Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
File: nKMZ6lHIADqtlKjifOaUkqouM6g.mft (raw, json)
Hash identifier: UcyJKz0cqY17wlN39MhCTxqVVvU70ohRTxiGnJPUtTs=
Subject key identifier: BE:6A:11:5D:F0:0A:6E:DE:3A:14:94:BD:EB:DD:7C:39:65:4A:1E:7B
Authority key identifier: 9C:A3:19:EA:51:C8:00:3A:AD:94:A8:E2:7C:E6:94:92:AA:2E:33:A8
Certificate issuer: /CN=9ca319ea51c8003aad94a8e27ce69492aa2e33a8
Certificate serial: 019897B7DCBF0258BC29A11D3430B69D318F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
Manifest number: 1628
Signing time: Mon 11 Aug 2025 06:01:05 +0000
Manifest this update: Mon 11 Aug 2025 06:01:05 +0000
Manifest next update: Tue 12 Aug 2025 06:01:05 +0000
Files and hashes: 1: F76FpI_z3pp7FvEBXhJ_sZMIEq4.roa (hash: 1qsVc/WLV0a8wJB91bXtNOSX8a5UYSQoJwoErMzZDKk=)
2: nKMZ6lHIADqtlKjifOaUkqouM6g.crl (hash: G4DpDie/V8/zIZzL1ldT1FqG9Mp64psWrqyODNqC3Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:b7:dc:bf:02:58:bc:29:a1:1d:34:30:b6:9d:31:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca319ea51c8003aad94a8e27ce69492aa2e33a8
Validity
Not Before: Aug 11 06:01:05 2025 GMT
Not After : Aug 12 06:01:05 2025 GMT
Subject: CN=be6a115df00a6ede3a1494bdebdd7c39654a1e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fc:83:64:0e:b4:15:bb:34:76:ee:47:04:90:
84:8d:cd:bc:68:84:c5:c2:fd:89:34:37:2d:5e:d4:
c2:1c:e6:46:b8:fb:10:84:87:a5:b9:36:b9:7c:68:
b6:5f:ff:8a:a4:61:26:7b:a3:b3:91:91:bd:6d:fd:
70:67:bf:04:6a:0c:87:ca:bc:f3:40:a1:38:47:60:
0a:62:20:55:01:b6:8f:b6:c5:1a:8f:e6:ad:3f:1b:
24:26:2c:c6:2b:75:6c:a3:6f:d4:89:2f:07:48:98:
3f:be:18:83:a9:f2:7a:a2:8c:47:3a:63:20:15:29:
dd:51:e2:7b:b0:c6:30:66:d4:38:1a:dd:cd:7b:23:
49:b2:23:5f:b5:14:16:fb:10:27:cd:b8:ea:a6:f9:
3b:8f:dc:cd:f3:56:a3:81:58:49:42:b7:58:bc:1b:
3c:24:8c:e6:a0:0b:62:93:35:2c:7a:f9:91:67:f9:
2c:bc:2d:89:24:8a:99:d4:05:98:06:a4:30:4e:40:
b4:b3:a9:cf:cd:b6:84:07:d1:15:9c:17:c3:61:bd:
72:f9:d1:5e:8d:25:5a:99:23:83:db:d9:cd:77:6f:
04:d9:27:5c:ef:55:8d:78:88:a1:9c:74:19:8b:87:
4a:8e:df:4e:26:4e:51:d4:eb:fe:36:72:a5:ef:94:
da:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6A:11:5D:F0:0A:6E:DE:3A:14:94:BD:EB:DD:7C:39:65:4A:1E:7B
X509v3 Authority Key Identifier:
keyid:9C:A3:19:EA:51:C8:00:3A:AD:94:A8:E2:7C:E6:94:92:AA:2E:33:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c3:df:1c:9e:c7:81:16:e1:aa:39:2f:e6:01:02:34:3f:3e:
97:8e:55:9b:7d:a7:5a:29:cf:7a:3d:76:39:4d:88:d3:4c:2f:
1c:c1:04:d8:84:92:e9:20:97:11:ad:9d:d9:30:a1:bd:2b:b9:
ba:79:0b:0d:0a:74:d6:a9:71:c3:d0:3a:40:b5:e5:26:c5:f7:
48:bf:5b:0e:61:f8:66:74:f9:b5:fd:8f:d6:f6:79:5e:c2:7f:
ad:b8:f6:79:51:74:7c:ed:99:db:2d:03:fa:64:6e:c2:a9:b5:
4a:dd:d0:9a:83:02:1a:8d:4b:cd:88:e5:f8:6a:4f:d6:3e:90:
97:fe:98:b7:22:b0:9b:f1:90:15:c6:c9:e7:b9:ee:c3:e1:d1:
24:fc:0f:07:0b:42:21:98:e3:6c:b2:14:9a:f3:03:78:91:8b:
ef:bf:62:4c:b2:dc:39:a1:7f:48:b1:96:5b:1b:93:b9:80:cf:
61:e9:19:72:46:70:8d:4d:e0:a3:d2:ff:f3:7a:35:23:e4:0c:
cb:58:ed:7d:ab:ed:ab:00:97:1e:cf:f7:dc:7a:4f:e7:49:34:
b3:4b:d4:9a:47:9a:26:5d:09:72:95:a7:9c:71:c0:a1:7d:d2:
80:df:b2:85:64:f8:11:75:ab:66:d0:c8:cc:44:f7:c4:a2:74:
e5:d4:35:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:52:23 2025 by rpki-client