Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
File: NkgvLv77kno8r_6h2R8kF_PS59c.mft (raw, json)
Hash identifier: 3WQaaBULaA7W6wQ3b25OWw6QBUMcCwVYzmsZ4WCa/CI=
Subject key identifier: 11:81:30:E7:5D:3E:00:11:A7:11:8C:3C:70:46:20:38:86:08:21:4F
Authority key identifier: 36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7
Certificate issuer: /CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7
Certificate serial: 019A71B79449ADB2DE58303F27ACBE1FC837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
Manifest number: 10E0
Signing time: Tue 11 Nov 2025 07:00:47 +0000
Manifest this update: Tue 11 Nov 2025 07:00:47 +0000
Manifest next update: Wed 12 Nov 2025 07:00:47 +0000
Files and hashes: 1: G4a30ttfjHFxij-eVrmW-fidH94.roa (hash: WeyOFJKV6AN+3rP0u3s/qWHiA31iewGjEQEJOzY4D5I=)
2: NkgvLv77kno8r_6h2R8kF_PS59c.crl (hash: sDMEiyL/csWcOEaqNEyrsv600OxIboVUYUBKbjkdoMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:94:49:ad:b2:de:58:30:3f:27:ac:be:1f:c8:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7
Validity
Not Before: Nov 11 07:00:47 2025 GMT
Not After : Nov 12 07:00:47 2025 GMT
Subject: CN=118130e75d3e0011a7118c3c704620388608214f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f5:86:4d:28:48:25:50:3f:41:73:06:d2:30:
ce:d1:8f:75:56:fb:19:a2:08:6c:1b:18:a2:f7:c2:
02:e4:59:2f:4d:7b:c7:3d:89:07:f8:d1:9d:0f:d9:
11:da:0f:33:fe:12:3c:10:57:67:14:37:4c:79:be:
cd:e2:cc:18:bc:cb:b4:ae:6d:6b:89:cb:bb:6f:4d:
56:44:d0:69:f6:52:50:ed:ca:1c:a2:10:83:60:7e:
be:c1:4b:e6:be:d8:ec:d4:c4:63:40:3f:58:07:e1:
ba:e2:f5:63:f9:72:4a:23:d3:ce:b9:f7:c6:d1:82:
4d:ba:f4:19:e7:34:80:6e:8c:e0:58:9e:37:23:58:
64:f1:1b:ec:e9:15:ec:de:25:4e:34:5d:9e:56:2b:
bf:69:35:95:2e:5c:c7:87:ad:b6:92:8b:24:d3:76:
68:41:92:53:cd:88:88:14:1d:91:b6:46:4f:d3:7c:
1e:93:5a:99:48:36:37:14:58:40:ba:ca:8f:d6:d7:
7a:eb:6d:4b:37:7a:9f:82:d3:8c:e5:e7:79:33:2a:
b4:a6:50:94:e5:c5:b0:b9:37:0e:44:b1:57:dd:cb:
90:97:6a:2e:b6:b8:b2:19:7d:d6:54:3e:c4:1b:21:
02:76:f7:d7:a9:33:0c:30:48:ea:bf:8c:1e:03:39:
5c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:81:30:E7:5D:3E:00:11:A7:11:8C:3C:70:46:20:38:86:08:21:4F
X509v3 Authority Key Identifier:
keyid:36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:01:55:f9:04:d7:e6:98:ad:7d:b2:ea:d9:f3:7f:d6:d2:9a:
bc:4d:46:b3:c3:28:2e:92:97:f7:eb:3c:a9:63:e4:54:dc:76:
da:9d:97:dd:2e:10:da:b4:46:82:e5:e0:f3:0a:54:9f:e3:3d:
e1:0f:3c:ac:91:68:c5:e5:13:81:ce:6d:ef:71:ea:91:22:22:
67:d8:fb:8b:b3:14:8a:7e:a4:a4:b3:ff:49:73:0a:1b:ea:6e:
e7:6a:da:8e:d9:0f:1b:a7:98:0e:2c:d5:fd:dc:0a:8b:77:78:
73:4c:c1:69:7b:f2:3c:0f:6d:79:96:73:74:1d:f7:b2:0f:e5:
dd:20:36:52:b7:ca:4c:89:68:89:cb:f3:5b:e7:dd:ab:d8:fd:
34:04:31:ff:16:7e:e3:58:22:06:d8:e7:f2:11:e5:b2:54:e6:
a8:8d:7a:93:47:f2:31:93:3f:4e:72:51:8c:38:cf:15:58:e3:
7c:b6:5c:95:3a:c6:a4:53:03:3a:09:ba:ee:f6:d8:17:58:e8:
51:fb:c1:52:c2:05:62:73:e1:31:55:6d:26:eb:83:df:e7:36:
17:56:71:77:75:c5:97:f0:5d:7a:27:1e:31:e4:f8:de:50:99:
3a:00:b6:53:cb:c5:87:22:f5:c6:c9:04:a5:a5:c5:a0:fb:ce:
30:45:55:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:41 2025 by rpki-client