Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
File: nkz1EkerV_Um84ByWaeNKwJZBgM.mft (raw, json)
Hash identifier: z+eo/laoq4wjGymsa+oUSECcEqk3etC4HRwHQcOORwE=
Subject key identifier: 10:35:17:EC:C1:6F:0C:20:C2:74:1E:CA:A8:07:36:19:B3:77:72:83
Authority key identifier: 9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
Certificate issuer: /CN=9e4cf51247ab57f526f3807259a78d2b02590603
Certificate serial: 0197C15B126D0D2E6E2DF1D59223D086BF22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
Manifest number: 15B9
Signing time: Mon 30 Jun 2025 15:01:00 +0000
Manifest this update: Mon 30 Jun 2025 15:01:00 +0000
Manifest next update: Tue 01 Jul 2025 15:01:00 +0000
Files and hashes: 1: bUexMEG5KZ30YS3AFv2LLIm5VUk.roa (hash: 73jcglvdcT9moQ9QgtlZoUeROl6dwy33TWezKXRJ6GM=)
2: nkz1EkerV_Um84ByWaeNKwJZBgM.crl (hash: oEh4CWyQcZKWe7OFBWLuFZUfCN35wEIh5ba0535GJGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:5b:12:6d:0d:2e:6e:2d:f1:d5:92:23:d0:86:bf:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4cf51247ab57f526f3807259a78d2b02590603
Validity
Not Before: Jun 30 15:01:00 2025 GMT
Not After : Jul 1 15:01:00 2025 GMT
Subject: CN=103517ecc16f0c20c2741ecaa8073619b3777283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5f:61:59:65:d3:77:6a:4a:ea:f3:43:80:a4:
87:89:2f:f0:d2:b9:13:05:dd:c8:30:a9:01:a3:2c:
65:94:75:1e:8f:8d:ff:cd:37:b7:74:33:99:bb:a0:
48:89:cc:e2:77:16:4a:c8:f6:2f:66:b2:18:21:b5:
34:b8:db:3e:8c:c4:9e:4e:33:db:bb:81:7a:d9:91:
7f:72:2d:76:6a:d0:68:62:55:4d:b3:6f:79:5b:46:
a6:72:40:1e:a5:b4:76:bf:26:3b:39:81:3c:1c:43:
0c:f5:7a:bc:85:6b:fd:09:9e:8f:2f:a1:b5:60:7a:
43:ff:50:f7:36:51:73:8d:00:0a:33:b5:e4:94:15:
71:69:40:72:73:53:0b:66:cd:64:3e:78:bf:21:43:
fb:64:58:f0:74:c7:b5:ce:5d:36:2d:e4:7b:dd:fb:
64:08:f2:0b:9e:13:9a:07:e4:cf:8d:b9:e3:4b:b0:
cf:11:d7:74:17:23:31:0d:df:9b:4e:4f:72:2b:e6:
9b:13:d9:74:bf:a6:94:9f:02:06:37:dc:99:3c:e6:
f8:96:c1:66:21:6e:b1:ec:a8:17:45:d1:6d:4b:3f:
99:75:78:12:5b:e8:a1:f5:6c:8d:49:a1:9d:ee:f9:
e4:1a:bc:f1:5a:0b:79:c3:3f:22:f0:d8:29:2a:b0:
a8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:35:17:EC:C1:6F:0C:20:C2:74:1E:CA:A8:07:36:19:B3:77:72:83
X509v3 Authority Key Identifier:
keyid:9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:bc:b8:2c:8e:69:6b:1e:15:e9:1d:4f:8b:b4:8e:51:c2:f5:
f6:e1:41:39:ac:59:3a:e9:32:5a:96:95:a4:c3:80:62:ca:02:
80:c9:8f:e7:da:16:3a:6c:ed:a6:73:bf:2a:88:1a:3d:fd:42:
34:5c:a7:4d:20:ad:5a:a8:b9:5d:b7:58:47:12:a0:d9:bc:5a:
8b:2e:e6:3c:21:b3:d1:61:eb:e1:a4:46:76:76:39:e8:e7:97:
6d:1e:4a:32:ba:68:9c:e6:b8:aa:d0:6d:4b:48:7d:67:3a:3c:
f1:59:53:4d:a7:3c:06:a2:40:be:52:0a:e8:b0:27:1c:a2:d2:
9c:27:8a:4a:be:7a:8b:1f:cb:1a:ed:37:2e:12:a6:f7:0e:9b:
29:96:05:0c:0c:56:56:9e:de:51:2f:3a:28:8a:77:a1:e8:77:
d4:b3:93:c9:1a:41:57:13:5e:de:e3:ff:7d:53:4a:66:4f:f5:
6b:dc:96:38:a0:32:b1:d0:6c:c8:cb:4f:de:16:24:a6:15:d3:
ed:0b:19:7f:3a:74:46:1f:25:30:e2:58:3e:22:57:4d:5d:7d:
a6:33:3d:68:09:1b:06:31:65:75:26:33:ab:77:7f:a6:86:d8:
56:6a:6b:d4:56:f2:71:92:0a:69:3f:50:c6:a0:c0:88:61:84:
41:70:08:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:00:47 2025 by rpki-client