Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
File: nKihMlGaJClJSXNjuMqjPnLGc_g.mft (raw, json)
Hash identifier: XQ1dWG14bDMgiGxSnMcfmpLeuiVXxBOjOXgd+65M9lE=
Subject key identifier: 35:C8:03:8C:3E:4A:FA:5E:EC:30:92:9A:E0:E1:D1:2E:5A:68:59:37
Authority key identifier: 9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
Certificate issuer: /CN=9ca8a132519a242949497363b8caa33e72c673f8
Certificate serial: 0198D4A7D7B311EAD72E13CD4A2EC1B2042C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
Manifest number: 1048
Signing time: Sat 23 Aug 2025 02:00:26 +0000
Manifest this update: Sat 23 Aug 2025 02:00:26 +0000
Manifest next update: Sun 24 Aug 2025 02:00:26 +0000
Files and hashes: 1: dXm9nDAbHEfPr8e0rvdta5vcQCQ.roa (hash: ZAX5/DrLWdB1icFKrgXw3Y2Wbffkldc6zIYnws0ruBM=)
2: iRubAGtbRFzHiw3kU73WMgNN_Ew.roa (hash: zVFcmjx3cq29/V7ruFQJSBuo9AC0OuJEahRAn89+q2w=)
3: nKihMlGaJClJSXNjuMqjPnLGc_g.crl (hash: 2mNWVl3zTpvjcnLZ3EKiEPGUqxXPRvXR/O0il6avJY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:d7:b3:11:ea:d7:2e:13:cd:4a:2e:c1:b2:04:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca8a132519a242949497363b8caa33e72c673f8
Validity
Not Before: Aug 23 02:00:26 2025 GMT
Not After : Aug 24 02:00:26 2025 GMT
Subject: CN=35c8038c3e4afa5eec30929ae0e1d12e5a685937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8b:72:55:23:d1:46:b4:79:51:45:03:82:d4:
0a:d8:9f:6d:d5:bb:6a:90:c8:5e:78:56:2e:5e:6a:
23:5f:d1:36:57:57:da:52:da:13:c8:8a:40:c7:92:
80:ad:60:25:29:47:a1:f0:f6:94:24:77:09:0a:bf:
fa:ae:22:74:33:5b:94:f4:81:03:d4:91:04:70:3a:
25:e8:33:c9:06:a4:18:cf:86:e6:60:5d:61:05:14:
2a:8d:35:40:c3:70:2e:da:55:a8:d6:c0:b6:77:21:
71:85:7f:db:89:6d:89:be:35:9d:92:7a:25:c0:72:
70:db:ec:fd:d3:c4:c8:d0:2b:fc:4f:a2:bc:39:1b:
56:9f:7f:50:c8:d5:0e:22:29:2a:5c:fd:af:8e:e7:
50:b3:cd:30:06:ad:1a:54:5e:d4:89:e1:02:60:5b:
d2:3f:f6:cd:de:3f:1c:19:e1:36:cf:f0:66:c9:a9:
3f:df:dc:cb:e9:a0:5b:36:03:9e:fb:7a:f5:71:29:
eb:78:8d:34:0e:4e:7e:0d:b4:28:e4:62:44:4f:25:
70:d1:34:fd:e5:56:c9:68:ee:bf:9f:23:cc:12:2d:
64:c6:5e:4b:b2:fb:d8:63:6f:bb:b7:df:58:fe:e9:
f5:0a:e7:71:10:04:9d:f2:43:f8:86:c8:6b:cb:fa:
5a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C8:03:8C:3E:4A:FA:5E:EC:30:92:9A:E0:E1:D1:2E:5A:68:59:37
X509v3 Authority Key Identifier:
keyid:9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:7c:c6:8d:e8:6d:48:52:e6:0c:a8:0f:89:53:6f:3c:c2:74:
05:1b:d4:ef:e5:56:9a:62:fe:43:af:d6:f4:d5:5f:3c:83:35:
a3:93:03:93:d2:8f:08:b2:d4:29:e2:e3:ec:a0:81:f2:e6:b1:
d3:8b:f3:87:4c:d9:0b:fe:02:8a:d3:92:7b:66:c3:7d:08:7c:
fd:44:7e:a1:1e:fd:e8:ad:ba:3c:13:ee:dc:56:65:27:11:27:
57:1f:48:7d:03:47:a0:40:6a:29:4c:67:88:80:34:1c:c7:b1:
6b:09:ac:36:c9:cb:2d:35:d1:2e:08:99:e2:45:48:3b:68:4b:
d4:36:67:9b:b5:ce:60:7c:f4:99:34:54:cf:77:f0:6e:45:86:
d7:ed:58:f6:6a:30:20:bf:a3:b8:88:ca:c5:62:cc:30:a1:83:
fb:fc:0b:98:df:6b:5f:74:56:61:e7:c2:d1:ca:aa:15:9a:06:
a8:de:98:e4:dd:95:81:b2:c5:3f:59:21:ed:24:2b:9e:21:52:
89:06:82:71:47:e3:78:05:4a:a2:b5:8c:ce:66:e2:0e:88:3b:
5c:b9:fc:10:14:b5:43:cc:42:57:53:4f:56:d7:40:d5:03:36:
81:6c:48:98:6a:11:b7:d0:c5:ba:2f:15:33:c2:93:b3:e2:ff:
40:d3:be:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:57 2025 by rpki-client