Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
File: nkQennBa2j-cHoJ80nbb0JdIdgg.mft (raw, json)
Hash identifier: dOIVMW6zXYtiqNl902vnXEUFxLXnDL+TElyeaKcX6TQ=
Subject key identifier: D4:4B:EE:91:83:E1:5C:27:EE:0C:A6:CD:85:AD:82:7F:58:1B:8D:2C
Authority key identifier: 9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
Certificate issuer: /CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Certificate serial: 01988C218FE8DE733F8BD4015973CB803D97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
Manifest number: 0FA2
Signing time: Sat 09 Aug 2025 00:01:06 +0000
Manifest this update: Sat 09 Aug 2025 00:01:06 +0000
Manifest next update: Sun 10 Aug 2025 00:01:06 +0000
Files and hashes: 1: 7ySzESdDI-Eg0Y6xfFTDZOEQmZk.roa (hash: pTSWdDbQ1VFptqQJI8HP8UxKCCjXnA4njHY5srW26VY=)
2: BJvFiCQhGiEcXR3ndqL7T5BbDaU.roa (hash: Z+0E4ULnb/cJktOfFSiZcNmisROmxseIx6dqsZlDt4s=)
3: bKdFeyVH_r7HsHfe9GqBe_UUrg8.roa (hash: vnPbAxKFKizMFdUh2dDG9y/SGopR40zinaRVaCXXct4=)
4: nkQennBa2j-cHoJ80nbb0JdIdgg.crl (hash: vkVCiYiGhS1yul7lEya0qt3EqZ5zR6upwPOG/B+y6wA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:21:8f:e8:de:73:3f:8b:d4:01:59:73:cb:80:3d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Validity
Not Before: Aug 9 00:01:06 2025 GMT
Not After : Aug 10 00:01:06 2025 GMT
Subject: CN=d44bee9183e15c27ee0ca6cd85ad827f581b8d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0e:ec:2f:56:f3:a9:0a:5d:4e:b9:70:79:2f:
8b:cb:0b:95:a9:41:83:2c:86:6c:95:f8:9d:64:17:
df:ed:35:ac:bf:e5:e8:57:c7:de:db:68:a6:e8:48:
df:b8:16:e0:d0:42:ec:9b:fb:bf:26:df:62:ff:72:
c1:8d:e7:3e:1d:fa:77:c6:23:cc:8b:1c:80:c5:62:
68:99:75:e2:00:37:ba:34:c1:60:b1:bb:a3:6c:a1:
15:14:7d:01:cd:0f:d5:b5:1a:ab:a6:ea:63:10:7b:
c5:6e:39:b3:1a:9a:28:67:8f:a9:a9:1e:0c:2d:10:
7e:3e:32:27:34:aa:58:5f:05:44:b1:0e:f6:c1:ed:
20:eb:0f:da:6f:dd:22:d8:b8:e1:f6:c0:a5:aa:63:
ea:e1:74:ad:f8:c3:91:a3:01:04:68:ca:9f:c5:d4:
ca:b7:fb:6b:37:ab:b6:ac:51:d8:45:71:b0:39:0c:
7b:a7:05:5d:93:f0:62:0a:60:a8:dc:6d:6c:49:0a:
0f:28:3d:1b:45:e7:22:7e:d9:9e:29:e9:0a:e9:cf:
94:b1:e5:22:81:a6:c9:2c:33:94:6f:f6:44:d4:0e:
81:5b:bc:11:86:12:77:26:37:c8:b7:83:5f:ce:f2:
73:65:44:87:14:e0:3b:69:89:92:95:c6:eb:e2:0a:
70:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4B:EE:91:83:E1:5C:27:EE:0C:A6:CD:85:AD:82:7F:58:1B:8D:2C
X509v3 Authority Key Identifier:
keyid:9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:c7:f7:6b:d7:53:ca:d4:ae:6b:15:4b:7d:7f:dc:1d:84:b1:
f1:40:72:d5:f7:54:a6:6d:30:f2:bc:5c:94:8a:17:c8:1a:20:
0f:82:65:f8:5a:88:88:c8:63:43:d3:52:9f:66:b8:44:b1:14:
e2:0f:52:1f:b6:2b:26:6a:c8:ec:c5:c2:41:ae:d7:76:ec:f7:
1b:a9:91:03:66:27:d7:20:26:43:85:af:87:8e:0f:e9:54:c7:
90:be:5b:73:f9:4d:52:50:53:ef:33:30:9b:ba:8d:1b:2b:a1:
f4:0e:02:d0:66:28:6b:e7:54:19:8a:2e:11:3a:07:23:7b:2d:
fd:c5:69:09:1a:40:f9:9c:93:18:c3:cf:78:41:b5:f8:95:71:
1c:ce:4e:45:f5:22:f7:3e:7f:80:e4:b0:4c:d4:14:58:90:44:
ed:83:a1:0d:4d:02:f9:57:22:15:02:2a:0e:c7:83:97:b2:77:
d3:2e:76:c3:a0:51:d0:53:c9:35:5a:93:ea:5c:63:ee:88:30:
39:51:06:ee:e2:4c:ca:11:9b:a0:38:42:4c:42:9a:97:4c:2b:
cb:0f:ac:fe:b4:eb:57:b2:80:82:ad:80:f0:59:32:5f:78:7c:
d0:ff:c3:82:ab:d0:c1:22:43:70:f4:9e:0e:42:f5:33:eb:75:
31:9a:d2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:35:47 2025 by rpki-client