Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
File: NkYhMZiJnt-otCrdRzraIYdI4QQ.mft (raw, json)
Hash identifier: pJn80gBxDh8daT51AjEuRF81aS5EnzZ2VRls0nzB/T8=
Subject key identifier: 4D:84:99:B4:F3:B8:94:50:CB:BB:10:63:29:A0:18:73:E3:EC:C2:1F
Authority key identifier: 36:46:21:31:98:89:9E:DF:A8:B4:2A:DD:47:3A:DA:21:87:48:E1:04
Certificate issuer: /CN=3646213198899edfa8b42add473ada218748e104
Certificate serial: 0198D583C59F90C2FDB1119F8374EA1456CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
Manifest number: 0BBE
Signing time: Sat 23 Aug 2025 06:00:39 +0000
Manifest this update: Sat 23 Aug 2025 06:00:39 +0000
Manifest next update: Sun 24 Aug 2025 06:00:39 +0000
Files and hashes: 1: G2aa7vj-d_CA2HuKW-IASCzWaSQ.roa (hash: pv32os3ZPwMAxeQUj3RBQ+FwWykK77hFOgeqqDGQkeE=)
2: NkYhMZiJnt-otCrdRzraIYdI4QQ.crl (hash: 6Psh/LzbZX/EcPBRFJNyQV7X/6BZ7wBfgVHbLVhdW6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:c5:9f:90:c2:fd:b1:11:9f:83:74:ea:14:56:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3646213198899edfa8b42add473ada218748e104
Validity
Not Before: Aug 23 06:00:39 2025 GMT
Not After : Aug 24 06:00:39 2025 GMT
Subject: CN=4d8499b4f3b89450cbbb106329a01873e3ecc21f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f9:67:48:ce:ca:6a:89:4e:a0:4f:90:32:82:
5d:66:ba:d6:56:43:f8:ad:78:fc:d9:07:c5:f1:a9:
eb:e1:72:fb:dd:d5:c7:76:ea:77:4c:e9:62:b8:6b:
8f:59:d9:a1:21:aa:f6:0a:f8:52:11:49:95:88:c2:
a6:2c:82:f2:c9:8c:eb:6c:ae:6e:2a:df:46:94:f6:
3c:9c:c8:d2:40:72:df:33:c9:76:e4:68:e6:f4:f0:
fa:ae:d8:0e:e2:96:b0:d5:ed:0b:10:57:aa:0c:da:
5c:36:a1:2f:c5:2e:9b:18:50:f3:1f:7c:ae:46:e1:
20:9b:44:89:e3:42:19:ce:3a:b8:4b:25:88:e0:97:
1b:ec:75:cf:73:fa:80:74:52:cd:6e:b9:da:be:47:
db:ac:ad:a9:f6:ed:2e:71:b2:0a:c4:8c:d1:9f:42:
c5:cd:ca:ac:ef:0c:a6:94:28:dd:9f:b0:53:35:34:
19:fd:7c:fe:a8:27:64:3f:aa:07:f1:5f:67:7b:78:
38:f6:fb:28:ef:dd:12:e2:6a:06:d2:eb:65:94:a6:
ff:b6:7b:f1:ee:f4:dd:c7:8d:15:3c:2f:e0:c9:f4:
c9:10:4f:c0:7f:ae:3a:36:e5:dc:44:7f:fb:26:34:
d4:1d:e1:ce:82:c6:22:3d:c6:f2:ef:56:83:ba:5d:
fb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:84:99:B4:F3:B8:94:50:CB:BB:10:63:29:A0:18:73:E3:EC:C2:1F
X509v3 Authority Key Identifier:
keyid:36:46:21:31:98:89:9E:DF:A8:B4:2A:DD:47:3A:DA:21:87:48:E1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkYhMZiJnt-otCrdRzraIYdI4QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/376d45-c00a-4ee9-986b-06dc38b57535/1/NkYhMZiJnt-otCrdRzraIYdI4QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:e9:29:c5:be:8f:7c:3e:82:07:9a:5b:b2:45:ba:66:92:30:
e7:19:d1:54:ff:2c:d2:fa:58:3c:56:49:c2:d4:53:0e:30:98:
e1:36:d8:62:10:bb:87:a7:98:4d:1d:19:d6:21:78:67:cd:6b:
8e:61:82:05:21:6d:36:5f:ba:48:95:ab:88:0c:a7:90:60:b1:
7a:6d:7e:f0:80:2b:12:0e:d3:93:03:5b:1e:97:3b:cd:41:a6:
f9:2d:c4:fd:95:1e:3f:04:8a:85:8b:10:2e:c0:93:04:53:30:
ed:c7:17:af:13:92:96:a9:d0:a6:99:6e:cf:a1:62:8a:70:26:
97:f1:81:c0:a2:c8:ef:fa:ae:b7:49:20:81:ee:07:17:c7:3b:
f8:a4:0d:26:d4:91:c7:9d:0e:a2:fc:eb:c2:0a:88:1b:a9:7d:
b8:fc:6d:2f:0c:43:63:30:3f:7e:54:26:49:1f:8d:99:6a:9b:
c5:36:00:4a:dc:53:bd:3e:8c:16:f6:5a:6b:d0:12:3b:db:94:
d2:80:ee:20:67:4a:d4:85:4a:71:d2:b0:32:44:75:a0:6a:d3:
7c:eb:c4:d5:9e:5d:3c:21:90:35:69:73:02:7f:d6:f1:30:66:
ae:b3:1c:0c:b4:b7:6b:d9:98:1f:96:bc:0f:22:12:be:f9:2f:
cb:b4:a0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:07 2025 by rpki-client