Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
File: nkuBjJLE5paGs8KBAIVd-lA6BXo.mft (raw, json)
Hash identifier: 7X7Wk+D3WNXG7o4/8SGQxVGHwPZhACGG6wQuSOrtEyo=
Subject key identifier: 6F:95:B8:68:FC:E6:E3:CD:8A:F5:6E:1A:5D:0D:BF:8D:8A:0F:C1:3C
Authority key identifier: 9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A
Certificate issuer: /CN=9e4b818c92c4e69686b3c28100855dfa503a057a
Certificate serial: 0198D515CB7BF966477C5DE2F245C993CD85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 04:00:31 +0000
Manifest this update: Sat 23 Aug 2025 04:00:31 +0000
Manifest next update: Sun 24 Aug 2025 04:00:31 +0000
Files and hashes: 1: nkuBjJLE5paGs8KBAIVd-lA6BXo.crl (hash: 8mu+U/jb66mWXwd6pMYw/TLwMMon7RIt0X2TVkQNVH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:cb:7b:f9:66:47:7c:5d:e2:f2:45:c9:93:cd:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4b818c92c4e69686b3c28100855dfa503a057a
Validity
Not Before: Aug 23 04:00:31 2025 GMT
Not After : Aug 24 04:00:31 2025 GMT
Subject: CN=6f95b868fce6e3cd8af56e1a5d0dbf8d8a0fc13c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2d:b7:14:2d:79:84:7d:2a:22:c7:f1:83:46:
29:1d:69:ac:b2:6c:fb:c6:1d:b3:f6:74:90:b3:cc:
2b:2e:3f:1a:50:55:ff:04:6b:59:65:97:fe:d2:d4:
83:c7:f4:8a:95:71:fb:bf:41:90:b7:60:ba:e0:62:
9c:c4:09:03:24:ba:a1:21:45:ab:2c:29:8c:43:70:
65:4e:d3:10:a1:4e:b9:bf:46:1f:e6:3a:20:57:c2:
cc:a7:1d:82:68:6e:2e:f2:64:07:d9:4e:0a:0f:a2:
a0:5c:42:bb:f4:28:91:20:d4:be:00:47:39:eb:87:
7a:21:38:16:b6:ec:f1:c0:70:34:21:ba:51:12:aa:
13:40:d7:13:6a:17:90:56:eb:17:60:90:26:99:40:
93:3c:7e:94:2d:c6:5d:2f:08:4b:f8:e2:22:7b:9d:
5c:67:47:ea:87:88:17:79:e0:ed:ac:a4:01:f7:5a:
71:bb:b6:e0:1d:be:f8:9c:a0:bc:25:66:8b:67:fa:
4f:b0:6c:51:17:19:af:de:56:26:af:9a:f7:72:fc:
a2:f8:d2:38:f8:a2:1c:b4:cc:37:78:24:d7:fd:d7:
49:80:13:5e:dd:83:3f:3e:cb:5b:e2:af:36:30:ac:
c2:3a:31:2d:4e:8a:83:10:fb:ab:b5:fd:d1:cf:8a:
82:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:95:B8:68:FC:E6:E3:CD:8A:F5:6E:1A:5D:0D:BF:8D:8A:0F:C1:3C
X509v3 Authority Key Identifier:
keyid:9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c4:fa:e9:f8:63:8e:bc:a4:9c:a9:ed:c9:09:e4:df:dd:63:
7f:c4:52:5a:3c:f6:4b:c7:6c:1c:63:85:82:a2:20:9e:9d:6b:
3a:87:da:df:4e:b9:d9:f2:fc:b2:fc:dc:40:ef:ab:62:24:fd:
