Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
File: nkQennBa2j-cHoJ80nbb0JdIdgg.mft (raw, json)
Hash identifier: bdLj2U2dGs2ZtYxSnwQ+XbRgYwU59dLp716QwW8ccoU=
Subject key identifier: 91:53:83:79:17:70:5C:49:50:8D:34:7A:A5:20:63:74:75:BE:A7:BD
Authority key identifier: 9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
Certificate issuer: /CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Certificate serial: 01976C626A011AB4769C6634639E2EB55B49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
Manifest number: 0F0D
Signing time: Sat 14 Jun 2025 03:01:18 +0000
Manifest this update: Sat 14 Jun 2025 03:01:18 +0000
Manifest next update: Sun 15 Jun 2025 03:01:18 +0000
Files and hashes: 1: 7ySzESdDI-Eg0Y6xfFTDZOEQmZk.roa (hash: pTSWdDbQ1VFptqQJI8HP8UxKCCjXnA4njHY5srW26VY=)
2: BJvFiCQhGiEcXR3ndqL7T5BbDaU.roa (hash: Z+0E4ULnb/cJktOfFSiZcNmisROmxseIx6dqsZlDt4s=)
3: bKdFeyVH_r7HsHfe9GqBe_UUrg8.roa (hash: vnPbAxKFKizMFdUh2dDG9y/SGopR40zinaRVaCXXct4=)
4: nkQennBa2j-cHoJ80nbb0JdIdgg.crl (hash: XoB97N1VruWBGLFdWsBI1K+aB6b3LH6ws1iX+IKvJbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:6a:01:1a:b4:76:9c:66:34:63:9e:2e:b5:5b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Validity
Not Before: Jun 14 03:01:18 2025 GMT
Not After : Jun 15 03:01:18 2025 GMT
Subject: CN=9153837917705c49508d347aa520637475bea7bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:48:2f:37:64:60:58:1e:46:78:67:01:7f:f9:
ce:bb:9a:34:f1:a4:84:fc:11:a7:aa:b7:4d:d6:0a:
e1:7e:64:06:68:0e:0e:c1:df:af:9c:cd:ec:0d:ff:
4d:f7:f9:68:ba:ce:b4:82:ce:56:cd:33:74:24:80:
89:95:ea:0e:7c:34:bc:5b:c0:87:08:0a:90:c6:a6:
38:04:ca:0d:07:c0:41:1a:61:ac:fc:44:a1:bf:56:
e7:8c:e9:bd:6a:0c:c0:a2:2c:da:5c:15:4d:db:5f:
12:73:fc:2d:df:fb:f3:fc:30:2f:f4:e3:6f:f5:75:
62:22:80:4a:bd:d0:bf:50:3c:82:44:5c:6f:24:3a:
f8:9d:db:cd:08:7b:7d:2b:ae:51:4a:78:65:00:36:
7f:3f:00:69:bc:b5:67:0f:03:8d:b2:c5:59:db:ef:
40:72:50:cb:78:e9:f2:c7:dd:b0:12:1c:f8:92:95:
bd:93:a8:2b:1f:9b:7d:2f:9c:c4:0e:0c:da:f0:9f:
8f:bf:5a:fd:df:f8:9d:bf:4c:e6:f6:11:31:35:d8:
05:a1:93:61:c0:72:0b:86:32:da:7e:63:c9:5c:90:
e9:6a:16:f2:de:da:12:7f:ab:fa:33:15:19:4a:d9:
0c:7a:f5:24:f5:87:4a:be:4a:91:02:88:8b:e5:52:
6e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:53:83:79:17:70:5C:49:50:8D:34:7A:A5:20:63:74:75:BE:A7:BD
X509v3 Authority Key Identifier:
keyid:9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:cf:7a:3f:4e:82:f2:27:b9:e3:da:8c:5a:47:44:68:dc:ab:
5c:91:a7:7a:12:32:69:00:8c:2a:e2:9f:c6:7c:84:f2:4c:69:
86:f6:76:e9:67:c8:56:dc:2d:5c:9b:4a:39:d1:59:9c:63:12:
1b:02:55:61:97:96:be:91:5f:4e:4f:14:da:ae:40:e9:43:ce:
6f:06:e6:bb:3c:5a:09:34:a1:d3:3e:e8:b1:2a:d7:d3:fb:11:
84:e3:b4:44:66:88:cb:60:d1:cf:f8:85:b4:08:40:73:a0:27:
b4:f9:aa:3e:d4:8d:00:84:76:78:2a:1e:1c:38:7c:b3:53:6e:
43:22:eb:b4:fa:f7:ae:bd:79:b4:65:1c:70:b9:bb:c6:5c:bb:
82:97:61:11:13:c4:ea:b4:e4:1d:cb:db:71:d6:6c:76:a2:54:
bc:41:9e:9a:7d:32:45:3b:80:f5:d6:7b:d2:53:1e:f9:8e:61:
ac:cd:77:6b:c2:94:9f:e0:1b:90:83:c5:d4:6d:b1:8e:b0:ba:
6c:02:a9:ea:16:4a:bf:c9:87:5c:57:3a:e5:bb:47:2b:fe:6e:
6a:20:ae:2b:a9:a2:17:72:f5:f6:7e:e1:42:c4:59:c9:c6:ea:
f9:2b:f4:0b:db:ad:4d:f1:30:2e:97:f8:05:df:c2:5e:37:6d:
16:cd:af:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:15:26 2025 by rpki-client