Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
File: nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft (raw, json)
Hash identifier: Y3snm/y434VYi4RJbmDUuMe0YPo5NotwtXFKg/WLJGA=
Subject key identifier: 78:9F:0C:43:AB:58:39:DE:7F:83:2A:F5:4F:D0:41:94:B0:C9:80:8E
Authority key identifier: 9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C
Certificate issuer: /CN=9e481c098a649265291d402f5f02fc43dda0fc8c
Certificate serial: 01978C91438DE2383E82C9BFC0635BAB980C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
Manifest number: 0898
Signing time: Fri 20 Jun 2025 09:00:19 +0000
Manifest this update: Fri 20 Jun 2025 09:00:19 +0000
Manifest next update: Sat 21 Jun 2025 09:00:19 +0000
Files and hashes: 1: 1-Z1UOZXHudz9pMndWhDGiE0wZos.roa (hash: j553aDGXg+Mu/H/OVwEn4NDDiMjFpdhHQa+Xk6WS3jQ=)
2: nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl (hash: NYG++u4FGYj2qCfna5GobbLpvmSOzCYPVslJPbF0Gus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 04:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:91:43:8d:e2:38:3e:82:c9:bf:c0:63:5b:ab:98:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e481c098a649265291d402f5f02fc43dda0fc8c
Validity
Not Before: Jun 20 09:00:19 2025 GMT
Not After : Jun 21 09:00:19 2025 GMT
Subject: CN=789f0c43ab5839de7f832af54fd04194b0c9808e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f2:4c:d6:49:e0:7d:57:0c:fd:21:5a:cb:b4:
70:f1:ab:3b:e2:f0:72:73:2a:f2:f1:c2:73:18:35:
48:7d:79:70:6a:38:4e:f6:45:36:8e:c3:92:6b:3c:
b6:6a:9e:d9:1b:d4:88:b5:e0:26:3e:79:cc:d6:3d:
4d:16:88:fd:04:30:11:16:d9:e2:bb:11:18:d8:c4:
98:29:97:d8:a4:18:07:92:72:da:43:c9:a4:09:9e:
eb:85:0a:97:fa:3f:39:a0:3a:71:da:46:ed:b2:e0:
6d:1a:0d:58:1c:28:c2:8c:a1:02:4c:3a:d5:33:fe:
4e:08:82:f8:70:46:2e:0f:e9:ed:8b:9b:b1:aa:6a:
8b:ce:e2:d4:d2:54:dd:92:fb:6a:95:e0:72:55:ee:
6d:75:e6:31:e0:5a:5a:20:4c:27:6a:40:fa:7e:b9:
41:56:30:28:79:23:1c:c2:0b:54:d0:6e:04:f2:88:
35:a1:25:0b:c3:aa:f5:b9:ea:2c:91:7e:52:50:00:
9c:11:8c:fe:2c:56:73:b0:c4:1a:e6:a6:be:3d:3f:
97:98:43:60:36:7e:89:a5:9f:f0:aa:8e:38:a5:05:
a0:b2:8d:b8:0c:58:bc:af:1b:a1:71:eb:82:c2:c5:
50:c2:eb:45:d7:a7:68:14:f6:4e:46:29:04:ee:31:
5c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9F:0C:43:AB:58:39:DE:7F:83:2A:F5:4F:D0:41:94:B0:C9:80:8E
X509v3 Authority Key Identifier:
keyid:9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:60:e3:d9:9b:f3:2a:87:58:b4:5b:1f:2b:94:32:54:25:8a:
ea:df:69:99:89:93:16:47:22:e9:99:6e:b6:83:e9:97:20:c6:
3e:84:ba:8b:c4:8d:dc:bd:53:20:30:db:28:dc:62:d0:8b:ff:
21:64:4f:bb:c9:34:98:e9:a0:2e:ff:74:1d:9b:a5:b4:1a:31:
08:ef:ed:84:8f:1d:99:56:fc:b1:47:8f:66:f2:70:6f:6d:94:
4e:a9:4e:4b:fc:3d:f3:6f:1c:0d:3f:31:cd:19:05:18:9d:75:
e6:91:30:36:90:29:00:f9:05:9c:a3:4c:cd:54:a1:3d:21:bd:
e9:2a:a5:31:62:6f:7b:57:d6:93:6d:fe:3b:dc:ec:41:a9:1f:
50:26:70:fc:fc:90:de:80:32:71:04:7e:8c:d1:1d:43:4c:21:
46:da:09:8b:76:2d:16:d7:8c:8d:c5:b0:08:5f:75:15:a0:ef:
18:dc:23:fa:04:58:b4:9b:33:20:49:d3:20:fb:61:25:cc:31:
fd:32:8e:3c:56:80:98:88:e0:88:1e:ad:ae:06:68:cd:c1:77:
5c:4a:a3:e3:cb:c8:44:26:52:e9:ba:8d:39:21:12:06:59:83:
d1:e2:51:8f:4a:c8:05:03:5a:85:ca:3c:50:b1:f3:2b:ac:83:
17:02:2b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 15:17:42 2025 by rpki-client