Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
File: nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft (raw, json)
Hash identifier: GGYYWSKMed3tDGGGivclL7rWO2hkUexI6/IUUMA1G+w=
Subject key identifier: B7:61:84:99:10:99:E9:AD:08:32:60:23:B4:75:B9:D0:BE:18:71:08
Authority key identifier: 9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91
Certificate issuer: /CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991
Certificate serial: 0197B89002DBFC5D0D6C496EA4077154B36E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
Manifest number: 113C
Signing time: Sat 28 Jun 2025 22:02:15 +0000
Manifest this update: Sat 28 Jun 2025 22:02:15 +0000
Manifest next update: Sun 29 Jun 2025 22:02:15 +0000
Files and hashes: 1: nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl (hash: mwr+9ViDo7f3tzawUZihTjSDAuxdrtQDLl73aSr15s4=)
2: rbFhRWy7PnH1-c74EqjQ8O_SsH8.roa (hash: +OgMhgDQLZldm2bdOQKGi3uI3dnjtK1GBopk2ba9vPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:02:db:fc:5d:0d:6c:49:6e:a4:07:71:54:b3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca90e7daf15c17c1b9abc572157bc7d917b3991
Validity
Not Before: Jun 28 22:02:15 2025 GMT
Not After : Jun 29 22:02:15 2025 GMT
Subject: CN=b76184991099e9ad08326023b475b9d0be187108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:55:3e:4f:66:7a:55:05:97:10:dc:fe:f4:2c:
e1:4f:27:1f:93:f3:d5:52:a0:72:db:12:43:b6:4d:
c9:5d:1c:03:b0:8a:2b:f9:e7:92:0a:86:f7:c8:dd:
69:5d:22:a7:5b:58:cf:51:75:7e:8a:cd:d7:24:b0:
37:5e:6f:a2:0e:dd:80:d6:e9:2d:68:c8:73:70:f4:
8b:ee:7f:cb:82:76:4e:0d:0a:96:42:a1:7f:fe:80:
5a:b7:24:00:3a:20:7c:44:63:90:da:00:f9:4d:7e:
9e:9a:ac:70:03:92:51:2b:8c:1c:b7:fb:b4:7a:da:
74:49:55:bd:2a:e2:67:b0:db:73:95:95:73:cf:9e:
dc:5a:01:6e:b7:f8:c9:7a:ca:38:3f:c9:ba:5f:5c:
f7:6c:fb:25:11:7f:a8:7f:71:28:84:89:49:e8:bd:
e0:8a:d8:8d:a9:0a:54:6f:7f:06:c2:80:78:68:bb:
ea:0b:d2:1b:fd:ef:01:92:ec:8f:8f:94:52:52:5b:
48:33:9a:08:5b:21:63:6f:ad:f9:a9:fe:e7:68:b0:
2b:9d:37:aa:3d:bd:c4:ff:dd:77:ab:3f:68:a7:0e:
09:99:b1:8d:c4:97:09:80:78:dc:ed:9e:a0:ef:2b:
c3:59:aa:bd:bd:e2:fb:2f:2f:d9:58:ea:ce:16:94:
b7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:61:84:99:10:99:E9:AD:08:32:60:23:B4:75:B9:D0:BE:18:71:08
X509v3 Authority Key Identifier:
keyid:9C:A9:0E:7D:AF:15:C1:7C:1B:9A:BC:57:21:57:BC:7D:91:7B:39:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKkOfa8VwXwbmrxXIVe8fZF7OZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/25f375-140f-46e9-967e-6e459a58e1d6/1/nKkOfa8VwXwbmrxXIVe8fZF7OZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b0:ba:5f:03:68:71:e8:37:94:3d:6b:9a:6d:ed:93:ea:01:
19:70:a6:9a:a0:24:c5:b0:62:72:0b:1e:a1:52:70:1a:69:5d:
24:6f:82:45:62:03:56:a9:d6:03:51:fa:d4:70:23:03:43:1b:
c7:70:a1:7c:3e:9f:3c:c1:18:99:47:96:6f:4f:20:01:53:92:
00:fb:b0:29:06:d0:aa:28:83:bf:d5:6e:92:90:28:3a:0a:33:
5c:63:93:9f:87:2e:2d:f8:a7:31:4d:ad:bd:b2:a1:4f:0c:1b:
52:46:b5:08:55:09:fd:cc:98:e3:8d:50:84:d1:87:24:f8:9e:
e4:93:c2:15:d7:0d:45:53:12:af:e3:f3:0c:97:93:c4:9f:b7:
11:2e:21:07:77:56:73:cc:a2:4a:2d:30:20:e2:35:9d:ea:53:
12:b8:25:50:41:07:a0:f8:0c:f2:8a:2c:62:77:f4:7a:b0:63:
50:df:ad:c4:11:21:13:8c:b0:21:55:5f:ea:98:38:fc:cd:5c:
07:4d:e8:7c:6d:fd:e0:b9:8f:91:2d:ab:00:1d:a6:26:80:3f:
94:33:d9:d4:9b:d5:61:cc:f3:09:fc:d7:31:0f:a6:60:46:c1:
67:b7:d9:d6:0c:70:a1:78:0b:78:2a:86:a5:79:85:86:59:0b:
8f:b1:90:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:21:23 2025 by rpki-client