Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
File: nkz1EkerV_Um84ByWaeNKwJZBgM.mft (raw, json)
Hash identifier: LORQDq+11RxdmQ50OZHkihYJ8m7l6YovZHsqIwenMNk=
Subject key identifier: 73:F7:A1:91:57:AE:C0:07:A8:AF:64:13:53:9A:8F:35:79:DD:F2:8B
Authority key identifier: 9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
Certificate issuer: /CN=9e4cf51247ab57f526f3807259a78d2b02590603
Certificate serial: 0198D5839B99F6C767547588545C778FCFFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 06:00:28 +0000
Manifest this update: Sat 23 Aug 2025 06:00:28 +0000
Manifest next update: Sun 24 Aug 2025 06:00:28 +0000
Files and hashes: 1: bUexMEG5KZ30YS3AFv2LLIm5VUk.roa (hash: 73jcglvdcT9moQ9QgtlZoUeROl6dwy33TWezKXRJ6GM=)
2: nkz1EkerV_Um84ByWaeNKwJZBgM.crl (hash: UPpoledajfubQQbRW/ZbTFRqCfmNsWPd2oaTAFg5wns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:9b:99:f6:c7:67:54:75:88:54:5c:77:8f:cf:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4cf51247ab57f526f3807259a78d2b02590603
Validity
Not Before: Aug 23 06:00:28 2025 GMT
Not After : Aug 24 06:00:28 2025 GMT
Subject: CN=73f7a19157aec007a8af6413539a8f3579ddf28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:94:c5:5c:66:d1:ee:2e:be:24:1c:c8:9b:d5:
5b:29:9a:ed:3b:da:47:c6:a0:89:ac:17:ef:f7:2a:
ed:f7:2b:bd:99:68:d0:d8:e6:3a:d1:22:a9:19:9c:
b0:aa:e1:b6:18:68:94:d5:e4:61:27:32:8f:7a:b5:
70:6f:6d:5c:c3:5c:46:68:f3:01:d1:02:b3:3a:3d:
2c:e3:ae:e5:5e:5a:50:51:59:8e:bc:c6:e2:08:18:
c4:10:d5:26:61:3a:f9:52:fb:d1:e5:92:3e:54:27:
ff:21:09:a8:17:79:53:2c:9a:d5:a8:19:9f:f2:ba:
1c:db:d5:9d:9f:c7:1c:f7:4b:23:92:a6:fe:9b:2b:
3b:21:90:2f:eb:bd:fd:f6:b9:cd:7a:13:9e:03:6f:
da:3d:e4:69:a3:44:7f:c8:31:84:e8:b2:5c:60:a2:
71:52:ac:b1:fa:da:70:ce:64:e5:4a:01:d6:b4:44:
7c:d9:f7:c4:39:69:74:79:92:fd:a3:cb:26:52:d9:
2a:42:0a:33:fb:15:cd:50:6f:c5:ec:07:ef:ac:51:
73:ef:05:48:22:eb:ad:91:85:27:86:e8:79:9f:9d:
7f:1c:8b:be:23:91:73:7a:62:ed:ab:5d:cb:06:a4:
d0:a4:ab:88:0b:35:86:a2:c2:51:8f:df:89:3a:a4:
1d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F7:A1:91:57:AE:C0:07:A8:AF:64:13:53:9A:8F:35:79:DD:F2:8B
X509v3 Authority Key Identifier:
keyid:9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:8d:2c:45:c4:17:db:a2:dc:99:5e:5d:95:82:4f:2b:ac:7c:
9b:cd:2a:9a:d1:85:5c:4d:61:87:de:ff:75:61:5e:85:8d:b8:
d0:3a:f4:36:1c:60:ed:91:38:2b:98:37:76:94:2b:12:2c:cf:
3a:b4:0f:a7:b7:6c:ec:90:bc:0c:18:67:d1:e3:49:81:8c:1a:
6e:70:49:3e:ea:62:6f:70:46:6f:a3:7f:32:86:55:b2:2b:61:
74:2e:d1:75:ad:a9:64:6d:7d:d0:b0:e1:22:5a:47:52:37:79:
00:9a:c5:cb:d0:83:9a:7e:1c:9b:13:a5:1e:24:65:81:64:ef:
67:72:b0:6f:68:58:6e:9d:ad:bf:62:97:56:8a:d1:c8:d7:78:
4e:76:71:98:01:88:a5:ad:2f:c7:f9:39:05:7e:45:a8:6d:e0:
d4:d3:30:0e:78:94:66:f7:0f:a2:ca:76:83:90:66:a4:60:fd:
94:43:f6:3a:4a:a7:fd:cd:18:b4:9a:f2:a9:81:f2:f3:51:a4:
84:77:04:5c:e9:c5:be:38:e5:b5:79:1f:33:68:d3:4f:cb:0e:
44:b5:45:97:b1:7b:26:18:55:46:57:ec:09:d7:a7:ba:6c:e2:
55:03:60:40:57:27:96:32:31:f8:2b:fb:55:74:85:63:1c:e1:
60:c3:5e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:11 2025 by rpki-client