Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
File: ncKK6ZN_9-SexPEjTlPYud1pRUE.mft (raw, json)
Hash identifier: 0Pzmh/Z7dKx9HUIB8Gj9pc3toX3gBU9er1FT2fsH99E=
Subject key identifier: EA:C3:35:24:C6:7E:A1:20:E1:49:AB:9F:E1:10:E3:AC:25:3D:A1:A2
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 01987C09464B56B9608F094E83853DB6C7D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
Manifest number: 0F45
Signing time: Tue 05 Aug 2025 21:00:38 +0000
Manifest this update: Tue 05 Aug 2025 21:00:38 +0000
Manifest next update: Wed 06 Aug 2025 21:00:38 +0000
Files and hashes: 1: 1-0vipuRl0AJvwZtEBk-maQes6Cg.roa (hash: DSWGxdza7oD2/3uUVZoXyDrmHTWT++tTuwdDtQTvs4k=)
2: Dp9S7DtPUM200gi6O6yBPEaasas.roa (hash: nHFRQ6xLBtePKwuFF9sGQ8KR62EZEyHkOj5R88bM4qI=)
3: F6eX9oz_j-ZT8QfPBURiHjJkBos.roa (hash: 9C2+49g0ve8uLFJHYFMwlwYj/+2J3SnLoalOE2MN4Mk=)
4: Hiu-YkREzGKKTtSRBgf6M5S0mUM.roa (hash: fxvguMnjN9xF6RFcgtEIfOjUPdwUBHDkuyyelgRCorQ=)
5: U4lJvipYbr4AZQbw3vQ4rpXfXN4.roa (hash: J4umHHc1mv/sPeURzjqZJEkjClmBGK0Hvn8O5Rexq5Y=)
6: YhZQFWzwDUGT-HjSfFHnpvcFMTY.roa (hash: /ssHfW4YZnp/Q+YD/IpItVTTmqCd5HemhWXsBRiqt1A=)
7: ZeYihmicLm5VKfWSSFIon1HTDC4.roa (hash: skxZCw+YKxKcl1188es30U08xjm3mZlLt8pygJEcJ10=)
8: jdKmvZ_WGiUDxDAHKJg_Wed6rVo.roa (hash: CRiOfMtNCT5H0OJU8c1YHET8V3YfGy03z8wKH951O6Y=)
9: ncKK6ZN_9-SexPEjTlPYud1pRUE.crl (hash: EYM6mLrrkSKfxGWZpuhH+YcvXMHGLCpe0lkcyPCoN7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:09:46:4b:56:b9:60:8f:09:4e:83:85:3d:b6:c7:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Aug 5 21:00:38 2025 GMT
Not After : Aug 6 21:00:38 2025 GMT
Subject: CN=eac33524c67ea120e149ab9fe110e3ac253da1a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f1:58:a5:b3:f8:0f:09:28:a3:30:09:1c:fc:
5c:31:f6:28:5c:fb:f0:fe:fe:a5:c2:8b:54:08:ac:
7f:cc:e1:64:a6:ca:7b:eb:da:00:04:d7:62:94:f9:
05:88:95:61:4b:0b:be:95:e5:e2:f4:ac:7e:b5:0f:
d0:0a:a9:3e:f8:00:35:eb:eb:39:66:1b:f9:39:e0:
9e:c3:32:3a:42:a1:8d:f9:e0:ab:93:d9:14:cf:70:
6c:c6:b6:3b:58:d1:07:ba:81:7a:ac:31:91:79:22:
0a:7f:26:f2:28:71:63:72:a0:f3:0c:15:e5:5e:b2:
70:0c:fc:ac:b7:95:5c:1c:fc:79:fd:f1:9f:85:8f:
28:7e:6a:2d:23:b3:ac:ae:ed:8f:99:75:45:26:a7:
50:67:79:0e:3c:1f:1c:de:ce:9a:42:68:0c:91:31:
e3:7b:82:84:0c:f9:3a:62:62:72:26:2d:e3:d3:a6:
70:57:24:98:3d:b6:96:e5:7f:e3:08:ca:45:61:0b:
b2:e4:93:39:21:5a:fa:48:ad:a7:2a:75:66:0b:c5:
cc:ab:c0:c4:37:a4:76:d4:5b:ae:c8:13:c0:e1:8b:
5d:d1:b1:39:35:bb:86:d0:34:85:4d:2b:1e:64:a7:
0f:8c:fa:e8:17:94:67:fa:4d:61:12:96:c1:73:ce:
df:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C3:35:24:C6:7E:A1:20:E1:49:AB:9F:E1:10:E3:AC:25:3D:A1:A2
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:cb:55:4b:78:ea:81:49:d4:83:70:ad:19:48:04:f7:60:ed:
a0:6d:3e:7f:5c:f1:1c:1f:ba:3c:67:57:4a:fb:94:22:7b:9b:
8d:1d:d8:b9:df:6a:3f:9f:18:6e:d8:0f:7a:30:49:d2:b4:ca:
d5:d7:65:8f:8a:df:95:aa:22:90:32:c6:0a:e1:49:95:76:38:
0f:e4:d4:9a:09:67:f2:0d:5d:a2:d8:98:fd:f3:a2:50:e3:1c:
ce:32:c1:47:c3:a4:12:1d:83:e7:44:c0:d7:1d:4b:a7:58:fe:
5e:bd:8e:bd:8b:8f:0e:bd:c0:90:7e:2c:cc:ed:b7:96:01:31:
61:a3:50:3f:15:f2:f5:ef:f7:6a:84:cb:26:44:90:25:db:44:
d9:0b:5e:8d:dd:fa:f6:9c:fc:f5:61:31:87:fa:89:a7:ee:47:
68:d1:7f:fe:f9:1d:37:25:17:76:4d:c2:2f:45:ab:90:f3:f0:
04:2e:6d:b9:0e:c8:1c:49:3b:e5:e2:84:f4:e3:05:73:c5:ee:
a7:a5:7f:27:29:f7:a5:32:01:dc:0b:53:81:25:f2:b2:0e:17:
21:a9:28:8a:61:e1:16:4a:09:af:a2:40:ce:af:70:6f:79:b9:
4c:99:db:3f:3b:ce:c7:a8:1c:f6:dc:05:3b:c8:a2:39:34:40:
87:c1:a6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:37:30 2025 by rpki-client