Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
File: nKihMlGaJClJSXNjuMqjPnLGc_g.mft (raw, json)
Hash identifier: m0BAaDdlDBQOaq7IjWQqSKiF4Vgw09MwgS8l+36xktI=
Subject key identifier: 96:64:8C:5D:8D:97:60:24:1B:26:9A:DE:57:5C:6E:5E:A7:C9:8C:62
Authority key identifier: 9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
Certificate issuer: /CN=9ca8a132519a242949497363b8caa33e72c673f8
Certificate serial: 0197B8C60787E1A52C6C29737D0495AD7291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
Manifest number: 0FB5
Signing time: Sat 28 Jun 2025 23:01:15 +0000
Manifest this update: Sat 28 Jun 2025 23:01:15 +0000
Manifest next update: Sun 29 Jun 2025 23:01:15 +0000
Files and hashes: 1: dXm9nDAbHEfPr8e0rvdta5vcQCQ.roa (hash: ZAX5/DrLWdB1icFKrgXw3Y2Wbffkldc6zIYnws0ruBM=)
2: iRubAGtbRFzHiw3kU73WMgNN_Ew.roa (hash: zVFcmjx3cq29/V7ruFQJSBuo9AC0OuJEahRAn89+q2w=)
3: nKihMlGaJClJSXNjuMqjPnLGc_g.crl (hash: NhQk2H/4eQBPEAcPkqHd5DmoJxm56dbaGLrhk5SBwPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c6:07:87:e1:a5:2c:6c:29:73:7d:04:95:ad:72:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca8a132519a242949497363b8caa33e72c673f8
Validity
Not Before: Jun 28 23:01:15 2025 GMT
Not After : Jun 29 23:01:15 2025 GMT
Subject: CN=96648c5d8d9760241b269ade575c6e5ea7c98c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:02:8a:f6:b3:b8:57:a3:f8:ef:16:f0:4c:52:
b0:d4:83:11:a3:b6:c5:b8:1e:9f:c8:a3:df:eb:88:
8c:33:25:24:67:0a:d8:df:f5:0e:d9:3d:a2:f6:ca:
13:50:57:12:97:ed:f4:30:90:64:e9:1b:f2:99:a0:
40:1b:84:d2:c9:fe:66:83:a2:33:8a:f1:e2:4e:e8:
1e:84:04:bc:11:79:3f:43:8c:c6:b1:82:4a:39:11:
a6:26:c1:72:68:54:d2:7e:2d:a7:9d:0f:4e:af:7c:
38:ba:04:5d:01:ae:41:a5:1f:d5:3b:2f:64:b5:6e:
6f:2f:71:30:88:dc:3f:a3:59:84:82:0e:cb:44:f7:
f0:93:31:af:4f:ee:ea:bb:9f:1b:25:39:e5:6b:93:
cf:29:df:8f:f4:ce:61:89:6f:fd:92:a1:5f:80:1a:
cd:70:00:ec:11:08:7f:8d:93:bf:76:91:6a:47:5d:
b9:97:50:f8:95:4f:8e:e6:90:73:d7:de:86:f7:27:
39:3c:03:04:20:a4:8b:d4:5e:da:04:5a:7f:2a:8e:
79:5b:da:24:8e:23:74:de:46:eb:25:6e:7b:16:04:
6e:43:7a:f0:ca:5f:bd:30:17:05:85:80:e9:af:5c:
1e:20:75:81:30:84:3b:74:61:a4:a9:06:a4:65:94:
55:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:64:8C:5D:8D:97:60:24:1B:26:9A:DE:57:5C:6E:5E:A7:C9:8C:62
X509v3 Authority Key Identifier:
keyid:9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:76:a0:08:b7:47:3c:b3:2b:db:b8:43:09:21:6c:1c:97:1d:
17:fc:97:73:b7:a0:f6:a1:5b:d9:63:22:30:1c:9a:1d:c1:b4:
d5:3a:d0:0d:30:d6:46:8c:c6:99:b1:80:46:5e:76:12:11:4d:
ba:67:ca:f3:90:4b:81:b1:21:d5:7a:d8:9b:f4:0f:35:d8:ce:
c4:c9:3e:93:49:f5:ac:49:6f:53:d8:f4:3d:85:59:4e:a6:bc:
4d:37:d0:ff:d2:f3:fa:72:e1:40:9c:2b:12:e6:4c:27:5f:54:
0f:63:d9:0d:75:c2:5b:2a:55:3c:40:37:77:22:b6:92:10:db:
62:8b:0e:44:2f:b8:e2:22:77:17:6f:02:e5:1c:ef:dc:01:28:
a3:95:f4:c8:e8:52:74:7f:01:5b:61:81:91:88:3d:24:0d:45:
f8:50:48:5c:d4:27:b1:2d:36:4f:b5:55:11:c2:c9:16:07:54:
53:b9:57:5f:c7:f3:fe:9b:ae:66:c8:63:31:a8:af:97:7e:80:
71:70:a1:dd:97:4f:f0:bc:1f:ac:d2:23:60:7e:b3:52:64:f4:
fa:d2:2e:ca:ed:ae:31:6a:4e:5c:b5:43:5a:21:05:2b:ac:57:
a9:75:bf:b0:80:18:de:c0:c7:ac:86:28:80:6e:3a:bc:4a:a3:
fd:b2:5b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:08:36 2025 by rpki-client