Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
File: nkuBjJLE5paGs8KBAIVd-lA6BXo.mft (raw, json)
Hash identifier: xfIKSyp1vVd4iDi/5sNEf2dMHWC3HdMVccHUl+twzT8=
Subject key identifier: 64:AF:77:D2:F1:D9:68:B2:3D:BD:3D:FE:85:81:AB:46:76:AE:D2:3A
Authority key identifier: 9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A
Certificate issuer: /CN=9e4b818c92c4e69686b3c28100855dfa503a057a
Certificate serial: 019A72258B78851BDE62E49903E4BEBDE38C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 09:00:54 +0000
Manifest this update: Tue 11 Nov 2025 09:00:54 +0000
Manifest next update: Wed 12 Nov 2025 09:00:54 +0000
Files and hashes: 1: nkuBjJLE5paGs8KBAIVd-lA6BXo.crl (hash: yEFPku/0x1niorWDrgoIqWfKLHqma+Kr2zJ5NuaY8A4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:8b:78:85:1b:de:62:e4:99:03:e4:be:bd:e3:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4b818c92c4e69686b3c28100855dfa503a057a
Validity
Not Before: Nov 11 09:00:54 2025 GMT
Not After : Nov 12 09:00:54 2025 GMT
Subject: CN=64af77d2f1d968b23dbd3dfe8581ab4676aed23a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:55:68:d2:29:97:cd:3b:79:8d:7d:f7:1f:b6:
03:60:e6:cd:ed:57:fb:d6:63:c7:76:ab:06:7b:3e:
a1:98:e0:4c:d5:95:f8:64:57:42:af:14:ae:7c:81:
78:78:9b:96:a5:29:08:19:40:e4:c5:d8:2d:f0:e2:
12:66:65:40:ba:6b:43:a2:a7:fe:d7:49:46:b2:5f:
a9:f3:c8:37:b7:bf:bd:bc:c0:c5:c5:fa:ab:01:f3:
d8:42:6f:a9:b9:f3:e4:24:3b:fa:23:1f:5b:33:6a:
58:37:13:02:d9:15:b7:e6:9b:44:5f:e3:b2:8a:10:
81:a8:a3:31:77:10:62:33:00:ef:4c:29:d7:5a:b1:
d9:f3:dd:f4:73:1e:27:39:8b:c7:39:d3:8b:f0:20:
33:55:d6:11:c1:2a:3a:6d:d2:83:90:54:14:1a:0a:
81:2e:60:04:4d:ca:0d:0f:94:2d:bd:52:68:62:25:
37:b5:35:85:b0:03:42:07:f6:8c:09:23:90:67:05:
83:c0:4c:7f:c9:ba:70:67:de:35:e9:8d:1a:95:50:
0b:31:cf:ba:76:de:32:7c:b0:05:9c:c4:b1:83:2b:
dc:4e:af:4f:1f:a3:e7:c8:8e:1c:17:54:6a:d0:87:
b2:d8:9c:1a:57:43:e2:c1:6a:ab:4c:35:97:db:84:
5f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AF:77:D2:F1:D9:68:B2:3D:BD:3D:FE:85:81:AB:46:76:AE:D2:3A
X509v3 Authority Key Identifier:
keyid:9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:37:f1:dd:0e:cf:80:1e:c0:c9:79:3b:89:23:80:b6:c1:64:
ea:a9:bd:8d:25:31:62:10:13:38:51:e6:24:e9:d3:32:e8:5e:
9e:ba:bc:67:cb:6a:35:9f:4a:00:4c:ac:ad:e7:86:38:47:56:
7e:79:ca:fa:8b:5a:f1:45:f1:44:28:fb:2e:1a:12:3a:25:33:
62:69:b4:5a:81:75:98:2a:6d:2d:e0:dd:2b:3f:8e:59:51:5f:
12:a6:0c:bf:ef:4a:de:98:07:c2:d5:67:77:66:ff:f4:23:44:
58:6d:57:6a:72:9e:f0:25:28:ad:79:65:8e:75:9e:d8:37:3b:
fb:15:a8:ab:cc:06:05:af:85:88:fe:f8:48:74:79:4f:80:e4:
91:c7:35:8f:38:f3:45:6a:55:7b:ef:78:0d:93:45:a7:76:cf:
51:4b:83:1f:dc:0e:ee:56:78:c3:e3:d1:29:7c:7d:a3:0a:ca:
33:4a:db:63:b2:9a:f3:0d:9e:0c:d6:6e:ec:0d:c5:17:8f:19:
9d:06:98:78:18:c1:84:4a:82:ab:cf:a8:b8:2a:91:b8:48:32:
b6:db:59:d1:65:7d:66:ae:e3:6b:39:79:2d:a0:18:cb:39:de:
79:20:f4:d6:23:7f:f0:85:d1:db:cd:03:6b:93:57:9c:b0:69:
77:4e:0a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:32:29 2025 by rpki-client