Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
File: nKxPYfRotyACqyXxEuUgEe14LM4.mft (raw, json)
Hash identifier: UN2i6q0v80okmPoRHY40QyjjB4L/S2mV60MqGN40uVE=
Subject key identifier: 99:8A:9B:5E:2E:96:23:8F:AA:50:0E:57:7E:86:27:44:6A:C4:B5:3E
Authority key identifier: 9C:AC:4F:61:F4:68:B7:20:02:AB:25:F1:12:E5:20:11:ED:78:2C:CE
Certificate issuer: /CN=9cac4f61f468b72002ab25f112e52011ed782cce
Certificate serial: 019A71808F82E032366B246A88CBB280AEAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
Manifest number: 0E96
Signing time: Tue 11 Nov 2025 06:00:41 +0000
Manifest this update: Tue 11 Nov 2025 06:00:41 +0000
Manifest next update: Wed 12 Nov 2025 06:00:41 +0000
Files and hashes: 1: 1-ctCBWTM9YEJSb9HauIUKPqVwas.roa (hash: F+Ql00NFkP6u64/1DSJGoJFeSPLMPLBWzAqmumx63J4=)
2: nKxPYfRotyACqyXxEuUgEe14LM4.crl (hash: 9hqPAiqrvU3HiPeMfjMTEAVwnbVT6e1mgF5p0U+SryU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:8f:82:e0:32:36:6b:24:6a:88:cb:b2:80:ae:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cac4f61f468b72002ab25f112e52011ed782cce
Validity
Not Before: Nov 11 06:00:41 2025 GMT
Not After : Nov 12 06:00:41 2025 GMT
Subject: CN=998a9b5e2e96238faa500e577e8627446ac4b53e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:d1:c8:55:43:8d:8c:e6:fb:d2:75:ee:95:74:
5c:1b:a4:ae:74:a9:05:4c:45:e8:ac:95:24:6b:4c:
1e:07:c8:7b:4e:a4:f5:4c:24:92:84:15:52:48:3e:
68:2c:60:4a:13:e0:7d:6f:a3:8d:aa:39:ff:e9:37:
34:8b:3b:75:b6:f3:5e:2b:eb:ee:1d:c4:65:f5:33:
70:1f:b1:7f:38:82:70:24:8e:5a:74:ce:61:ad:99:
af:1f:d1:99:7f:81:88:5c:ed:79:96:61:4c:82:9c:
1a:85:98:4e:5c:c9:e6:4f:fc:97:9c:7c:2f:55:65:
8b:e8:2d:c9:ee:64:8b:0c:87:f7:91:ec:ec:af:ad:
56:f6:ee:0b:39:96:81:6d:7f:3b:63:61:37:97:55:
7c:d8:2a:5c:13:b7:3e:a1:e6:e9:2b:05:22:4b:b6:
44:42:de:c6:4a:12:97:87:03:6d:1a:03:c5:40:a6:
e6:b7:ae:6a:97:74:a3:36:33:30:31:2e:65:cc:b1:
93:79:c3:51:46:d6:74:eb:1c:59:43:b7:64:e6:99:
5d:03:6e:05:1a:b4:3f:29:96:15:63:af:85:14:c1:
da:ac:96:bf:0f:b9:94:2e:a2:79:58:45:80:d3:d2:
c9:b7:b3:0d:9a:dc:28:54:f0:75:79:ef:16:b6:ec:
02:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8A:9B:5E:2E:96:23:8F:AA:50:0E:57:7E:86:27:44:6A:C4:B5:3E
X509v3 Authority Key Identifier:
keyid:9C:AC:4F:61:F4:68:B7:20:02:AB:25:F1:12:E5:20:11:ED:78:2C:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:72:c8:55:9f:6e:22:30:0c:02:57:5b:62:6e:0d:f2:d4:da:
41:09:17:09:2b:b5:a7:2a:1b:0c:1c:d0:67:36:d1:0a:94:67:
5c:e6:f7:42:e0:3a:2a:ec:72:95:d2:36:8c:d5:8b:93:a7:4e:
01:cf:c6:ce:e5:f5:b7:68:e7:41:87:52:65:14:7b:7f:8d:9e:
a2:87:59:cb:33:e8:25:37:2e:47:7e:6c:5c:69:38:3e:4f:9f:
e8:ab:5d:c9:f5:e0:c8:26:c1:ab:34:b9:84:77:88:67:e4:00:
46:9f:ef:6e:67:95:65:4d:33:79:7c:aa:a1:28:11:87:97:35:
94:b0:25:f8:2e:c3:d3:e9:3f:97:7a:27:55:15:0a:2f:52:ea:
31:86:e1:51:9e:07:af:9b:c6:35:e4:45:79:be:da:83:fc:f8:
15:45:d3:51:c3:cc:08:12:f2:1a:3f:fc:61:dc:c3:09:13:c4:
2f:95:ad:21:68:a5:ac:90:7a:07:c5:73:e0:f3:68:e5:7a:ad:
f5:d1:ad:6d:35:dc:e0:72:e5:fc:80:30:d5:bc:71:9e:49:63:
b2:8d:7f:97:0d:39:f4:f1:46:a9:a1:e0:4b:a8:90:25:d1:e1:
50:1e:64:34:3f:13:98:3d:5b:83:b2:6d:66:82:77:e6:f2:36:
a5:44:39:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:40:36 2025 by rpki-client