Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
File: nkdckgJgbmZn6Up3npA9tpelkCU.mft (raw, json)
Hash identifier: GRMFXPUgPr6XpHrI2d79jBFzTK5haEiVl9wRUZSgmZc=
Subject key identifier: 30:36:B2:DB:D0:0A:3D:BC:3E:51:D3:7D:5A:D3:CB:EC:CB:B7:6D:97
Authority key identifier: 9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25
Certificate issuer: /CN=9e475c9202606e6667e94a779e903db697a59025
Certificate serial: 0197D2BCED3525B73EFD324A31E9258C9D0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
Manifest number: 04A7
Signing time: Fri 04 Jul 2025 00:01:26 +0000
Manifest this update: Fri 04 Jul 2025 00:01:26 +0000
Manifest next update: Sat 05 Jul 2025 00:01:26 +0000
Files and hashes: 1: mR809BzawsocXcAGIqvH25pMqQs.roa (hash: YeYkP56hsu5/L5Jhs1MWZsAFAw78/bEVuYQMAvS7nO4=)
2: nkdckgJgbmZn6Up3npA9tpelkCU.crl (hash: PnX+FYRRBo8JLGGy+I/cGzLzQZmlQnQ6ju/NEQ0MaaM=)
3: nmSg0-EK5kx_OFxZ-x2rJeid1NU.roa (hash: 8HytWsFdzKFviKTtfyGmrk77Cg5YhpoczU6o9u5sUno=)
4: qxkGe1Ztq8AC8Xy-vkslbb-4Yjc.roa (hash: Vk6as9yIInb4okYrwyyw/9HVRxpOcsbPGA6Y1uEJnuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 17:39:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d2:bc:ed:35:25:b7:3e:fd:32:4a:31:e9:25:8c:9d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e475c9202606e6667e94a779e903db697a59025
Validity
Not Before: Jul 4 00:01:26 2025 GMT
Not After : Jul 5 00:01:26 2025 GMT
Subject: CN=3036b2dbd00a3dbc3e51d37d5ad3cbeccbb76d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:53:00:25:02:b8:76:b5:66:cb:05:f2:c8:a8:
2a:b2:c2:a5:65:0b:e8:fe:dd:49:00:ea:f4:45:e3:
6c:b0:c3:fd:f1:c8:69:96:5f:cc:48:aa:44:0f:cb:
bc:51:9d:80:42:05:b7:a2:91:12:06:71:5e:67:28:
24:15:cd:e6:11:21:10:69:6a:a1:36:fa:08:4f:f9:
7d:f7:4c:05:5d:0c:e0:5a:17:4e:f9:e4:2e:6e:14:
df:c4:7d:ef:da:e8:f0:39:cf:32:b8:3a:42:e6:74:
ba:35:2f:45:17:8b:58:c4:4a:11:47:2f:c1:4a:ac:
95:6d:17:a3:79:75:56:f0:fd:81:4d:6a:25:26:74:
a6:4b:f9:fc:6d:62:1a:af:6d:f4:f7:da:38:c0:c8:
46:8e:e2:08:9f:c4:80:9e:5b:f7:a4:81:ed:2a:d0:
56:6a:a7:66:ea:dd:0f:6e:79:ef:bb:a9:9d:50:42:
3d:93:8a:ed:8b:1a:16:ed:63:6c:b5:1f:74:07:10:
b9:e4:18:35:5d:20:96:5c:90:4e:b0:b6:d7:5b:19:
23:97:3a:33:13:8e:02:b2:f4:f5:49:5e:ce:54:10:
76:18:ff:d9:2d:61:c2:6e:61:7e:f1:46:fc:54:dc:
7c:35:7b:7e:4e:01:35:13:c3:98:43:4b:46:ab:5f:
ab:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:36:B2:DB:D0:0A:3D:BC:3E:51:D3:7D:5A:D3:CB:EC:CB:B7:6D:97
X509v3 Authority Key Identifier:
