Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
File: nKMZ6lHIADqtlKjifOaUkqouM6g.mft (raw, json)
Hash identifier: 8Jtph9w5VoLJGBOqP6yUV7aF6w1DGcknY/UrKxcRAIc=
Subject key identifier: 80:BA:44:B9:4E:DF:10:59:8C:84:A5:64:36:74:D1:D9:C5:C7:B1:18
Authority key identifier: 9C:A3:19:EA:51:C8:00:3A:AD:94:A8:E2:7C:E6:94:92:AA:2E:33:A8
Certificate issuer: /CN=9ca319ea51c8003aad94a8e27ce69492aa2e33a8
Certificate serial: 019A72CA1D9EDD703230B8EE2930D636053A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 12:00:39 +0000
Manifest this update: Tue 11 Nov 2025 12:00:39 +0000
Manifest next update: Wed 12 Nov 2025 12:00:39 +0000
Files and hashes: 1: F76FpI_z3pp7FvEBXhJ_sZMIEq4.roa (hash: 1qsVc/WLV0a8wJB91bXtNOSX8a5UYSQoJwoErMzZDKk=)
2: nKMZ6lHIADqtlKjifOaUkqouM6g.crl (hash: NHb4adwQufLKHH6mnZEhbYNsUPLdrmFnrkZYszVdB+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:1d:9e:dd:70:32:30:b8:ee:29:30:d6:36:05:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca319ea51c8003aad94a8e27ce69492aa2e33a8
Validity
Not Before: Nov 11 12:00:39 2025 GMT
Not After : Nov 12 12:00:39 2025 GMT
Subject: CN=80ba44b94edf10598c84a5643674d1d9c5c7b118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:84:96:0a:ab:51:f3:7e:a9:f0:f3:23:8d:94:
53:9b:a1:74:96:e2:e2:e9:af:5e:58:78:d0:0d:bb:
97:b2:c1:f0:d9:43:6a:a8:29:ed:fe:3c:c8:de:0c:
1b:58:d9:19:b1:e5:98:a4:6a:3f:55:03:42:26:f7:
7a:d4:6f:ba:77:36:b0:ad:27:07:4c:f0:6e:23:b0:
bb:cd:41:8c:c7:1c:3b:09:f1:57:50:1d:5d:35:ce:
e3:2e:b4:68:ec:39:7c:e4:2d:81:5f:53:50:2a:db:
ec:dc:5c:d9:ce:6a:e5:9e:8a:9b:cc:72:32:0b:e9:
c9:65:65:3b:c3:b2:de:f9:e8:f6:a3:ba:3a:3a:2c:
f0:9d:2d:8e:85:d4:cf:f4:8d:0b:0f:34:5a:10:cc:
1f:6f:12:2f:6f:3e:80:09:16:e5:89:b7:cc:1d:0d:
64:40:7a:3b:d3:a2:1e:2a:20:7f:5a:2d:36:89:9a:
ac:0c:a5:b0:3a:63:7a:15:0f:87:4a:1c:2c:0c:35:
2d:80:52:6a:ee:d4:31:9b:20:4d:75:20:52:86:6d:
b1:ad:27:46:42:b7:53:94:f9:64:d6:4b:ec:d7:1e:
4c:a6:e5:7f:1f:0d:f1:25:84:b7:c1:4c:cd:34:a6:
38:de:62:b1:6f:6a:a0:fe:7a:86:0f:1f:41:46:08:
44:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BA:44:B9:4E:DF:10:59:8C:84:A5:64:36:74:D1:D9:C5:C7:B1:18
X509v3 Authority Key Identifier:
keyid:9C:A3:19:EA:51:C8:00:3A:AD:94:A8:E2:7C:E6:94:92:AA:2E:33:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:cf:34:c3:6d:cf:16:ac:c3:1b:fb:69:17:07:c8:2d:9a:88:
5d:51:bf:28:95:22:26:fb:35:cc:91:b3:54:6b:93:c9:a9:38:
b0:b6:81:fd:6c:f7:a8:56:e0:b1:17:0d:ea:00:3d:7f:c0:91:
08:fc:38:7a:bf:96:f8:1d:9e:11:a1:63:86:b7:72:78:bc:18:
73:d9:23:f6:26:ae:ad:00:85:dc:79:61:ef:06:f5:7e:52:07:
41:6e:91:b6:41:f3:55:7d:08:7a:58:33:99:2f:78:36:74:63:
f7:48:5e:c0:5c:9b:50:6d:ca:4b:92:6a:ea:de:ee:a1:8d:94:
81:42:89:35:cc:e0:7b:82:78:dd:2c:d2:c8:e1:0b:e5:c0:cd:
0c:d7:78:db:95:bd:6e:b5:b5:8c:56:53:1c:3c:9d:11:61:15:
68:f6:4e:9f:ed:77:56:2d:79:cd:02:04:19:8a:e0:c6:ef:ea:
24:b2:60:95:d6:a3:91:c0:9e:b3:c7:48:18:b6:24:ca:69:f0:
69:4c:29:0b:82:fc:d9:28:27:c4:3c:b5:22:ee:78:5e:f9:f9:
32:eb:fe:91:16:10:7e:7e:4c:9b:c2:79:f7:01:32:42:8a:6f:
cd:ca:ae:87:89:49:d1:8f:72:73:af:68:36:f9:e7:6c:9b:82:
56:8e:84:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:41:14 2025 by rpki-client