Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
File: nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft (raw, json)
Hash identifier: 27XiyBxzf7QA82sTeC0FukLEmw3Rvz+nJF2l6HsFXZ0=
Subject key identifier: 0F:F4:C9:62:93:F7:A0:AE:3C:94:AF:C3:84:C6:1B:36:64:E6:AD:63
Authority key identifier: 9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
Certificate issuer: /CN=9e42ca46688a837b575234ce6a1a326587d6c204
Certificate serial: 0197C192364F4CD59DC14F6782F9AE01E55D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
Manifest number: 105E
Signing time: Mon 30 Jun 2025 16:01:14 +0000
Manifest this update: Mon 30 Jun 2025 16:01:14 +0000
Manifest next update: Tue 01 Jul 2025 16:01:14 +0000
Files and hashes: 1: 2sz7XXaQR044rc-q4fD0WIzUxYQ.roa (hash: pi07prhyU4hZ/cG1dB+HetMAgpuPmtLhNCb2plULwQE=)
2: D2HSpId2VYXPjhlDPg7eWeC18Pw.roa (hash: UXPvVbmh0MzKjV4UFrcu58vEq8RZqO0eg1YthASI72I=)
3: UnUG9yNZwHFtxPW6hAKjubIbusM.roa (hash: xsmRUWemFAWw0xMxDEpqyiLbWsqfijBX0AOIJJiaM5U=)
4: nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl (hash: j6k7gGupg5oa9NJKMIGckfkpLQITMjOARff5huh1kzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:92:36:4f:4c:d5:9d:c1:4f:67:82:f9:ae:01:e5:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e42ca46688a837b575234ce6a1a326587d6c204
Validity
Not Before: Jun 30 16:01:14 2025 GMT
Not After : Jul 1 16:01:14 2025 GMT
Subject: CN=0ff4c96293f7a0ae3c94afc384c61b3664e6ad63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f2:ab:45:09:ea:62:4a:4f:79:27:c1:94:11:
c7:84:78:8b:ee:67:2c:f7:5c:3d:1f:d5:45:f2:7d:
08:f1:39:43:bc:e7:cd:3a:f2:06:7d:91:d5:da:d2:
9d:56:4f:9b:15:d1:f1:eb:1c:58:94:45:1f:0e:a2:
47:b9:ec:9b:94:8e:ad:2c:23:91:5c:5a:f9:e2:2e:
09:d5:7d:19:48:66:24:56:59:e0:03:57:14:16:ca:
00:7e:2a:16:76:f6:b6:f8:6e:4f:30:ba:3e:ce:b3:
7b:64:d7:de:20:8f:54:5d:fe:30:b4:32:f7:d0:28:
e1:ec:b6:4a:d5:d5:28:9c:3c:9e:5e:a9:32:d2:5f:
a1:50:6c:b6:1a:36:4a:88:3c:d8:76:01:09:d1:55:
8b:ea:01:2c:ea:b4:64:bf:a4:da:13:b4:75:da:f7:
e4:d4:a6:10:55:3a:3b:be:b0:e9:3c:63:e1:96:a2:
8a:75:68:64:88:7b:a1:7e:93:47:8a:f8:8f:24:36:
9b:a7:98:46:9b:9a:32:26:57:17:16:05:36:49:7a:
72:ba:a8:a4:90:05:e9:21:37:91:2f:a5:ca:3b:cc:
83:ae:8e:49:41:e0:a6:84:60:ec:a8:92:3f:11:2c:
63:49:62:94:e0:a4:79:97:1b:9f:96:0b:6b:fa:30:
74:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F4:C9:62:93:F7:A0:AE:3C:94:AF:C3:84:C6:1B:36:64:E6:AD:63
X509v3 Authority Key Identifier:
keyid:9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:2f:ee:92:01:c9:18:bc:31:0d:35:e6:37:90:de:91:cf:6e:
a8:a5:c8:80:95:1a:42:b6:c7:13:8d:d1:bb:cf:64:a6:e0:6f:
3e:05:c7:39:f1:05:c1:e6:cb:e1:02:71:cf:c7:0a:1c:d6:f9:
cb:83:c7:64:80:dc:02:ea:cd:53:4a:28:3c:31:ee:9d:55:aa:
9f:79:35:46:82:18:d3:e4:aa:a0:65:e1:8b:26:12:05:e5:22:
8a:65:c0:c0:7c:78:ec:db:2d:43:64:c1:3f:42:84:d6:77:dc:
ba:0d:56:56:fd:e5:82:e9:77:0e:3a:5c:15:d8:9f:5c:29:f0:
46:86:a3:5b:9b:b6:43:9b:06:17:6e:0e:7a:8a:56:63:5d:7c:
42:8d:d9:6e:52:cc:ed:1d:c2:14:a9:79:73:49:59:46:cf:ff:
b3:8d:4a:e5:68:12:86:ef:d0:b6:28:b0:5d:4d:dd:98:fb:01:
12:cc:e1:dc:a1:e8:a6:04:39:9b:44:91:95:3a:cc:89:44:7e:
00:c1:03:2f:b1:d4:eb:94:ec:3c:55:bb:3d:4a:5b:4c:66:b5:
67:e8:f2:32:86:16:33:ca:cf:58:44:7a:02:d4:c7:44:b4:39:
96:04:7a:be:c2:c8:4c:be:a6:2f:e8:39:05:19:ec:90:66:3e:
c8:c9:67:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:09:47 2025 by rpki-client