Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
File: nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft (raw, json)
Hash identifier: hc4yCOZsyqqk0GiJnIfsIQjZR8mVbbFKqjNig6r3oOE=
Subject key identifier: 82:7D:BE:66:60:04:FC:A2:ED:6C:A5:72:C2:D7:F5:B7:78:1A:B3:9D
Authority key identifier: 9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C
Certificate issuer: /CN=9e481c098a649265291d402f5f02fc43dda0fc8c
Certificate serial: 0196BDEDF608EB8357D556D180A3963FDD99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
Manifest number: 082D
Signing time: Sun 11 May 2025 06:00:10 +0000
Manifest this update: Sun 11 May 2025 06:00:10 +0000
Manifest next update: Mon 12 May 2025 06:00:10 +0000
Files and hashes: 1: 1-Z1UOZXHudz9pMndWhDGiE0wZos.roa (hash: j553aDGXg+Mu/H/OVwEn4NDDiMjFpdhHQa+Xk6WS3jQ=)
2: nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl (hash: gDApHkpeJDJ/JiC9+fIAU4XN+gecpdVO6/S46L5k0gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ed:f6:08:eb:83:57:d5:56:d1:80:a3:96:3f:dd:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e481c098a649265291d402f5f02fc43dda0fc8c
Validity
Not Before: May 11 06:00:10 2025 GMT
Not After : May 12 06:00:10 2025 GMT
Subject: CN=827dbe666004fca2ed6ca572c2d7f5b7781ab39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5b:8b:53:d0:52:9b:d8:c1:fc:ed:77:cc:46:
89:07:4e:bc:6a:bf:3b:e7:6e:8e:77:a5:7d:c6:2f:
4b:95:5e:62:d1:61:1f:2c:0a:f6:b3:32:13:53:5b:
f7:5f:ba:be:26:11:d1:12:3d:a1:8f:b9:62:63:64:
33:7b:3f:5e:12:64:93:cd:10:e2:0f:4c:9f:bc:9e:
f9:aa:a3:8b:e9:38:bf:05:b7:61:20:5d:cb:9b:83:
4e:36:d3:9e:2a:06:50:20:27:6f:36:d7:f7:22:95:
be:4c:38:01:57:a0:14:fb:c3:56:45:7f:81:91:f9:
56:ee:5b:0c:ed:5a:4d:e2:ea:57:f7:0e:33:75:8b:
90:c2:d0:f3:b6:31:61:59:21:af:0b:a3:af:cc:c5:
be:b9:04:d1:94:f2:cc:88:84:f8:8d:1c:8c:db:24:
13:b5:27:4f:b3:71:73:c7:76:1c:78:8b:d5:b6:9d:
4c:5f:86:b0:0b:c5:b6:8d:e1:99:39:ff:1f:58:2a:
17:88:e9:e4:03:77:e1:53:0b:84:ed:d6:d2:44:c7:
63:2b:33:fa:6f:cc:70:36:c9:e7:25:e0:a8:23:52:
8b:3a:56:8d:59:e1:f6:41:e4:5d:78:a0:24:56:65:
10:dc:a0:d5:35:7a:ed:65:d0:1b:98:5e:f5:b3:47:
6d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7D:BE:66:60:04:FC:A2:ED:6C:A5:72:C2:D7:F5:B7:78:1A:B3:9D
X509v3 Authority Key Identifier:
keyid:9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:01:b3:75:00:20:08:7f:f2:0e:f4:6f:70:76:ee:98:eb:59:
15:fc:4c:d3:4f:56:cd:13:0e:67:c1:1b:8b:46:5f:7d:11:b7:
94:77:73:72:94:88:26:b7:20:91:1b:6f:19:78:b4:3c:61:f8:
d0:e5:6c:a6:b5:fe:2d:df:41:fe:90:ed:a5:b8:e8:ce:97:f6:
8e:a8:48:6c:1f:b4:d1:9d:b7:36:11:31:16:69:21:79:76:2f:
21:b6:62:b5:55:eb:b5:23:ea:23:e8:bb:da:a1:98:3e:b7:f6:
97:10:cf:eb:e4:c1:ff:59:0e:f2:e0:79:41:ac:b5:02:fa:12:
5a:a8:2b:f0:b4:02:e2:09:27:7b:45:62:e7:45:9b:e3:cf:a9:
44:4b:7f:e5:bb:82:fa:db:38:1e:22:fe:da:b2:c1:fe:5d:fe:
54:01:56:68:01:e4:b8:73:9a:3f:71:a5:e7:85:43:e7:da:84:
43:f3:32:58:bd:d3:65:86:e1:74:a3:40:a2:64:02:8d:e5:a3:
71:2a:ad:23:d0:ac:a1:31:33:d3:3c:56:a2:88:f5:b1:a1:50:
80:44:b1:cf:44:fe:6c:81:66:39:14:8d:61:8e:33:3a:7d:06:
b8:1c:05:90:52:a9:ff:9b:d8:d4:81:c6:94:d2:69:1f:46:5b:
67:2c:bc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:44:41 2025 by rpki-client