Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
File: NkYULOMpCrZ4bT0w8mteQf1oTd4.mft (raw, json)
Hash identifier: JD2pxCH13+PxJXCSFmCoEwdKvSS+mjhi3ewIiybjbZo=
Subject key identifier: 18:96:CB:AD:09:AD:DD:3F:D7:65:37:27:4F:BD:DC:3F:03:2F:B8:A9
Authority key identifier: 36:46:14:2C:E3:29:0A:B6:78:6D:3D:30:F2:6B:5E:41:FD:68:4D:DE
Certificate issuer: /CN=3646142ce3290ab6786d3d30f26b5e41fd684dde
Certificate serial: 0197C45C49E2A456AB29B4DDBE9AF3B35609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
Manifest number: 0999
Signing time: Tue 01 Jul 2025 05:01:11 +0000
Manifest this update: Tue 01 Jul 2025 05:01:11 +0000
Manifest next update: Wed 02 Jul 2025 05:01:11 +0000
Files and hashes: 1: NkYULOMpCrZ4bT0w8mteQf1oTd4.crl (hash: B14J6y8zbtfz0hbxoUTdI4uFFC1IXkYrLC91NJtq+qQ=)
2: T5kWJ0zgWJZajIuh22W4Yozr5Js.roa (hash: nOTln1QfZH/4DaY3ZoWPaEWuEELecZ3pWov8YJOX40U=)
3: yrfnq6Apo3g6hYK2SXicNIxd3BQ.roa (hash: mz8tGW+kk5vYLIpkvgBjBz5ynzM4w4t5pl379UMfAPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:5c:49:e2:a4:56:ab:29:b4:dd:be:9a:f3:b3:56:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3646142ce3290ab6786d3d30f26b5e41fd684dde
Validity
Not Before: Jul 1 05:01:11 2025 GMT
Not After : Jul 2 05:01:11 2025 GMT
Subject: CN=1896cbad09addd3fd76537274fbddc3f032fb8a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:4d:a9:96:d4:8b:d2:41:06:fc:18:8a:a8:c5:
61:e6:9e:e2:a5:f8:c1:4c:8a:29:9e:88:fc:22:59:
2f:c4:ac:1c:c6:e8:c6:7c:c5:aa:39:d9:08:cd:0c:
a3:82:89:9e:ce:52:14:bb:ea:f7:a4:a9:db:e4:28:
4c:6a:3e:43:96:61:69:7a:96:c9:91:f4:42:ff:7b:
ad:c8:53:cf:5c:ad:93:7e:9b:98:91:fa:1c:34:bf:
09:8b:e0:cd:0e:3a:96:3e:30:b3:c0:6b:f1:08:9c:
63:7a:bf:74:43:04:40:e0:e8:98:9b:e3:03:f2:22:
6b:22:7f:81:55:73:e8:5e:35:dd:60:ed:2b:4f:04:
84:ec:2c:a8:66:c9:aa:b4:19:20:dc:2b:6e:19:20:
e5:be:9f:22:57:b8:86:92:0e:20:3f:11:ef:cf:e9:
45:b1:1b:6b:92:d7:69:77:58:1e:c6:e8:1c:fc:bc:
0a:78:f5:a9:9f:8e:10:f1:ae:d3:6d:17:cd:98:1f:
e5:13:fc:73:be:16:3d:04:79:73:29:ed:18:50:14:
72:9f:e5:96:4b:e5:18:fc:46:33:3f:1c:78:49:99:
06:6d:3a:48:be:b8:94:5e:d6:00:21:00:10:a2:65:
90:a1:50:90:80:b9:f4:33:c1:1b:41:dc:4d:69:2c:
93:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:96:CB:AD:09:AD:DD:3F:D7:65:37:27:4F:BD:DC:3F:03:2F:B8:A9
X509v3 Authority Key Identifier:
keyid:36:46:14:2C:E3:29:0A:B6:78:6D:3D:30:F2:6B:5E:41:FD:68:4D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkYULOMpCrZ4bT0w8mteQf1oTd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cd8206-764e-4a31-ace7-d308542a1d86/1/NkYULOMpCrZ4bT0w8mteQf1oTd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:60:31:a0:5a:07:91:fb:9e:3e:b6:e2:60:b1:a0:41:f0:a8:
d9:e7:24:97:f5:db:af:ac:df:ba:60:48:48:72:4a:e0:20:aa:
de:3e:fe:4b:00:0c:14:d2:8d:63:88:1e:89:f7:cf:57:37:4c:
5f:de:fd:29:46:b8:fc:6b:21:4f:5b:78:06:2c:8c:47:ca:7a:
58:70:bc:72:28:af:02:c1:d7:29:51:64:e6:c1:aa:b2:28:27:
00:0a:c0:5d:65:be:87:04:93:f7:6e:41:99:b7:5e:b4:41:19:
78:c0:39:37:a2:53:d7:12:57:83:cc:61:f9:7b:be:3b:71:98:
38:10:0d:3f:fe:20:55:72:13:8e:fd:0c:a9:77:b3:86:1e:2e:
72:32:74:e2:e9:12:f5:9a:68:c8:5f:21:95:07:b1:b1:be:b6:
77:5e:bd:a8:8b:2e:06:37:10:4d:96:97:5f:99:e0:26:9e:7f:
88:68:6b:7b:21:f6:5e:5c:24:39:4a:0d:f8:1f:9c:0b:f2:25:
72:9f:c5:1a:69:dc:c4:bb:ac:75:6b:85:0f:6e:bb:95:7a:32:
67:ca:3b:78:01:47:bb:af:0c:8e:6a:c1:c6:7f:01:b0:f5:17:
b3:75:84:4d:fb:19:ba:be:e0:2d:5a:2b:7d:90:01:1e:b1:56:
d3:df:0a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 14:36:30 2025 by rpki-client