Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
File: nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft (raw, json)
Hash identifier: UMKtGPObHGPBHfVcPmwmWG8Tz5bPMW980upAc09kZ0s=
Subject key identifier: 23:23:C5:46:4C:88:23:58:EA:AF:1B:D9:1A:F6:49:3F:57:94:38:23
Authority key identifier: 9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
Certificate issuer: /CN=9e42ca46688a837b575234ce6a1a326587d6c204
Certificate serial: 01977640C2A63AF289456C56E21673001830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
Manifest number: 1037
Signing time: Mon 16 Jun 2025 01:00:44 +0000
Manifest this update: Mon 16 Jun 2025 01:00:44 +0000
Manifest next update: Tue 17 Jun 2025 01:00:44 +0000
Files and hashes: 1: 2sz7XXaQR044rc-q4fD0WIzUxYQ.roa (hash: pi07prhyU4hZ/cG1dB+HetMAgpuPmtLhNCb2plULwQE=)
2: D2HSpId2VYXPjhlDPg7eWeC18Pw.roa (hash: UXPvVbmh0MzKjV4UFrcu58vEq8RZqO0eg1YthASI72I=)
3: UnUG9yNZwHFtxPW6hAKjubIbusM.roa (hash: xsmRUWemFAWw0xMxDEpqyiLbWsqfijBX0AOIJJiaM5U=)
4: nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl (hash: /N6p/Y8vqh/Kaex6eQgEktnelUcUkYjRyh540q2IGxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:40:c2:a6:3a:f2:89:45:6c:56:e2:16:73:00:18:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e42ca46688a837b575234ce6a1a326587d6c204
Validity
Not Before: Jun 16 01:00:44 2025 GMT
Not After : Jun 17 01:00:44 2025 GMT
Subject: CN=2323c5464c882358eaaf1bd91af6493f57943823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c0:52:fc:be:d9:1e:d2:f8:a2:da:f8:91:e9:
4e:74:8a:32:16:c7:50:8f:b3:60:0e:9a:34:9c:50:
36:8a:c5:ee:14:28:cb:fc:59:63:f7:e8:37:de:c6:
cf:1b:c1:7f:f0:ea:d6:e8:29:5f:a0:4e:de:94:17:
1d:21:bd:7e:d4:66:11:8a:3d:bd:7d:b6:94:86:4e:
25:6d:c3:a5:06:4d:a4:6f:0f:c5:0b:fa:f9:17:af:
78:af:9a:62:9e:ef:2d:15:cf:23:fd:ce:2c:17:f8:
32:66:53:0c:b1:b0:8d:fa:73:2c:c3:6a:9f:4f:57:
43:89:b7:d3:d6:c2:65:9a:c8:0a:f1:f7:e3:dd:1d:
ab:b3:40:81:8e:42:5b:d2:11:3d:b6:4f:46:a3:e3:
39:71:78:98:c9:0c:11:0b:23:a9:41:73:1c:b3:a8:
d9:9a:3a:78:18:3b:84:82:fd:a5:fd:cd:0d:cd:94:
ce:fd:6e:98:a8:46:eb:39:94:05:66:38:f9:d7:7b:
7f:87:48:e2:17:26:0c:b5:f7:28:2f:91:b6:c6:fa:
3d:c2:6a:42:c5:42:ee:fb:ea:3c:5a:8a:a1:2e:98:
1c:5a:a4:f3:ae:be:bb:ea:cb:9d:8c:aa:59:b4:63:
e2:56:8a:4e:02:9b:fa:e7:44:c9:ba:78:0c:d0:2c:
c5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:23:C5:46:4C:88:23:58:EA:AF:1B:D9:1A:F6:49:3F:57:94:38:23
X509v3 Authority Key Identifier:
keyid:9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:5a:82:78:f7:0e:7d:8a:72:55:64:37:95:44:f3:3b:3c:7c:
46:ac:a5:98:d2:ed:83:f6:22:bf:88:4f:b1:28:e1:c4:50:cc:
3c:d6:f8:74:44:5b:95:79:f7:7a:e1:95:2b:13:df:ee:21:e5:
2b:03:d6:c7:dc:b3:e3:16:c7:9d:66:ff:88:bc:6b:38:4e:06:
9d:12:1a:2a:21:1c:77:45:32:a5:3d:1c:6e:20:35:e4:0e:25:
57:f6:76:38:2b:59:55:69:01:78:d6:cb:3e:78:08:1f:ef:3e:
f5:5b:30:c3:db:2f:09:7a:e7:19:fe:32:79:9a:da:a8:2e:4e:
02:26:a4:43:71:f0:a1:b2:9b:ca:98:07:7c:d3:8e:7d:f2:5b:
e6:43:63:67:ac:9a:bf:46:27:be:3f:ae:25:e1:ea:b5:dd:06:
56:a0:79:b1:13:46:06:82:fe:8e:f1:63:2d:27:c9:0e:4c:e1:
fd:36:62:79:34:1b:04:db:5d:e1:2e:9d:c7:5c:14:1d:a2:c1:
d4:5f:f2:14:c0:ac:dd:e5:a2:c6:50:1a:c4:b9:8f:40:55:2e:
35:b7:f1:31:2e:4b:1c:97:72:32:83:94:83:ba:09:f2:60:31:
16:58:30:c2:ae:2b:60:22:8a:54:8e:97:a5:3c:75:b6:2a:eb:
12:21:f6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:07:06 2025 by rpki-client