Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
File: nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft (raw, json)
Hash identifier: kZIfIKkT1RRq/5wWgDhTRyTFpQ62bX/U9enjh/ngLlw=
Subject key identifier: FC:96:88:74:6F:C5:2E:48:39:69:BF:46:1F:7D:1A:10:6E:17:41:69
Authority key identifier: 9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA
Certificate issuer: /CN=9e4372f63932ba7fe8f161b564b93860614a80ba
Certificate serial: 0197B6A09C4E2E47091259D54B54E7C3FF89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
Manifest number: 05A8
Signing time: Sat 28 Jun 2025 13:01:08 +0000
Manifest this update: Sat 28 Jun 2025 13:01:08 +0000
Manifest next update: Sun 29 Jun 2025 13:01:08 +0000
Files and hashes: 1: TaAxyGE0YZ7m-xRwM6T1q9wMqQw.roa (hash: 76tscvyJdodgkrjTmEZQdEHR921zYs8tliL/2ouT7RA=)
2: nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl (hash: kqRUde2dk1s8LxVSmuoRAOOrxRaK6RAcmUUkdqHOIuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:9c:4e:2e:47:09:12:59:d5:4b:54:e7:c3:ff:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4372f63932ba7fe8f161b564b93860614a80ba
Validity
Not Before: Jun 28 13:01:08 2025 GMT
Not After : Jun 29 13:01:08 2025 GMT
Subject: CN=fc9688746fc52e483969bf461f7d1a106e174169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3a:4b:c4:b5:d3:d4:d6:67:37:c0:9d:25:64:
a7:f3:e3:7c:72:09:e7:45:f7:c7:84:e2:76:cd:f2:
96:12:4c:fe:98:cc:30:27:40:8c:7d:24:5d:66:92:
5c:c3:cd:21:94:a6:17:ca:da:06:69:34:34:b0:0a:
8e:b4:96:9f:95:e2:22:ae:8a:47:a9:71:f2:b2:43:
3c:35:4e:d9:11:76:06:ae:85:61:d4:bd:14:c5:ad:
7d:ae:2a:1b:23:45:b0:b3:12:75:96:6a:89:5d:94:
6a:4c:07:1f:73:8e:39:54:7b:59:f8:c6:d1:bb:fc:
a4:ee:27:d0:00:be:cb:3f:07:1f:b1:8f:f6:f9:17:
c9:96:49:ab:6d:bd:1f:2a:df:d3:3e:c0:56:20:5c:
a0:16:43:52:b8:8b:7a:27:20:f8:fe:7d:31:fc:18:
56:e0:4e:94:85:89:6e:35:0f:6e:c4:9c:05:d3:6c:
f3:14:e1:d9:2b:46:1c:c6:a4:13:a7:7a:78:48:62:
d7:63:99:72:c4:61:ce:64:2b:a2:f0:f5:b2:0f:e1:
d1:25:12:49:97:f0:ca:3f:9a:0f:d5:c4:6d:5c:e2:
d2:19:3d:c3:92:8c:fe:d5:2b:66:4c:20:a1:3a:db:
47:03:3b:c5:b9:de:35:57:fb:81:13:bd:10:db:e5:
f8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:96:88:74:6F:C5:2E:48:39:69:BF:46:1F:7D:1A:10:6E:17:41:69
X509v3 Authority Key Identifier:
keyid:9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:bb:81:63:f3:71:de:ce:d3:7c:42:f3:73:6c:b5:d1:f4:77:
