Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
File: nkuBjJLE5paGs8KBAIVd-lA6BXo.mft (raw, json)
Hash identifier: nliXGuNfPrZCciTdXU4Oy2BDYw/aTY6fszq0vAP/s0Q=
Subject key identifier: 2E:9A:D2:D4:39:35:92:3C:F9:C4:E4:1E:FC:B2:31:9B:1B:73:25:86
Authority key identifier: 9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A
Certificate issuer: /CN=9e4b818c92c4e69686b3c28100855dfa503a057a
Certificate serial: 0199225581793502E3ECBE103259979E52EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 04:00:52 +0000
Manifest this update: Sun 07 Sep 2025 04:00:52 +0000
Manifest next update: Mon 08 Sep 2025 04:00:52 +0000
Files and hashes: 1: nkuBjJLE5paGs8KBAIVd-lA6BXo.crl (hash: b94OFbqk2DMGfHodeauZFfHN1px3j8Yi/lmAWh2xU0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:81:79:35:02:e3:ec:be:10:32:59:97:9e:52:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4b818c92c4e69686b3c28100855dfa503a057a
Validity
Not Before: Sep 7 04:00:52 2025 GMT
Not After : Sep 8 04:00:52 2025 GMT
Subject: CN=2e9ad2d43935923cf9c4e41efcb2319b1b732586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:aa:10:62:4e:11:f6:65:fe:37:69:19:ed:06:
a0:b6:90:42:36:81:f8:25:5a:e2:18:9d:8b:56:37:
1f:e1:21:7d:b7:05:1d:07:00:10:7b:10:b0:6e:97:
eb:ae:d7:15:13:cd:26:59:33:e4:5d:04:2a:fd:90:
da:db:67:eb:cc:4b:9a:40:6c:a8:2b:ae:e1:d6:c5:
57:6a:d9:8a:87:05:84:30:fb:7e:5e:50:71:b7:3f:
d0:44:f1:f5:e1:79:dd:ce:d6:98:f9:32:53:d8:13:
d6:69:3c:1a:fd:7a:99:57:79:68:b8:b3:15:a3:65:
80:75:3a:6e:28:bf:9d:56:e3:86:2c:78:2b:f9:ad:
02:dc:3f:27:8d:94:c1:48:29:f5:39:1f:b1:fe:67:
98:49:a5:90:d2:04:f3:ae:be:d4:1e:71:71:7f:bd:
33:5e:b4:86:88:da:d0:4c:b7:c3:d3:75:85:8c:63:
cd:1e:44:88:eb:73:30:0d:4f:09:1d:af:a7:2b:c9:
09:81:5f:9a:da:2d:07:ed:91:da:30:67:b1:a5:9d:
22:64:4e:53:e3:00:c4:1b:ee:23:ed:b2:ab:e1:fa:
70:28:15:e5:56:d0:f6:00:e4:d2:d9:19:aa:74:0e:
5b:7f:f8:6a:bf:c7:06:df:8f:6c:2a:65:29:80:00:
bc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9A:D2:D4:39:35:92:3C:F9:C4:E4:1E:FC:B2:31:9B:1B:73:25:86
X509v3 Authority Key Identifier:
keyid:9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:cf:b8:20:e2:27:60:87:ca:51:ea:aa:29:38:96:a1:5c:91:
10:9b:3c:3c:ff:5b:5a:54:e6:0b:c2:c4:29:d5:3a:41:65:e2:
59:e9:73:cd:9a:86:fb:cd:71:03:4a:b0:8c:6f:cd:71:62:d3:
