Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
File: nKxPYfRotyACqyXxEuUgEe14LM4.mft (raw, json)
Hash identifier: 9/ks4eXjtGrVURu4LeoaxrF7SwC1Dazh2TdZzpuZW4U=
Subject key identifier: 1D:88:6C:7B:BF:67:B7:CD:1F:35:74:27:A2:D6:71:F1:EF:F9:F6:03
Authority key identifier: 9C:AC:4F:61:F4:68:B7:20:02:AB:25:F1:12:E5:20:11:ED:78:2C:CE
Certificate issuer: /CN=9cac4f61f468b72002ab25f112e52011ed782cce
Certificate serial: 0197B8909CE89305EB5490916D4A79D502E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
Manifest number: 0D2D
Signing time: Sat 28 Jun 2025 22:02:54 +0000
Manifest this update: Sat 28 Jun 2025 22:02:54 +0000
Manifest next update: Sun 29 Jun 2025 22:02:54 +0000
Files and hashes: 1: 1-ctCBWTM9YEJSb9HauIUKPqVwas.roa (hash: F+Ql00NFkP6u64/1DSJGoJFeSPLMPLBWzAqmumx63J4=)
2: nKxPYfRotyACqyXxEuUgEe14LM4.crl (hash: OLXlPZCiZzVu89g6pgB6PTDkzTSpaevW3A6RPNvOpuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:9c:e8:93:05:eb:54:90:91:6d:4a:79:d5:02:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cac4f61f468b72002ab25f112e52011ed782cce
Validity
Not Before: Jun 28 22:02:54 2025 GMT
Not After : Jun 29 22:02:54 2025 GMT
Subject: CN=1d886c7bbf67b7cd1f357427a2d671f1eff9f603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:2a:1e:fe:4f:e7:49:ca:29:21:d4:9a:ee:f4:
25:ee:49:6e:be:ba:38:69:2a:06:35:c1:82:d8:b1:
ad:4c:8f:ea:e9:21:e2:c3:bd:29:b5:ff:f6:20:fa:
b1:f8:51:ab:6a:c0:f2:e5:99:27:c9:7c:74:62:11:
66:4d:ab:b7:0e:da:b5:61:50:2f:12:76:1b:6f:a9:
d7:dd:43:8f:32:b8:a1:68:8e:e4:57:8b:cf:c0:16:
a4:e4:75:fc:5b:6a:52:0b:2a:cb:8e:10:60:a0:d9:
77:03:0b:29:8d:82:47:45:72:c7:45:20:76:52:0a:
f7:2f:84:04:28:bf:64:98:bd:b2:f2:d4:70:dd:db:
df:d1:65:e5:3e:bc:3e:9f:2a:22:e2:04:40:9c:a2:
73:70:be:93:a2:b6:04:4d:15:45:7f:2c:f1:55:67:
de:d2:8d:fb:d5:6d:9a:3e:70:8c:f3:7e:03:77:56:
51:d9:a5:1c:1f:76:50:5f:f0:ed:2c:45:d8:93:a4:
4c:45:d8:6e:11:5c:75:73:22:2f:da:8d:74:bf:c9:
47:69:bc:e3:f9:1a:d4:6e:85:46:91:9d:c2:4a:c6:
3e:8a:87:bc:0d:f8:ed:dd:ec:ba:58:7f:c6:fe:4c:
cd:45:31:d2:37:6d:de:10:1b:75:fd:45:32:29:26:
a7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:88:6C:7B:BF:67:B7:CD:1F:35:74:27:A2:D6:71:F1:EF:F9:F6:03
X509v3 Authority Key Identifier:
keyid:9C:AC:4F:61:F4:68:B7:20:02:AB:25:F1:12:E5:20:11:ED:78:2C:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:86:fa:6d:88:81:44:f9:3e:03:5c:a9:c5:10:79:41:78:15:
37:55:a6:2c:b7:b2:88:16:b1:f4:46:32:09:08:7d:38:77:6a:
c8:1b:4f:91:7b:f6:54:cc:10:c9:22:b7:58:ac:ff:5c:d1:05:
2a:cc:48:14:48:e0:ab:46:85:02:85:fb:f3:4c:e8:b6:32:15:
96:f9:3b:64:76:f2:fc:c7:76:77:3a:4d:7d:4e:46:0e:ee:5a:
65:a0:94:48:b8:47:8e:12:8e:af:fd:b7:a0:74:2d:95:e2:d0:
db:1d:56:87:69:9e:12:9d:38:9b:c3:24:f5:cf:53:06:4f:7a:
03:50:27:ad:25:e9:5f:7a:2c:53:2e:61:0e:fa:71:13:03:40:
de:2e:9b:16:b0:94:8e:dd:b2:a5:b5:e2:c5:f2:28:b3:e9:13:
68:e3:39:ae:99:f5:f4:0c:59:6f:87:25:22:97:a3:0b:14:72:
70:40:4f:26:7a:37:dc:ab:88:39:b5:3a:1a:43:e5:be:9e:18:
a3:3b:7e:08:c6:c6:09:56:04:00:0f:ee:67:c1:dc:4d:1e:d6:
99:bc:ab:44:7b:80:3a:6b:bc:94:0a:7f:4d:db:98:81:fa:93:
35:bf:79:6d:0e:6f:f1:33:5e:14:bb:8f:a1:c7:38:38:f2:59:
3c:39:18:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:56:43 2025 by rpki-client