Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
File: nKxPYfRotyACqyXxEuUgEe14LM4.mft (raw, json)
Hash identifier: O9BVmUPbNeMJSeVamo67FvP8H4PeJS3m3N0SkwcCSYM=
Subject key identifier: FB:27:C8:29:41:89:B0:50:18:63:E5:8E:10:6E:43:46:B3:B9:5C:07
Authority key identifier: 9C:AC:4F:61:F4:68:B7:20:02:AB:25:F1:12:E5:20:11:ED:78:2C:CE
Certificate issuer: /CN=9cac4f61f468b72002ab25f112e52011ed782cce
Certificate serial: 019769612987B18E54C0478D6B2E232A7474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
Manifest number: 0D04
Signing time: Fri 13 Jun 2025 13:01:04 +0000
Manifest this update: Fri 13 Jun 2025 13:01:04 +0000
Manifest next update: Sat 14 Jun 2025 13:01:04 +0000
Files and hashes: 1: 1-ctCBWTM9YEJSb9HauIUKPqVwas.roa (hash: F+Ql00NFkP6u64/1DSJGoJFeSPLMPLBWzAqmumx63J4=)
2: nKxPYfRotyACqyXxEuUgEe14LM4.crl (hash: 8VholS5r/8T8e00vc4RkHAdMSoJtFEc7bPINkV+/FX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:29:87:b1:8e:54:c0:47:8d:6b:2e:23:2a:74:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cac4f61f468b72002ab25f112e52011ed782cce
Validity
Not Before: Jun 13 13:01:04 2025 GMT
Not After : Jun 14 13:01:04 2025 GMT
Subject: CN=fb27c8294189b0501863e58e106e4346b3b95c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f2:42:63:f2:79:51:71:10:05:d3:3e:78:1e:
41:67:3d:eb:22:06:76:66:11:d8:7f:9b:5c:5f:72:
6d:a3:74:77:27:95:48:fd:1d:3d:0f:65:48:ed:02:
2b:fc:63:87:56:fa:82:77:c9:48:ae:90:b1:bf:93:
e5:e7:8d:53:f4:48:13:59:c9:64:e6:96:f7:8d:53:
37:20:45:fe:17:ab:df:16:d3:5a:82:6b:64:95:93:
77:d0:4a:55:2d:87:ad:c1:b9:a7:c8:f7:c9:46:25:
9c:53:78:4f:34:b9:05:95:61:96:46:58:03:a7:ce:
93:d9:9f:6a:97:45:6a:a2:2b:9b:7c:0a:cd:0c:67:
9d:76:7e:27:ec:1a:7d:ec:99:e7:c4:f2:d4:24:e0:
b3:f3:69:f5:33:cb:23:06:fc:e5:bd:34:a3:6a:2f:
36:ef:d3:d7:05:d0:8d:18:03:52:fd:66:b3:33:e6:
c5:68:5b:1e:1d:01:8a:64:24:2a:30:20:4c:1f:4c:
f3:ec:bc:50:eb:d2:f7:96:0a:05:f2:8b:c3:03:9b:
6c:90:06:a3:7e:e2:a0:62:d7:bc:5a:2d:ab:44:46:
38:bc:ea:80:06:44:c6:8e:23:67:d0:97:5d:7d:e2:
ed:69:c6:9a:c9:50:49:99:9a:0a:91:a1:0f:b0:b3:
92:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:27:C8:29:41:89:B0:50:18:63:E5:8E:10:6E:43:46:B3:B9:5C:07
X509v3 Authority Key Identifier:
keyid:9C:AC:4F:61:F4:68:B7:20:02:AB:25:F1:12:E5:20:11:ED:78:2C:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a2:2d:2c:0d:5f:14:f2:cd:10:8f:c5:84:29:5b:ca:4b:6b:
ec:60:35:59:cb:e6:f3:fe:c4:01:36:12:0d:45:a3:a1:17:a3:
a5:f7:e3:27:54:41:0e:53:d6:96:1b:df:27:e0:15:a2:8e:2c:
d6:a7:97:7b:91:3f:f2:7d:55:0e:03:99:b4:fe:b6:a5:38:63:
4c:5b:73:5b:a7:1f:ae:ab:e1:7d:d6:19:fd:44:43:da:99:d4:
7d:2a:94:82:1f:63:b4:f5:b3:4e:89:6c:54:9a:9a:f6:49:8d:
fc:e3:7c:44:40:3d:a6:74:ef:91:3f:12:f8:b3:12:a6:9d:a6:
ac:e7:1f:ac:2a:bf:b3:f4:6e:02:fd:de:e0:65:fa:fe:99:41:
e1:32:56:2a:e3:5a:1e:4d:a2:07:eb:35:62:b4:e7:7a:bf:08:
1d:7e:19:46:03:1a:60:6e:d7:47:b9:75:5c:f7:df:02:55:7b:
9f:6b:00:2b:65:c2:42:83:1e:59:5f:5c:c8:e7:3d:61:2b:6f:
09:7e:e0:b9:6b:2f:66:34:ec:cf:df:c2:e4:43:ee:84:08:75:
1a:b0:18:1b:10:e1:0b:42:a9:3c:86:61:9f:72:b1:7b:cc:a0:
97:ba:d5:f7:9b:db:ed:90:5f:1f:a9:c9:5b:64:ad:05:79:d3:
77:24:51:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:24:46 2025 by rpki-client