
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
File: nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft (raw, json)
Hash identifier: 5rVeL51nFwgwU91JSpfAOR2Y2dk/CUZwn4UtZOH8/Mc=
Subject key identifier: C0:79:79:1E:D4:8E:45:B2:3C:2A:C4:04:17:47:14:13:B7:C0:B5:9E
Authority key identifier: 9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C
Certificate issuer: /CN=9e481c098a649265291d402f5f02fc43dda0fc8c
Certificate serial: 0197C681413A91571BE54BF2B1F779F08328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
Manifest number: 08B6
Signing time: Tue 01 Jul 2025 15:00:48 +0000
Manifest this update: Tue 01 Jul 2025 15:00:48 +0000
Manifest next update: Wed 02 Jul 2025 15:00:48 +0000
Files and hashes: 1: 1-Z1UOZXHudz9pMndWhDGiE0wZos.roa (hash: j553aDGXg+Mu/H/OVwEn4NDDiMjFpdhHQa+Xk6WS3jQ=)
2: nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl (hash: UaXiFuHFcsB1Fy9dsJjTcfIIfWoncDnmjNRUotARz7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 15:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:81:41:3a:91:57:1b:e5:4b:f2:b1:f7:79:f0:83:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e481c098a649265291d402f5f02fc43dda0fc8c
Validity
Not Before: Jul 1 15:00:48 2025 GMT
Not After : Jul 2 15:00:48 2025 GMT
Subject: CN=c079791ed48e45b23c2ac40417471413b7c0b59e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e7:9e:3a:77:c3:ac:eb:04:f8:50:71:9f:12:
9e:28:21:c8:90:62:3a:52:b6:d7:3c:2c:c4:af:54:
aa:ec:37:9b:d6:1d:7e:4a:dc:c6:57:f0:cc:ee:1a:
aa:97:b5:b4:cb:ca:16:4c:66:7e:89:65:e7:e8:d2:
77:af:3a:39:1f:50:09:33:21:c3:88:65:9a:c1:d5:
16:ba:2c:b0:80:ab:51:10:4d:7d:9f:81:f7:87:16:
12:e3:58:ef:c6:b5:a8:ef:7d:70:5c:39:63:1c:c8:
e5:81:89:f3:3a:4c:bb:53:63:a4:73:fd:00:00:8e:
fe:6a:30:89:9a:6a:00:29:5b:2c:36:e5:0b:04:87:
1f:9f:98:21:32:a0:2f:86:c4:03:d3:22:f5:d8:4b:
5b:ab:86:22:89:b1:8e:90:d8:22:26:e9:f1:b4:31:
b1:87:78:91:8b:90:99:b6:a6:7f:82:d6:f9:d6:d4:
6f:75:1b:ac:36:c0:96:bd:91:33:59:fa:cf:8b:1e:
da:97:77:b4:d7:02:79:55:7e:0d:08:9b:5a:99:f1:
74:70:d4:3f:69:cc:f0:f5:b9:d8:b5:a5:d9:c3:08:
e5:50:97:8a:8f:bc:dd:55:97:5a:e5:f2:92:32:80:
8d:0a:e4:90:3f:01:4d:4a:e8:42:8f:93:43:e4:0e:
dd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:79:79:1E:D4:8E:45:B2:3C:2A:C4:04:17:47:14:13:B7:C0:B5:9E
X509v3 Authority Key Identifier:
keyid:9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:cd:d6:13:0e:5e:36:ab:7b:d3:48:5f:ed:6a:1b:d0:5e:88:
9b:ca:1f:38:01:d5:54:e0:06:49:9a:54:9d:96:42:15:20:23:
b2:24:eb:a0:9e:66:28:7a:b0:93:4f:67:10:ee:22:91:56:14:
e0:5d:2a:b0:3c:d2:11:3d:2b:0c:72:27:ff:34:c9:0c:3e:ef:
64:f8:70:e4:40:db:ad:5c:fb:b4:1b:e8:d6:47:58:14:da:c8:
c6:0e:5a:9e:41:f6:e8:7b:b9:fc:24:ed:41:cb:9a:c1:71:0b:
dc:a4:63:25:3c:fc:90:db:99:fa:b1:96:da:3d:be:9c:72:5f:
47:6e:ab:b3:03:b2:9b:74:00:17:56:25:12:d4:f8:1f:bc:e4:
80:d0:c5:af:c9:ca:4e:03:c7:d9:d4:2f:8d:a8:45:51:10:c7:
f8:90:73:b3:44:b7:5c:0f:c2:f7:7b:2a:45:2b:08:4c:c5:00:
ed:49:03:4c:10:74:2f:55:23:b3:a9:5f:6c:88:d5:96:51:a2:
cb:0b:8a:1d:89:61:3a:65:bb:c8:26:ab:f5:d9:9a:52:15:6c:
3b:12:5a:50:71:3c:36:b8:0f:dd:fc:a4:f3:e3:d6:f9:3b:f3:
1d:a2:8f:eb:0d:08:1d:53:20:92:f6:a4:e7:92:a2:01:e5:61:
6a:35:12:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:32:31 2025 by rpki-client