keyid:9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ae:ac:ec:d1:dd:66:1b:60:de:77:25:b4:f0:4c:a4:6c:53:
87:e2:23:83:7f:00:ae:70:cf:a8:f6:e8:fd:6d:53:55:95:7a:
3b:25:26:78:66:04:c2:fd:67:99:38:49:b2:df:d8:7c:70:73:
d3:5d:a9:67:1c:1d:9c:2d:36:b6:54:e1:c4:dd:87:03:a3:11:
48:b9:13:f3:3d:48:a1:d2:20:e8:9b:f2:58:99:8f:57:fa:5e:
a1:02:61:08:c6:42:52:a0:80:b5:66:75:50:40:ad:a6:8f:97:
f4:6e:57:cf:34:4e:aa:49:51:41:69:3c:30:1c:39:36:49:51:
ab:ca:78:18:47:8a:91:fe:5f:f7:19:a3:84:4f:59:63:5a:79:
38:bd:1c:91:aa:dd:33:21:ed:f4:9b:30:56:a3:ce:e8:ac:20:
5d:49:06:63:e4:d2:a3:04:44:fc:c0:08:c1:b0:5e:25:b3:53:
cd:a7:af:f3:8a:33:f2:26:57:29:c2:37:95:0a:b3:6c:ba:63:
f1:c1:9d:43:78:6d:87:fb:ee:a1:58:6a:9e:3e:90:d7:fa:44:
62:83:dd:ec:b6:26:79:77:ec:20:bd:43:e0:84:c5:a1:76:c6:
31:a0:69:44:26:d7:15:29:1f:bf:7d:79:5d:94:e1:91:e7:7b:
16:91:7a:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfSvO01Jbc+/TJKMekljJ0OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNDc1YzkyMDI2MDZlNjY2N2U5NGE3NzllOTAzZGI2OTdh
NTkwMjUwHhcNMjUwNzA0MDAwMTI2WhcNMjUwNzA1MDAwMTI2WjAzMTEwLwYDVQQD
EygzMDM2YjJkYmQwMGEzZGJjM2U1MWQzN2Q1YWQzY2JlY2NiYjc2ZDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71MAJQK4drVmywXyyKgqssKlZQvo
/t1JAOr0ReNssMP98chpll/MSKpED8u8UZ2AQgW3opESBnFeZygkFc3mESEQaWqh
NvoIT/l990wFXQzgWhdO+eQubhTfxH3v2ujwOc8yuDpC5nS6NS9FF4tYxEoRRy/B
SqyVbRejeXVW8P2BTWolJnSmS/n8bWIar23099o4wMhGjuIIn8SAnlv3pIHtKtBW
aqdm6t0Pbnnvu6mdUEI9k4rtixoW7WNstR90BxC55Bg1XSCWXJBOsLbXWxkjlzoz
E44CsvT1SV7OVBB2GP/ZLWHCbmF+8Ub8VNx8NXt+TgE1E8OYQ0tGq1+r5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDA2stvQCj28PlHTfVrTy+zLt22XMB8GA1UdIwQY
MBaAFJ5HXJICYG5mZ+lKd56QPbaXpZAlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtkY2tnSmdibVpuNlVwM25wQTl0cGVsa0NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83NGJkMzUtMGFhOC00NzE4LTg5MDAt
Y2NiYjZlOTBhMTliLzEvbmtkY2tnSmdibVpuNlVwM25wQTl0cGVsa0NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC83NGJkMzUtMGFhOC00NzE4LTg5MDAtY2NiYjZlOTBhMTli
LzEvbmtkY2tnSmdibVpuNlVwM25wQTl0cGVsa0NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHK6s7NHd
Zhtg3ncltPBMpGxTh+Ijg38ArnDPqPbo/W1TVZV6OyUmeGYEwv1nmThJst/YfHBz
012pZxwdnC02tlThxN2HA6MRSLkT8z1IodIg6JvyWJmPV/peoQJhCMZCUqCAtWZ1
UECtpo+X9G5XzzROqklRQWk8MBw5NklRq8p4GEeKkf5f9xmjhE9ZY1p5OL0ckard
MyHt9JswVqPO6KwgXUkGY+TSowRE/MAIwbBeJbNTzaev84oz8iZXKcI3lQqzbLpj
8cGdQ3hth/vuoVhqnj6Q1/pEYoPd7LYmeXfsIL1D4ITFoXbGMaBpRCbXFSkfv315
XZThked7FpF65A==
-----END CERTIFICATE-----
Generated at Fri Jul 4 02:18:57 2025 by rpki-client