Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
File: nkJ08Tm9Zpqu93TWUDso2ZZje70.mft (raw, json)
Hash identifier: bsWNYIkt+06RUOg7Dyizj2bMbnBaZPenwPnvqIyqysM=
Subject key identifier: 3E:07:34:16:BC:EC:32:F9:BD:8D:41:5D:8E:BE:40:CD:FD:68:6B:5F
Authority key identifier: 9E:42:74:F1:39:BD:66:9A:AE:F7:74:D6:50:3B:28:D9:96:63:7B:BD
Certificate issuer: /CN=9e4274f139bd669aaef774d6503b28d996637bbd
Certificate serial: 01988D6B4B71489DECB51D5F7F97C61FCF97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
Manifest number: 1625
Signing time: Sat 09 Aug 2025 06:01:15 +0000
Manifest this update: Sat 09 Aug 2025 06:01:15 +0000
Manifest next update: Sun 10 Aug 2025 06:01:15 +0000
Files and hashes: 1: j4Iq2zixx3mYag3J5EZ9oVMKB3Q.roa (hash: /Gl9L/9VfxRkLzepVwRrDXgXI17GQGF8IKxBmlZI9QI=)
2: nkJ08Tm9Zpqu93TWUDso2ZZje70.crl (hash: lxWvEtxTqTKggUs10oIrpQTYAcHiBjaHxkOUPfZEQU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6b:4b:71:48:9d:ec:b5:1d:5f:7f:97:c6:1f:cf:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4274f139bd669aaef774d6503b28d996637bbd
Validity
Not Before: Aug 9 06:01:15 2025 GMT
Not After : Aug 10 06:01:15 2025 GMT
Subject: CN=3e073416bcec32f9bd8d415d8ebe40cdfd686b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:be:38:3b:a4:a9:57:5c:a6:23:3b:04:75:cb:
bd:ec:5d:36:c8:62:76:12:05:0a:0e:e5:1c:7c:7e:
44:41:c4:32:16:4d:9f:4d:0c:e0:ed:cb:9d:9b:03:
d4:e3:d8:4f:1f:2b:12:49:61:d6:0b:fa:fb:ff:aa:
fa:89:43:96:12:4c:2f:a5:d0:66:ba:3e:1b:83:49:
97:c3:ae:9a:bf:36:3f:ec:c0:99:63:40:bd:e2:ad:
e5:80:1d:9b:2a:7b:74:46:cf:e0:7a:23:5a:12:9d:
1e:75:1f:cb:89:b5:fa:df:08:49:a9:fe:21:ad:91:
82:82:ee:d7:4e:c0:29:98:aa:b1:f3:29:5b:07:a7:
1e:6c:70:ea:90:c5:bf:e6:1e:54:a1:3d:1b:45:48:
fb:2f:54:28:8b:83:72:d7:1a:c7:21:f1:cc:24:3e:
c7:2b:f5:85:0a:8e:d4:92:92:82:45:0b:fd:11:aa:
dc:11:44:e5:23:6f:b0:4d:c8:52:62:66:58:86:ea:
6c:7f:44:8d:44:e2:64:3e:3c:3a:b2:7d:22:b0:56:
62:49:cb:7e:da:82:cf:10:92:f2:04:16:09:b3:e1:
72:a6:11:a6:37:3b:55:c3:66:7e:ef:66:a6:69:14:
61:c6:22:c5:e3:60:ff:cb:40:51:94:39:59:0b:9d:
31:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:07:34:16:BC:EC:32:F9:BD:8D:41:5D:8E:BE:40:CD:FD:68:6B:5F
X509v3 Authority Key Identifier:
keyid:9E:42:74:F1:39:BD:66:9A:AE:F7:74:D6:50:3B:28:D9:96:63:7B:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:73:04:63:37:10:2c:76:0a:23:b4:fa:48:e4:f0:64:9c:a5:
98:89:17:0b:10:4d:07:ce:ce:87:b9:ea:34:0b:ad:19:8d:c0:
ce:c0:1e:fb:55:60:18:b3:18:61:5a:fa:ee:73:16:66:b1:98:
f4:b1:4d:ce:ae:04:b8:9f:fc:20:98:c2:d8:1f:96:c6:8a:51:
a1:83:ea:e8:73:cc:50:5a:08:de:f7:95:6b:b1:45:b9:52:ed:
14:48:1f:99:50:25:e0:9d:aa:e7:fb:52:e2:99:fc:b6:6c:2f:
52:7f:77:66:03:6f:92:12:1b:fb:a1:67:81:7f:79:4b:c5:7b:
e6:94:a5:49:41:34:51:aa:ce:1d:95:fa:03:74:0c:25:d8:77:
32:ac:24:92:0a:b3:38:54:1b:12:1d:eb:89:10:4b:e7:1c:d2:
5b:4f:c3:33:6c:bb:cf:c0:e0:4a:8f:17:d9:a5:9b:6b:5e:20:
24:f9:df:26:a2:11:53:47:56:29:8d:4b:f3:cc:6c:a1:bf:15:
bd:38:67:fc:3a:76:f8:4e:64:f8:96:96:54:d1:8d:19:6a:b6:
59:b6:1b:e4:4d:4d:7e:53:38:05:07:0c:c4:08:2d:81:6f:ea:
5b:fa:b2:e6:4e:28:d7:90:7c:94:ad:a7:98:26:02:ba:93:d4:
28:23:38:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:44:34 2025 by rpki-client