Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
File: nkWapGAr_6LSZQumaBhFjIn8RYI.mft (raw, json)
Hash identifier: 4wXzdJiq7meV6Ax6g7xqb5s+cQqg1eUlDy+2cipSzwc=
Subject key identifier: 88:D9:57:19:CD:08:70:49:2C:7C:AC:58:96:CE:E6:C9:44:B7:64:A7
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 0197748946D88C90402D31149445F52C5114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
Manifest number: 15A6
Signing time: Sun 15 Jun 2025 17:00:42 +0000
Manifest this update: Sun 15 Jun 2025 17:00:42 +0000
Manifest next update: Mon 16 Jun 2025 17:00:42 +0000
Files and hashes: 1: 1ZViwBwJWukG7x8H8vOJHhjrl20.roa (hash: +aEN4SwtP07CGGNGf2sl0Ng37swdYqF9I3PWCaVNvKY=)
2: 5l7_YEP-iDlpzT3jJy_WcDYbdy0.roa (hash: T/EZxm6KOUDbBcP5LoW3SMWMDqFKAPr6qMUb20NyovQ=)
3: BvpS751y8vUXuWqwmfzJfn2h-Rk.roa (hash: KJ/6LdVihbuD7E6JKoxKY+vTCb8HPS492uKXFwv4y1I=)
4: EKZDCBFSzTnUZ-1EZg9n8EZ8oqc.roa (hash: xYPqHPCAO/XyHDtjaojjFFvTaUnv2cV0xvZkEmEN/Lc=)
5: Q8hPg5UjvdR5qe3RUKGr181TIsc.roa (hash: HQ9muwIQ/VGCuDJxXs8tCzXWThyvXdcPzV4TeZjGo30=)
6: _GnprUL9RiOSINIgt8MCDfPJSj8.roa (hash: Yrrm+IlBuBC0Z/pDmaIlkiimbDJKKuFiMeYQ+bxwX6M=)
7: _HwnYOx8loE1jVo8nfivar_tdig.roa (hash: QhMEIV71/g1ejlZrBi4D/Eo8F39EvYYIljovFNhdaUA=)
8: nkWapGAr_6LSZQumaBhFjIn8RYI.crl (hash: mq/Abu7MtiYpz1h9M9exxows0a2OLgGIKsZbQpwukHU=)
9: wRQWlx5VTlfOioAPy2QXY4Uk2Xg.roa (hash: rPHBxj4mRhTnPsN1GhR6ZZjmr/wkKhGGUErpiW2+PN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:89:46:d8:8c:90:40:2d:31:14:94:45:f5:2c:51:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Jun 15 17:00:42 2025 GMT
Not After : Jun 16 17:00:42 2025 GMT
Subject: CN=88d95719cd0870492c7cac5896cee6c944b764a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:32:73:b9:ec:0d:29:31:1d:1b:5a:02:5e:3e:
61:48:69:44:eb:d1:2b:17:58:ec:26:35:2f:e6:21:
b6:24:b2:cd:7b:43:7c:e2:56:6a:3e:cc:42:b9:63:
3f:04:9a:6d:0f:39:22:ad:56:cd:1b:87:d7:a5:de:
a4:b9:2c:ce:30:9a:76:81:fc:f7:9c:b7:60:9a:13:
37:cd:8c:d7:cd:71:5c:98:df:a0:16:81:fd:9e:6a:
35:80:97:ce:4a:1f:e7:04:05:6e:4b:51:d2:95:c2:
aa:68:45:da:7b:0f:66:de:70:5a:fb:6c:b6:8e:c4:
b6:9e:51:0f:52:c2:41:7b:d7:ba:1e:56:85:b2:41:
9c:66:33:68:00:0f:aa:cd:b7:ce:4d:dd:a3:4b:68:
be:a8:8e:36:a0:e5:05:2b:e9:97:23:2b:d3:11:3b:
5a:a0:3b:0b:50:57:2c:c4:7e:19:ef:06:1e:bc:c7:
0c:be:4e:9e:b9:25:fc:bc:b3:ea:d7:c7:47:8f:f1:
8a:ed:7e:e0:27:62:c4:fb:0e:23:57:ab:9b:38:9d:
9d:bd:44:cc:5a:18:9b:cd:66:44:0d:5c:71:cc:c9:
13:fd:c6:82:2c:da:8e:80:c5:f9:87:b9:ae:77:58:
e2:f3:1e:3a:4a:a9:da:9c:ab:3d:17:26:74:e4:c7:
2a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D9:57:19:CD:08:70:49:2C:7C:AC:58:96:CE:E6:C9:44:B7:64:A7
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:0a:55:1f:f8:6a:5d:42:02:2f:e7:af:48:82:64:47:7f:1c:
05:a1:c2:f4:b1:76:de:95:8e:c3:1d:88:e9:82:b5:1c:e6:7a:
d1:2d:7b:e8:c7:dc:19:af:db:c3:fc:f5:5b:ce:06:48:c9:d5:
1d:ed:90:79:1b:b5:14:6c:93:5b:7a:60:a7:86:33:bd:3e:04:
d4:0c:11:c5:f5:21:be:ef:b0:e7:eb:ec:54:10:12:58:57:62:
5a:4b:0b:72:8a:21:be:6c:19:31:fa:8e:1f:89:d9:c1:f3:91:
c2:01:89:28:89:8f:a8:50:45:11:93:25:e3:f4:ea:fb:a9:9d:
8a:aa:e2:73:7f:76:b1:85:a7:40:bf:93:cc:21:1d:f4:cb:a6:
89:a1:c2:e5:c9:cc:c7:25:10:89:70:80:0c:33:24:ea:ba:4a:
26:eb:bf:c6:86:9f:1b:79:bc:d8:77:bf:7d:0b:d8:f4:3d:7a:
ed:f2:98:69:c6:82:78:5e:ee:87:7f:ed:16:69:f0:4f:ea:d9:
85:c7:ec:e2:6a:4e:62:b5:ba:21:3e:d4:bb:b5:53:2a:6c:1b:
81:a3:ec:23:95:cd:36:05:a6:45:3e:c4:de:90:1f:a7:17:37:
bf:a9:8f:87:82:b0:b2:85:0d:7a:b3:dd:15:cb:01:54:90:23:
3f:99:04:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:17:34 2025 by rpki-client