Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
File: nkQennBa2j-cHoJ80nbb0JdIdgg.mft (raw, json)
Hash identifier: h2wnPtlA2LBey7znbaqOVA3rCZoqBQMFj9yvfwyVT/k=
Subject key identifier: 0B:A1:D3:81:72:10:D8:EA:FD:1F:74:6A:AF:C8:53:5C:E6:DC:16:40
Authority key identifier: 9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
Certificate issuer: /CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Certificate serial: 0198D583E4166B27BEBA7D3E054D2E1C0C0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
Manifest number: 0FC8
Signing time: Sat 23 Aug 2025 06:00:47 +0000
Manifest this update: Sat 23 Aug 2025 06:00:47 +0000
Manifest next update: Sun 24 Aug 2025 06:00:47 +0000
Files and hashes: 1: 7ySzESdDI-Eg0Y6xfFTDZOEQmZk.roa (hash: pTSWdDbQ1VFptqQJI8HP8UxKCCjXnA4njHY5srW26VY=)
2: BJvFiCQhGiEcXR3ndqL7T5BbDaU.roa (hash: Z+0E4ULnb/cJktOfFSiZcNmisROmxseIx6dqsZlDt4s=)
3: bKdFeyVH_r7HsHfe9GqBe_UUrg8.roa (hash: vnPbAxKFKizMFdUh2dDG9y/SGopR40zinaRVaCXXct4=)
4: nkQennBa2j-cHoJ80nbb0JdIdgg.crl (hash: 8wzyT/k+cxuS0Wlp4anMGiyUyD7QtavXPFTJa4qfnxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:e4:16:6b:27:be:ba:7d:3e:05:4d:2e:1c:0c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Validity
Not Before: Aug 23 06:00:47 2025 GMT
Not After : Aug 24 06:00:47 2025 GMT
Subject: CN=0ba1d3817210d8eafd1f746aafc8535ce6dc1640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6a:95:5d:19:10:08:0d:26:a9:ec:cc:38:4f:
9e:88:46:40:14:79:6e:97:f0:c1:47:4a:35:6d:0d:
8b:38:a8:e4:d9:95:94:e4:c6:db:ed:e2:d2:ba:55:
43:b8:5a:87:95:b9:bb:cd:6e:34:14:e2:21:b2:1e:
98:13:44:45:77:4b:39:a7:74:ea:d0:ab:3f:03:10:
91:d7:54:8e:4e:b5:2a:19:97:0e:7e:f1:d1:07:aa:
0b:d1:e7:19:28:c3:2b:53:8d:8d:a3:90:67:36:4a:
20:31:c1:34:a2:7d:38:d4:97:e6:fa:15:6b:a1:f4:
51:7f:f8:96:71:67:3f:00:84:e5:34:31:18:59:23:
df:5f:79:7f:cd:97:9a:d8:0f:24:df:37:42:f9:dc:
af:a7:ce:47:98:94:29:78:10:ba:b9:30:93:df:4c:
2d:73:9c:11:04:5e:64:68:7c:3d:8f:5d:d1:70:6b:
df:86:7b:9a:da:26:b6:a5:a2:53:ec:5e:9f:df:ff:
9f:6a:38:31:65:ca:92:d0:73:38:eb:fe:09:c2:6e:
53:b7:c0:f9:cf:d8:a4:fb:83:21:b5:b8:da:34:4f:
3e:ea:64:46:3d:76:95:76:49:c5:0c:e9:41:d2:6c:
7b:ff:66:ea:8c:80:0c:1e:0d:41:bf:2d:84:59:23:
1c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A1:D3:81:72:10:D8:EA:FD:1F:74:6A:AF:C8:53:5C:E6:DC:16:40
X509v3 Authority Key Identifier:
keyid:9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:aa:5d:7f:99:ed:b9:ce:11:bc:b8:fa:e7:db:42:9e:68:5e:
a7:80:06:80:75:4c:d3:fb:96:3e:11:42:48:83:c4:93:93:7e:
c3:ca:b9:d9:4d:cc:bd:ad:40:be:0f:97:c7:7c:dd:14:d9:44:
d9:3a:ab:a5:83:10:67:23:94:72:ee:73:a1:5b:6e:81:ef:00:
d1:8e:e0:66:53:7c:da:33:fe:41:01:d0:57:9c:34:66:40:77:
5f:c4:a1:bf:eb:1a:80:ca:7d:94:81:d4:cb:84:09:8c:5c:ec:
ec:c9:b5:68:3a:53:c8:14:a1:45:fd:14:7d:8f:0d:8f:af:86:
06:3c:78:9c:ff:30:27:f6:4b:3d:8e:83:b5:5d:3c:89:e0:ec:
b8:13:a3:d5:15:d7:f5:f4:9c:a4:cd:eb:32:67:25:01:18:62:
0a:3b:c0:ad:17:af:42:dd:09:94:bc:e5:f6:c9:5c:74:e1:43:
01:67:02:fc:ec:ae:4c:12:4b:67:4e:35:25:64:10:b5:79:06:
d8:8f:6c:e3:4c:9c:cc:7c:6e:44:9e:45:52:53:6e:e0:64:34:
b7:f3:05:92:dd:54:6a:da:63:e7:36:9b:b8:2e:6e:f2:29:c9:
ce:c8:9e:0d:26:a3:6d:11:84:74:c0:3b:d7:c0:01:f6:98:84:
74:df:b2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:05:57 2025 by rpki-client