71:c7:1f:91:bc:a3:b7:9f:3a:4f:fb:30:84:01:f6:cc:4d:b4:
9b:0b:1e:2e:54:64:53:07:2e:62:d7:55:5d:5d:52:ce:2e:01:
f1:e5:50:75:64:3a:73:58:9f:92:d4:f5:a4:d3:34:f7:6c:f4:
af:98:34:8a:a4:e3:80:d7:a6:59:6d:2f:2d:b3:4f:27:2d:8c:
e7:bf:e2:ac:17:78:43:d3:64:3d:64:91:20:81:12:f2:d8:6d:
e7:46:6e:20:53:ea:50:de:5d:e9:65:51:f1:d1:d2:9e:4f:44:
7d:62:99:2c:60:50:24:3c:97:f0:4c:71:26:ff:8f:e8:bc:35:
1c:78:d1:4d:0e:ed:6a:96:54:23:92:43:27:9a:1b:56:8a:eb:
16:de:c2:ec:00:dd:e2:73:f3:b4:03:b8:73:85:52:56:e7:d7:
d6:a1:0c:6e:0a:1d:1c:01:7f:de:7a:7b:0d:a6:a2:fe:06:6a:
69:ef:d8:d6:a7:10:0d:f3:eb:f4:5a:76:0a:2f:e8:22:07:35:
d0:6d:ce:e2:a1:29:b0:c6:2c:f9:3a:8e:9b:53:c7:d1:9b:5b:
3d:ff:c9:dc:26:36:46:42:73:e3:70:c8:f4:a3:b4:e8:2e:5f:
c5:11:19:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oJxOLkcJElnVS1Tnw/+JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNDM3MmY2MzkzMmJhN2ZlOGYxNjFiNTY0YjkzODYwNjE0
YTgwYmEwHhcNMjUwNjI4MTMwMTA4WhcNMjUwNjI5MTMwMTA4WjAzMTEwLwYDVQQD
EyhmYzk2ODg3NDZmYzUyZTQ4Mzk2OWJmNDYxZjdkMWExMDZlMTc0MTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDpLxLXT1NZnN8CdJWSn8+N8cgnn
RffHhOJ2zfKWEkz+mMwwJ0CMfSRdZpJcw80hlKYXytoGaTQ0sAqOtJafleIiropH
qXHyskM8NU7ZEXYGroVh1L0Uxa19riobI0WwsxJ1lmqJXZRqTAcfc445VHtZ+MbR
u/yk7ifQAL7LPwcfsY/2+RfJlkmrbb0fKt/TPsBWIFygFkNSuIt6JyD4/n0x/BhW
4E6UhYluNQ9uxJwF02zzFOHZK0YcxqQTp3p4SGLXY5lyxGHOZCui8PWyD+HRJRJJ
l/DKP5oP1cRtXOLSGT3Dkoz+1StmTCChOttHAzvFud41V/uBE70Q2+X4wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPyWiHRvxS5IOWm/Rh99GhBuF0FpMB8GA1UdIwQY
MBaAFJ5DcvY5Mrp/6PFhtWS5OGBhSoC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtOeTlqa3l1bl9vOFdHMVpMazRZR0ZLZ0xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8zOTY3YTYtNzlmMy00YWZmLWIzNGIt
YWUwZWE2NjQzYmJkLzEvbmtOeTlqa3l1bl9vOFdHMVpMazRZR0ZLZ0xvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi8zOTY3YTYtNzlmMy00YWZmLWIzNGItYWUwZWE2NjQzYmJk
LzEvbmtOeTlqa3l1bl9vOFdHMVpMazRZR0ZLZ0xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMruBY/Nx
3s7TfELzc2y10fR3cccfkbyjt586T/swhAH2zE20mwseLlRkUwcuYtdVXV1Szi4B
8eVQdWQ6c1ifktT1pNM092z0r5g0iqTjgNemWW0vLbNPJy2M57/irBd4Q9NkPWSR
IIES8tht50ZuIFPqUN5d6WVR8dHSnk9EfWKZLGBQJDyX8ExxJv+P6Lw1HHjRTQ7t
apZUI5JDJ5obVorrFt7C7ADd4nPztAO4c4VSVufX1qEMbgodHAF/3np7Daai/gZq
ae/Y1qcQDfPr9Fp2Ci/oIgc10G3O4qEpsMYs+TqOm1PH0ZtbPf/J3CY2RkJz43DI
9KO06C5fxREZWA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:40 2025 by rpki-client