b0:aa:96:93:24:25:6d:2e:f3:54:c2:3a:29:6e:8e:21:27:3f:
ab:7d:3d:7b:d1:01:be:09:c1:d6:e0:cc:01:88:3e:c7:7f:c7:
ac:49:a2:73:a2:8f:4b:9e:6e:c9:d0:47:e5:5a:bb:61:7e:f6:
53:9d:be:d5:0a:82:16:98:7f:2a:cf:27:4b:9b:34:80:74:34:
ff:fb:ca:d5:64:81:bc:37:e9:b7:d9:0f:e1:94:07:27:23:25:
8d:c4:a4:01:77:f5:ad:0a:9d:59:6e:1e:14:2e:bd:9a:7b:59:
97:b9:33:de:c2:2c:84:1f:74:78:bf:a6:e3:53:54:70:3c:f8:
0c:74:b9:6c:c3:21:79:a1:d8:3e:bf:d1:48:a4:6e:f8:a1:b0:
a6:7c:f2:67:93:ea:98:71:ea:7f:63:ba:22:61:bb:3d:53:f3:
8f:54:35:c6:f9:c7:dd:de:ee:1c:83:13:02:ad:8d:9f:23:39:
39:86:32:97:20:01:30:92:08:b7:e8:c3:5f:46:02:5b:89:6f:
28:c8:77:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVYF5NQLj7L4QMlmXnlLuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNGI4MThjOTJjNGU2OTY4NmIzYzI4MTAwODU1ZGZhNTAz
YTA1N2EwHhcNMjUwOTA3MDQwMDUyWhcNMjUwOTA4MDQwMDUyWjAzMTEwLwYDVQQD
EygyZTlhZDJkNDM5MzU5MjNjZjljNGU0MWVmY2IyMzE5YjFiNzMyNTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KoQYk4R9mX+N2kZ7QagtpBCNoH4
JVriGJ2LVjcf4SF9twUdBwAQexCwbpfrrtcVE80mWTPkXQQq/ZDa22frzEuaQGyo
K67h1sVXatmKhwWEMPt+XlBxtz/QRPH14XndztaY+TJT2BPWaTwa/XqZV3louLMV
o2WAdTpuKL+dVuOGLHgr+a0C3D8njZTBSCn1OR+x/meYSaWQ0gTzrr7UHnFxf70z
XrSGiNrQTLfD03WFjGPNHkSI63MwDU8JHa+nK8kJgV+a2i0H7ZHaMGexpZ0iZE5T
4wDEG+4j7bKr4fpwKBXlVtD2AOTS2RmqdA5bf/hqv8cG349sKmUpgAC8vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC6a0tQ5NZI8+cTkHvyyMZsbcyWGMB8GA1UdIwQY
MBaAFJ5LgYySxOaWhrPCgQCFXfpQOgV6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmt1QmpKTEU1cGFHczhLQkFJVmQtbEE2QlhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9lNGU4MWMtNGU4NC00NTI0LThkZGMt
NDAxMGEzNmQ5Y2RkLzEvbmt1QmpKTEU1cGFHczhLQkFJVmQtbEE2QlhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9lNGU4MWMtNGU4NC00NTI0LThkZGMtNDAxMGEzNmQ5Y2Rk
LzEvbmt1QmpKTEU1cGFHczhLQkFJVmQtbEE2QlhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg8+4IOIn
YIfKUeqqKTiWoVyREJs8PP9bWlTmC8LEKdU6QWXiWelzzZqG+81xA0qwjG/NcWLT
sKqWkyQlbS7zVMI6KW6OISc/q309e9EBvgnB1uDMAYg+x3/HrEmic6KPS55uydBH
5Vq7YX72U52+1QqCFph/Ks8nS5s0gHQ0//vK1WSBvDfpt9kP4ZQHJyMljcSkAXf1
rQqdWW4eFC69mntZl7kz3sIshB90eL+m41NUcDz4DHS5bMMheaHYPr/RSKRu+KGw
pnzyZ5PqmHHqf2O6ImG7PVPzj1Q1xvnH3d7uHIMTAq2NnyM5OYYylyABMJIIt+jD
X0YCW4lvKMh3kw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:34:19 2025 by rpki-client