43:77:02:e5:fb:dc:30:fa:75:d0:3b:12:41:09:7e:4d:59:e6:
cc:97:ed:95:6d:ce:44:65:c9:e8:f9:9b:a0:c0:c7:a3:a8:9b:
b3:67:f4:fa:66:a9:9e:a9:eb:64:64:0d:2f:29:11:39:02:37:
e4:af:d6:91:7d:be:d7:ed:60:0c:dd:8c:fe:db:4e:a0:bc:d0:
68:20:eb:dd:4a:6e:e8:48:5f:67:a1:c4:23:9e:fc:3e:c8:1b:
e7:73:e6:94:35:67:96:2e:b7:2d:3d:d7:da:26:ce:85:5c:98:
51:10:bf:3c:d7:02:f5:6b:e6:de:31:0e:33:f2:ed:94:a2:34:
6d:3c:c8:6e:34:4f:a7:ed:27:ab:54:ef:c7:33:b4:0d:95:1c:
26:59:c3:c2:49:98:3b:83:a2:97:d9:35:0f:bf:a1:71:b4:96:
91:b8:80:d4:74:4b:ef:bb:70:77:c5:0d:6c:e4:63:77:23:d7:
51:ea:4a:26:be:a9:67:b0:45:a1:cf:25:3f:e4:3c:d0:28:32:
7e:1b:a6:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFct7+WZHfF3i8kXJk82FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNGI4MThjOTJjNGU2OTY4NmIzYzI4MTAwODU1ZGZhNTAz
YTA1N2EwHhcNMjUwODIzMDQwMDMxWhcNMjUwODI0MDQwMDMxWjAzMTEwLwYDVQQD
Eyg2Zjk1Yjg2OGZjZTZlM2NkOGFmNTZlMWE1ZDBkYmY4ZDhhMGZjMTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAii23FC15hH0qIsfxg0YpHWmssmz7
xh2z9nSQs8wrLj8aUFX/BGtZZZf+0tSDx/SKlXH7v0GQt2C64GKcxAkDJLqhIUWr
LCmMQ3BlTtMQoU65v0Yf5jogV8LMpx2CaG4u8mQH2U4KD6KgXEK79CiRINS+AEc5
64d6ITgWtuzxwHA0IbpREqoTQNcTaheQVusXYJAmmUCTPH6ULcZdLwhL+OIie51c
Z0fqh4gXeeDtrKQB91pxu7bgHb74nKC8JWaLZ/pPsGxRFxmv3lYmr5r3cvyi+NI4
+KIctMw3eCTX/ddJgBNe3YM/Pstb4q82MKzCOjEtToqDEPurtf3Rz4qCKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+VuGj85uPNivVuGl0Nv42KD8E8MB8GA1UdIwQY
MBaAFJ5LgYySxOaWhrPCgQCFXfpQOgV6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmt1QmpKTEU1cGFHczhLQkFJVmQtbEE2QlhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9lNGU4MWMtNGU4NC00NTI0LThkZGMt
NDAxMGEzNmQ5Y2RkLzEvbmt1QmpKTEU1cGFHczhLQkFJVmQtbEE2QlhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9lNGU4MWMtNGU4NC00NTI0LThkZGMtNDAxMGEzNmQ5Y2Rk
LzEvbmt1QmpKTEU1cGFHczhLQkFJVmQtbEE2QlhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAScT66fhj
jryknKntyQnk391jf8RSWjz2S8dsHGOFgqIgnp1rOofa30652fL8svzcQO+rYiT9
Q3cC5fvcMPp10DsSQQl+TVnmzJftlW3ORGXJ6PmboMDHo6ibs2f0+mapnqnrZGQN
LykROQI35K/WkX2+1+1gDN2M/ttOoLzQaCDr3Upu6EhfZ6HEI578Psgb53PmlDVn
li63LT3X2ibOhVyYURC/PNcC9Wvm3jEOM/LtlKI0bTzIbjRPp+0nq1TvxzO0DZUc
JlnDwkmYO4Oil9k1D7+hcbSWkbiA1HRL77twd8UNbORjdyPXUepKJr6pZ7BFoc8l
P+Q80CgyfhumEg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:12:28 2025 by rpki-client