Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
File: nkWapGAr_6LSZQumaBhFjIn8RYI.mft (raw, json)
Hash identifier: oLqTGH2XqeCB2TW5xva8ptrEKTviMyKT7ryRuGGFTCQ=
Subject key identifier: CD:22:B2:58:84:50:B3:7A:DF:4B:3F:19:65:0D:06:2E:ED:05:DA:0B
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 01987D1C4D6E6203EDE157B0FCD303A9C799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
Manifest number: 162F
Signing time: Wed 06 Aug 2025 02:01:03 +0000
Manifest this update: Wed 06 Aug 2025 02:01:03 +0000
Manifest next update: Thu 07 Aug 2025 02:01:03 +0000
Files and hashes: 1: 1ZViwBwJWukG7x8H8vOJHhjrl20.roa (hash: +aEN4SwtP07CGGNGf2sl0Ng37swdYqF9I3PWCaVNvKY=)
2: 5l7_YEP-iDlpzT3jJy_WcDYbdy0.roa (hash: T/EZxm6KOUDbBcP5LoW3SMWMDqFKAPr6qMUb20NyovQ=)
3: BvpS751y8vUXuWqwmfzJfn2h-Rk.roa (hash: KJ/6LdVihbuD7E6JKoxKY+vTCb8HPS492uKXFwv4y1I=)
4: EKZDCBFSzTnUZ-1EZg9n8EZ8oqc.roa (hash: xYPqHPCAO/XyHDtjaojjFFvTaUnv2cV0xvZkEmEN/Lc=)
5: Q8hPg5UjvdR5qe3RUKGr181TIsc.roa (hash: HQ9muwIQ/VGCuDJxXs8tCzXWThyvXdcPzV4TeZjGo30=)
6: _GnprUL9RiOSINIgt8MCDfPJSj8.roa (hash: Yrrm+IlBuBC0Z/pDmaIlkiimbDJKKuFiMeYQ+bxwX6M=)
7: _HwnYOx8loE1jVo8nfivar_tdig.roa (hash: QhMEIV71/g1ejlZrBi4D/Eo8F39EvYYIljovFNhdaUA=)
8: nkWapGAr_6LSZQumaBhFjIn8RYI.crl (hash: JsL/8D8pBjzpnQi/2BL9GzwS1xhl5AZLXmNIncUbaR8=)
9: wRQWlx5VTlfOioAPy2QXY4Uk2Xg.roa (hash: rPHBxj4mRhTnPsN1GhR6ZZjmr/wkKhGGUErpiW2+PN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:4d:6e:62:03:ed:e1:57:b0:fc:d3:03:a9:c7:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Aug 6 02:01:03 2025 GMT
Not After : Aug 7 02:01:03 2025 GMT
Subject: CN=cd22b2588450b37adf4b3f19650d062eed05da0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4a:10:2d:2d:a0:eb:fa:51:3d:73:8b:17:8c:
15:49:56:38:d1:ce:1b:90:f9:99:f7:36:2a:b4:cb:
38:57:d7:10:bf:f1:e3:9c:45:9e:84:9e:b6:bd:69:
cc:b4:cc:2a:4b:cd:66:cb:57:07:2e:ae:89:89:26:
5b:5f:5d:1f:ae:97:09:48:03:17:3b:f5:89:0c:46:
f7:e5:c0:99:17:6e:ad:a4:13:26:c8:b0:e7:be:74:
c9:40:3e:72:09:8f:66:37:31:ef:2d:b7:6a:4b:69:
80:54:e1:ee:ea:93:ed:78:19:7d:4a:81:89:86:ab:
58:70:02:90:5f:98:e3:d3:eb:45:44:da:46:a2:22:
94:01:ae:5d:74:2b:94:98:65:0b:a3:b3:7b:b0:ab:
1e:ba:4b:4c:d6:14:03:3b:44:4b:50:26:dc:dd:dc:
72:f8:9a:61:20:2f:98:bb:f6:c7:ab:95:16:69:c2:
15:d6:f7:ab:ac:5c:d2:92:aa:64:4c:7f:80:c5:c2:
fb:e1:c8:2c:c4:8c:f5:28:51:a7:50:c4:24:95:b2:
82:5b:b8:4b:da:25:5d:b9:c3:a5:b9:59:6a:5b:21:
53:f0:5c:e7:d1:d5:3b:0d:ed:4a:0b:aa:cc:c0:61:
97:2b:e0:d4:c8:92:98:b0:a7:72:3a:a8:20:a9:1f:
6d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:22:B2:58:84:50:B3:7A:DF:4B:3F:19:65:0D:06:2E:ED:05:DA:0B
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:64:93:84:76:0c:4c:49:4e:9a:bb:33:4f:22:56:91:0d:42:
48:43:45:b7:3e:b0:21:81:a4:c1:9c:86:b3:46:bf:f0:84:dc:
ab:50:c5:d3:ce:d4:55:04:85:49:af:b4:5f:ef:20:1a:d7:a8:
5b:3c:c9:f9:bc:92:08:e3:bc:9d:db:0b:3b:9e:d3:37:7d:bc:
5c:26:07:2b:c0:f8:98:a7:a0:0c:23:c9:fe:3b:a1:2b:d6:7d:
dd:95:3f:70:d6:5c:cc:ee:a5:f1:4c:56:9b:99:7c:9d:ed:25:
2f:45:83:ad:f7:cb:01:1d:5f:d5:28:0b:bb:5c:9a:95:d6:67:
4c:0a:bb:72:9f:53:63:df:65:fb:e0:28:3d:e0:62:c7:64:7b:
f8:6b:e3:48:4f:4c:cb:05:23:51:90:04:06:08:d5:c9:dc:bb:
10:02:66:c7:f6:9c:5e:47:30:9d:51:d9:de:3f:23:63:19:73:
eb:a4:39:56:72:b0:b1:19:4d:e4:58:c7:9a:f0:dc:30:1b:59:
0e:b4:e0:1c:fb:0f:ff:3d:8e:22:89:c3:1d:b5:91:4a:3b:10:
9d:b8:eb:83:ed:4e:03:58:32:14:68:e2:24:92:58:7e:14:79:
04:3b:ce:14:d4:25:49:83:35:c9:be:20:ef:bc:91:77:13:3f:
ee:fb:2b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:09:29 2025 by rpki-client