Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
File: nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft (raw, json)
Hash identifier: 27ztOVqe/Lr6idzyWYP5MF+xaMXh5vFVBxUg+7Gs5zM=
Subject key identifier: E3:F8:32:7B:12:69:1A:A4:85:4A:3C:EA:74:79:94:A3:B5:E2:1D:FF
Authority key identifier: 9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
Certificate issuer: /CN=9e42ca46688a837b575234ce6a1a326587d6c204
Certificate serial: 0198868D5AA9659EB52904E225248BCD5FFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
Manifest number: 10C4
Signing time: Thu 07 Aug 2025 22:01:07 +0000
Manifest this update: Thu 07 Aug 2025 22:01:07 +0000
Manifest next update: Fri 08 Aug 2025 22:01:07 +0000
Files and hashes: 1: 2sz7XXaQR044rc-q4fD0WIzUxYQ.roa (hash: pi07prhyU4hZ/cG1dB+HetMAgpuPmtLhNCb2plULwQE=)
2: D2HSpId2VYXPjhlDPg7eWeC18Pw.roa (hash: UXPvVbmh0MzKjV4UFrcu58vEq8RZqO0eg1YthASI72I=)
3: UnUG9yNZwHFtxPW6hAKjubIbusM.roa (hash: xsmRUWemFAWw0xMxDEpqyiLbWsqfijBX0AOIJJiaM5U=)
4: nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl (hash: OzSJaukuF1KzAoPsmbIxILtZ23STgq5wp6l0bLBIITA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:8d:5a:a9:65:9e:b5:29:04:e2:25:24:8b:cd:5f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e42ca46688a837b575234ce6a1a326587d6c204
Validity
Not Before: Aug 7 22:01:07 2025 GMT
Not After : Aug 8 22:01:07 2025 GMT
Subject: CN=e3f8327b12691aa4854a3cea747994a3b5e21dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:98:49:b4:c0:3f:10:a9:9f:ca:de:0c:66:85:
5f:95:3d:c3:a3:59:52:ee:52:1d:7f:52:99:13:e6:
3f:0e:08:32:bb:aa:25:9b:ba:13:65:60:16:8a:43:
f5:ed:f8:51:d5:fd:e1:cc:28:d2:cc:6c:7b:4e:3e:
13:2e:e7:b1:a4:f1:00:e8:90:4e:68:0d:b4:03:72:
6f:0e:01:6f:ab:a3:62:80:8b:d1:90:93:e4:42:f2:
7f:3f:66:46:5c:22:23:06:60:db:f9:60:e6:d3:18:
04:df:81:10:bd:f3:1b:1c:46:d8:c0:e6:c1:db:e7:
5f:da:ff:6d:12:8c:56:2d:1f:98:a3:50:a6:c8:a3:
bf:21:22:45:73:41:36:ff:c0:79:a0:c8:a6:4f:4f:
5b:ef:2f:40:14:38:9f:0b:d0:8e:c6:9b:07:84:3b:
f8:71:0f:a0:38:34:0d:13:c4:e5:21:88:cb:bd:9e:
b6:21:02:b6:ba:0e:6b:f2:6a:ae:64:88:db:ce:21:
1c:7c:10:4c:c0:0a:f3:1c:a8:3d:79:27:5a:f7:a0:
3e:d7:b1:4c:15:c1:2f:7b:8d:bd:1f:31:39:c9:ec:
99:71:09:49:c6:02:1b:f6:0c:7d:25:56:2b:3c:6e:
96:0a:75:e1:ed:a9:27:71:31:a3:da:3b:a1:2d:12:
ae:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F8:32:7B:12:69:1A:A4:85:4A:3C:EA:74:79:94:A3:B5:E2:1D:FF
X509v3 Authority Key Identifier:
keyid:9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c1:1c:a5:15:0f:3e:2b:82:24:87:51:ab:7f:a7:18:18:4f:
08:3f:15:9f:52:2f:10:e4:f9:6a:f1:45:07:9d:80:bd:6d:6d:
2d:9f:fd:5c:7e:fc:fb:7e:d6:b2:21:f4:3b:b4:0e:5e:db:e7:
5c:c5:73:49:e4:8d:83:16:15:e0:69:20:9f:b2:6e:37:49:b9:
53:70:8f:3a:28:e1:4f:0e:0c:09:aa:4b:90:3d:f4:60:8a:9b:
19:77:af:39:5d:68:ed:83:38:99:15:51:24:70:f6:c2:02:51:
1e:df:a9:5c:65:ca:16:15:c4:6d:b7:78:b7:22:30:98:11:89:
ab:99:32:ec:1c:a2:f0:ce:10:65:ea:7c:cc:4b:30:7c:53:87:
68:47:76:d6:99:39:44:6e:8b:f7:3a:ed:cf:a7:25:f3:ec:ea:
d6:b0:5d:8b:3f:26:28:71:fc:b0:31:44:94:d2:6c:e5:80:a3:
96:2f:d3:3e:df:72:58:b7:10:e0:e2:c1:dd:76:95:4f:2b:2e:
fd:41:a5:0e:46:6f:84:48:2c:d8:ff:66:9c:28:59:2d:98:39:
46:0b:5f:70:98:ac:08:7b:9c:03:9e:4e:b4:e4:2c:01:37:28:
90:76:e1:34:43:05:38:2d:6e:94:34:d3:89:39:1c:8b:28:45:
1b:9b:2b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:07:11 2025 by rpki-client