Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
File: nkQennBa2j-cHoJ80nbb0JdIdgg.mft (raw, json)
Hash identifier: NPYvXxLK7AD95X3f8k6RIo/jMcjD2N/nftQ/aXVPXAo=
Subject key identifier: A5:8F:68:00:DB:0B:F1:44:66:7A:B2:07:EC:77:9C:33:A4:E7:81:C6
Authority key identifier: 9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
Certificate issuer: /CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Certificate serial: 0197B7B365ED9B2E43BD0310EAEE1ED3A73D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
Manifest number: 0F34
Signing time: Sat 28 Jun 2025 18:01:16 +0000
Manifest this update: Sat 28 Jun 2025 18:01:16 +0000
Manifest next update: Sun 29 Jun 2025 18:01:16 +0000
Files and hashes: 1: 7ySzESdDI-Eg0Y6xfFTDZOEQmZk.roa (hash: pTSWdDbQ1VFptqQJI8HP8UxKCCjXnA4njHY5srW26VY=)
2: BJvFiCQhGiEcXR3ndqL7T5BbDaU.roa (hash: Z+0E4ULnb/cJktOfFSiZcNmisROmxseIx6dqsZlDt4s=)
3: bKdFeyVH_r7HsHfe9GqBe_UUrg8.roa (hash: vnPbAxKFKizMFdUh2dDG9y/SGopR40zinaRVaCXXct4=)
4: nkQennBa2j-cHoJ80nbb0JdIdgg.crl (hash: w0a+iK/lZ0EQoxFzu7BaNy+ie0rAXYSoirJis73LTRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:65:ed:9b:2e:43:bd:03:10:ea:ee:1e:d3:a7:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Validity
Not Before: Jun 28 18:01:16 2025 GMT
Not After : Jun 29 18:01:16 2025 GMT
Subject: CN=a58f6800db0bf144667ab207ec779c33a4e781c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d5:15:11:5c:4c:0b:05:23:04:11:87:a7:73:
20:e0:5c:f0:85:41:02:c0:7a:64:69:2c:70:2f:c7:
3c:3a:db:19:ca:f4:03:6a:14:63:3b:b2:f3:3a:ce:
b9:e0:78:df:13:b8:22:b0:ab:10:23:65:8f:2e:14:
ad:9c:7a:4f:24:21:07:93:d0:b5:c5:fa:a2:cf:50:
78:01:ac:46:f9:9d:99:cc:bf:ea:64:94:e3:bd:6a:
08:aa:ea:ca:dd:c6:8d:a5:e7:a4:0d:f5:9b:6f:fd:
6f:4d:10:d8:a6:11:04:5a:9a:b0:44:61:5b:f3:e1:
e7:fd:38:32:39:e2:18:f6:aa:88:b8:30:b5:db:e1:
f3:3d:07:a1:c5:46:6e:9e:0e:f7:70:05:59:72:07:
8d:5f:fa:20:6a:f9:f9:df:df:e8:a6:17:d9:c8:7a:
0f:e5:d0:c0:7c:e1:93:09:16:42:83:5c:c4:aa:18:
a9:3a:50:c1:5d:71:c3:d6:71:9e:94:e2:3b:ea:1e:
bd:25:7a:48:2a:e6:8d:03:87:2b:18:5c:a9:dd:6e:
ba:04:8c:47:d0:f4:86:3a:1f:16:27:71:8e:04:3e:
2b:c3:1e:cf:05:01:2e:bd:09:19:45:51:e7:b6:0a:
e0:a4:92:bc:15:dc:7d:cc:51:04:f8:0e:8c:cd:af:
31:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8F:68:00:DB:0B:F1:44:66:7A:B2:07:EC:77:9C:33:A4:E7:81:C6
X509v3 Authority Key Identifier:
keyid:9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:4b:7f:4f:eb:62:4c:ea:fe:7d:1c:0b:9f:d7:86:f5:51:27:
21:28:27:4a:da:64:00:13:5c:02:dd:6f:79:0f:54:64:11:08:
d6:14:ec:7e:d6:7f:60:4b:4b:2c:8d:02:0c:8b:f7:74:fe:1c:
4e:6c:01:0e:94:94:bf:08:1e:7b:1a:85:ad:c8:26:b4:b5:51:
14:c6:2b:c5:38:bf:9a:4c:a5:ce:ef:e3:6a:ab:8d:96:45:68:
dc:58:dc:21:7e:d9:ca:17:f2:35:11:18:71:ba:b8:d1:c6:80:
6e:2e:58:da:75:a3:3c:6c:d6:09:42:e3:7f:18:26:e7:43:7a:
cb:db:ce:d0:a9:16:b5:7b:8e:f8:b1:3a:f2:cc:19:b2:f1:fa:
3b:a0:e2:38:4a:e6:c2:b6:8d:24:b8:7f:e7:fb:19:0d:3b:9e:
65:6b:e7:a1:6a:72:96:b2:5a:a3:29:5e:08:bd:40:5c:24:31:
f7:b0:3a:76:ea:a5:88:71:7c:46:a6:2e:ec:3d:54:ee:04:d0:
aa:b9:4f:b4:fd:17:28:d6:b4:bc:2e:73:47:f8:ce:6d:52:9d:
4f:78:98:b5:02:6a:85:f8:f5:53:9e:a4:0d:e8:e4:ad:0e:84:
7a:da:54:1b:d2:63:b6:37:ee:20:aa:4a:43:f7:6c:30:f4:a4:
99:d9:78:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:36:13 2025 by rpki-client