Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
File: NkYhMZiJnt-otCrdRzraIYdI4QQ.mft (raw, json)
Hash identifier: VIgwKw8RwB5Bwwpih8sXChROncvAiVW51QEu4dsjA70=
Subject key identifier: 91:3D:AF:57:A4:7D:B3:F3:36:4C:5F:2A:85:F9:BE:A6:1C:A9:DB:82
Authority key identifier: 36:46:21:31:98:89:9E:DF:A8:B4:2A:DD:47:3A:DA:21:87:48:E1:04
Certificate issuer: /CN=3646213198899edfa8b42add473ada218748e104
Certificate serial: 0197B7B2F9C345B66B60D89D2738B27C3498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
Manifest number: 0B2A
Signing time: Sat 28 Jun 2025 18:00:49 +0000
Manifest this update: Sat 28 Jun 2025 18:00:49 +0000
Manifest next update: Sun 29 Jun 2025 18:00:49 +0000
Files and hashes: 1: G2aa7vj-d_CA2HuKW-IASCzWaSQ.roa (hash: pv32os3ZPwMAxeQUj3RBQ+FwWykK77hFOgeqqDGQkeE=)
2: NkYhMZiJnt-otCrdRzraIYdI4QQ.crl (hash: Pn0SoeIio9sLKVFrx3JrlmSyYMm+HRV3YZwA2zWM3Ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:f9:c3:45:b6:6b:60:d8:9d:27:38:b2:7c:34:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3646213198899edfa8b42add473ada218748e104
Validity
Not Before: Jun 28 18:00:49 2025 GMT
Not After : Jun 29 18:00:49 2025 GMT
Subject: CN=913daf57a47db3f3364c5f2a85f9bea61ca9db82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5a:cd:af:84:e0:72:cd:fd:9c:1d:64:97:6c:
73:35:85:e7:10:2c:b9:4a:f9:aa:a2:80:88:46:d5:
c2:5a:7c:54:88:1a:53:b6:85:63:ae:86:27:56:5a:
fa:92:5b:84:01:df:95:c8:a1:af:b6:4f:4d:ee:3d:
55:67:0c:fa:3a:e7:22:2e:1b:a4:7f:27:5c:f4:56:
31:4d:d6:05:4f:14:54:a6:9d:21:1e:da:61:3f:4a:
31:0e:26:aa:a9:f0:95:ef:d3:07:7d:f0:a8:e2:83:
fd:91:41:93:26:46:f9:50:ca:33:85:7e:83:51:e8:
b7:13:d2:8c:59:06:55:a3:9f:cd:fc:90:c6:71:2c:
52:35:49:8c:ea:7d:88:2c:3d:44:dd:63:6e:a3:2d:
13:f1:5c:1b:9c:0c:95:dc:58:5d:4c:8c:19:3e:ae:
e5:12:c6:9d:40:c4:4e:8c:04:b9:c6:28:7a:72:df:
a9:77:36:16:e7:fe:af:a2:4f:27:78:74:14:2a:b9:
58:2f:6e:ac:e7:c7:d7:0b:d1:68:a7:d0:da:4e:28:
74:d1:1f:6c:e1:93:15:b8:29:63:1b:03:8e:94:58:
8e:09:c9:11:d1:48:d5:0d:b9:45:9e:e7:8f:71:14:
b3:57:f5:c8:d0:06:3d:a6:f7:5a:fc:2e:7f:0d:dc:
61:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:3D:AF:57:A4:7D:B3:F3:36:4C:5F:2A:85:F9:BE:A6:1C:A9:DB:82
X509v3 Authority Key Identifier:
keyid:36:46:21:31:98:89:9E:DF:A8:B4:2A:DD:47:3A:DA:21:87:48:E1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:8e:bb:d6:17:70:88:49:59:9f:cb:96:dd:7b:b5:53:c0:34:
96:47:10:95:b5:d8:7b:c9:47:d0:90:2b:fb:6f:94:28:40:84:
59:06:66:4d:d2:75:12:5a:6d:61:92:bc:d6:7d:4b:07:5f:a2:
dc:fe:97:6c:68:a6:c2:16:65:dc:7f:13:d9:b6:19:f6:66:2b:
a0:6e:6f:94:66:57:0b:5d:d1:5d:87:c6:db:40:1a:03:75:83:
48:52:08:d7:da:b3:49:72:d2:2e:d8:f6:5d:d3:25:d4:78:84:
49:83:a6:0c:94:c3:25:c9:50:61:16:f5:60:ff:7f:f0:43:83:
34:4e:94:43:7d:15:9a:9d:cc:48:5c:e8:86:38:16:b9:65:ee:
8e:3b:68:50:fd:05:68:b1:46:6f:35:56:41:e3:e7:1f:bd:3c:
5e:30:18:1b:98:46:24:cc:85:5f:65:4a:94:87:83:5a:0c:87:
5a:34:eb:9c:ef:50:3e:7e:c2:3e:e4:64:ca:ba:04:1c:6f:49:
5b:fb:54:2d:d5:6a:0a:0a:f7:d7:4d:f1:6b:01:8e:1f:6a:11:
07:06:16:33:61:f5:56:46:57:cf:f0:f7:18:c3:67:df:14:d1:
e8:cd:dd:10:3c:1b:e9:5f:b9:5a:bc:93:e0:69:d3:dc:86:47:
c4:ba:08:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:55:40 2025 by rpki-client