48:32:34:d4:dc:7a:d7:23:48:46:f7:2e:bc:37:f7:4a:
e3:f0:5f:e3:ce:5e:4c:93:98:34:af:2c:79:6d:d3:e8:5d:22:
5b:af:e9:e0:43:89:e5:a2:cc:1d:d8:7b:43:cc:56:10:c6:82:
69:ff:06:12:49:bb:02:de:66:49:36:83:8e:35:ab:21:89:e0:
4d:15:d8:c7:0e:a6:6c:4b:a1:ed:5a:fb:47:74:dc:bc:a7:39:
78:01:ff:28:cd:a8:6b:21:ac:24:c8:06:e5:f8:b4:44:11:a9:
00:16:6d:48:a3:32:4f:ee:33:a2:b1:9c:6a:bb:5e:02:21:57:
e9:2b:09:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:00 2025 by rpki-client