Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
File: nkz1EkerV_Um84ByWaeNKwJZBgM.mft (raw, json)
Hash identifier: LNNwm3oj2I1YbL9uJfEOw2i2fh7PJ8qBgk1oJ5qjeMA=
Subject key identifier: 87:BE:38:4F:63:58:B6:D7:58:69:3A:8E:C7:04:5B:A0:FC:20:30:64
Authority key identifier: 9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
Certificate issuer: /CN=9e4cf51247ab57f526f3807259a78d2b02590603
Certificate serial: 01976C61F4428296A7C92B919C5BC9ECAB0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 03:00:48 +0000
Manifest this update: Sat 14 Jun 2025 03:00:48 +0000
Manifest next update: Sun 15 Jun 2025 03:00:48 +0000
Files and hashes: 1: bUexMEG5KZ30YS3AFv2LLIm5VUk.roa (hash: 73jcglvdcT9moQ9QgtlZoUeROl6dwy33TWezKXRJ6GM=)
2: nkz1EkerV_Um84ByWaeNKwJZBgM.crl (hash: VGczgFOOq8wrc1P18Khw1YkpHTB22GiNyhU2wtsY48Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:f4:42:82:96:a7:c9:2b:91:9c:5b:c9:ec:ab:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4cf51247ab57f526f3807259a78d2b02590603
Validity
Not Before: Jun 14 03:00:48 2025 GMT
Not After : Jun 15 03:00:48 2025 GMT
Subject: CN=87be384f6358b6d758693a8ec7045ba0fc203064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:74:58:fa:35:39:38:33:62:29:8f:40:75:0e:
71:d8:76:c2:22:5a:7c:76:42:6d:97:83:57:55:ef:
7a:20:ea:5f:45:b5:28:1e:b8:16:6a:35:e4:a3:d1:
c9:1d:87:3e:06:73:08:85:1a:aa:46:2a:4d:75:f7:
e2:ad:8b:a5:f1:35:b9:3e:f4:60:04:cc:66:4a:21:
43:26:ec:e8:e0:33:3d:32:3e:b4:b5:33:f4:a9:86:
c7:9d:6b:b1:dc:50:b0:52:ae:de:af:c1:46:14:a2:
34:fb:d9:14:0b:73:98:56:cf:d2:13:ff:1b:30:ce:
79:99:b6:e7:92:ca:d1:a6:b9:25:9a:ce:25:fa:70:
6a:a1:32:e7:c9:fd:5a:37:ea:fb:09:7b:d7:db:80:
ea:7f:2b:dd:2f:1d:06:89:71:fd:17:02:01:b3:3c:
86:34:14:a0:49:53:b3:32:21:9a:ba:85:0c:66:05:
66:0b:d3:b2:43:31:ec:62:e0:55:6c:44:d3:83:8c:
30:14:18:62:57:98:dd:f9:08:53:86:81:e5:ab:f9:
97:65:51:fa:68:82:f0:17:9d:17:c2:b8:c2:c7:ce:
2d:62:62:64:9e:59:28:47:3d:99:b2:c7:7e:3f:fc:
6a:a0:bd:db:2b:50:c9:77:40:d1:40:e8:2d:3e:48:
55:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:BE:38:4F:63:58:B6:D7:58:69:3A:8E:C7:04:5B:A0:FC:20:30:64
X509v3 Authority Key Identifier:
keyid:9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:92:99:92:d0:84:02:8e:8b:c8:8a:e6:0a:6b:44:9a:65:e0:
0a:13:ef:c6:66:3f:9c:73:9a:4b:a2:12:ac:a6:f3:48:6a:26:
af:f9:88:a2:88:6b:d1:3c:4d:84:25:55:96:2a:8c:b9:e7:71:
eb:ea:a7:78:d1:82:3e:46:31:ab:c0:c8:d9:63:29:ad:03:79:
44:45:14:55:1d:e8:0b:8f:e8:e4:95:ab:51:f6:b6:12:b5:63:
8e:0b:7c:29:aa:0b:34:a0:5f:d0:bb:d4:ba:fa:71:3b:a7:45:
b3:66:70:1e:5d:ad:e3:ea:cf:9f:09:0e:5a:4e:65:b3:44:fe:
a8:02:82:6b:6c:ca:70:b9:03:63:26:45:a0:1b:93:c7:3f:e6:
be:fd:98:99:fa:cb:9a:3e:08:72:1a:b6:c2:5e:cd:b0:28:cb:
c9:23:d1:f2:99:c2:fa:b6:dd:43:98:ed:b0:d5:62:73:4d:59:
2f:3d:9b:b5:47:73:fd:19:73:70:72:52:1e:b2:29:57:21:29:
4b:a2:bd:b0:7b:0f:b8:6a:b2:d3:8d:8c:d4:94:19:68:30:f1:
af:1a:c9:77:cc:23:0b:3d:46:94:9b:9c:09:ba:c8:d1:fa:97:
2a:67:50:2a:e5:38:f7:b3:16:74:37:14:76:e9:4a:95:99:45:
39:fa:f7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:19:26 2025 by rpki-client