Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
File: nKihMlGaJClJSXNjuMqjPnLGc_g.mft (raw, json)
Hash identifier: bXnm+y2yI/CuyklFrNr9H95n3fymLDJj20ALgtutBxQ=
Subject key identifier: 7D:BF:A1:75:E9:92:8D:95:77:39:1C:D1:49:AB:7C:B8:E1:0E:A0:CA
Authority key identifier: 9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
Certificate issuer: /CN=9ca8a132519a242949497363b8caa33e72c673f8
Certificate serial: 01976F62ADC09757430FFCF35596532085C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
Manifest number: 0F8F
Signing time: Sat 14 Jun 2025 17:00:27 +0000
Manifest this update: Sat 14 Jun 2025 17:00:27 +0000
Manifest next update: Sun 15 Jun 2025 17:00:27 +0000
Files and hashes: 1: dXm9nDAbHEfPr8e0rvdta5vcQCQ.roa (hash: ZAX5/DrLWdB1icFKrgXw3Y2Wbffkldc6zIYnws0ruBM=)
2: iRubAGtbRFzHiw3kU73WMgNN_Ew.roa (hash: zVFcmjx3cq29/V7ruFQJSBuo9AC0OuJEahRAn89+q2w=)
3: nKihMlGaJClJSXNjuMqjPnLGc_g.crl (hash: 8QeBwNfkj48KWcp4ePhg42P8yF7iY0kOB1vm6okerjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:ad:c0:97:57:43:0f:fc:f3:55:96:53:20:85:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca8a132519a242949497363b8caa33e72c673f8
Validity
Not Before: Jun 14 17:00:27 2025 GMT
Not After : Jun 15 17:00:27 2025 GMT
Subject: CN=7dbfa175e9928d9577391cd149ab7cb8e10ea0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fc:b4:00:5f:dd:7f:a7:2b:76:e4:12:64:ad:
ca:3c:65:05:64:94:5a:a0:97:33:8d:5a:ef:06:1c:
12:e7:04:2a:1d:33:87:d1:85:72:52:c8:95:1d:fa:
db:b8:f7:d3:dc:e3:60:bd:c7:76:0d:45:2e:92:a3:
82:b9:bf:87:d1:75:4f:b2:9b:cc:eb:c9:de:b5:c8:
d3:cf:9d:7e:92:8f:35:35:d5:c4:d1:20:80:d4:0c:
64:e4:be:c7:b0:af:1b:1d:c4:b8:70:7d:e0:ef:21:
44:76:b0:92:2f:6c:70:4b:c4:48:40:56:90:fa:fa:
78:36:c2:ca:b1:8e:f1:28:c0:39:a6:54:9a:8f:db:
2a:8b:19:84:94:ec:e5:75:96:11:87:2c:59:92:80:
eb:fa:b3:f1:ca:06:c5:67:11:2a:d6:4c:20:ae:3f:
8f:40:aa:73:1b:66:a2:03:66:48:79:fa:d4:12:d9:
4d:df:3a:30:46:ea:7b:83:ca:47:4f:01:2e:24:96:
eb:4e:fe:60:64:5f:ee:4e:58:9f:37:2b:b4:38:cd:
2a:de:21:09:7e:35:93:0e:89:f6:76:8f:65:9a:c3:
65:ee:a4:60:80:e4:e9:56:2e:82:4f:50:25:89:99:
85:77:ca:c6:c0:79:4e:a6:84:56:2b:bf:55:80:b1:
77:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BF:A1:75:E9:92:8D:95:77:39:1C:D1:49:AB:7C:B8:E1:0E:A0:CA
X509v3 Authority Key Identifier:
keyid:9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:5c:6c:56:f6:5e:58:37:c9:b8:d5:5c:cd:df:13:99:79:bc:
31:6c:48:10:c2:e8:65:8d:93:53:a6:ba:db:f9:7d:e0:a3:7d:
35:36:ae:e1:83:8e:5c:31:27:49:99:a3:aa:47:cf:0f:4f:04:
ed:89:b9:20:6f:79:f6:ed:e9:67:14:99:2d:df:27:49:8e:44:
39:72:fb:12:b3:cc:44:e2:94:b3:1a:aa:c8:08:88:a7:b4:30:
7c:20:90:09:da:24:a7:b7:52:3d:5d:1e:07:2a:a4:31:ce:b7:
fc:8b:b3:54:51:79:83:28:30:fe:49:74:55:17:5a:db:28:f6:
32:5e:ae:84:98:c1:af:2b:e1:70:fb:6e:0b:1f:84:df:f4:3a:
dc:93:61:b3:d4:7d:66:2a:68:3f:77:8b:25:78:41:9b:87:2b:
e7:35:4e:c1:d1:6c:10:38:6c:7a:bf:37:22:cd:9e:02:ac:06:
72:dd:e3:15:43:d4:ef:31:b2:2d:e3:e9:6a:00:ad:b4:f8:3d:
c5:45:a8:21:c4:43:34:b4:00:b2:86:d1:dc:cf:83:05:ea:6d:
74:d9:e8:a1:d6:c0:09:d2:a8:be:e9:e0:b5:03:73:d1:ae:7a:
de:2e:36:ec:37:e1:b3:67:1c:b3:17:78:9c:1c:ca:2d:ce:3a:
09:8c:7f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:13:00 2025 by rpki-client