Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
File: nkuBjJLE5paGs8KBAIVd-lA6BXo.mft (raw, json)
Hash identifier: 4HETT1EHwy/A4cvpKsLeFI+UyPb+weqyhlLJ3FsDILE=
Subject key identifier: EC:08:A1:C9:C0:A9:63:19:1B:68:1E:AF:A9:4C:2F:00:57:61:10:82
Authority key identifier: 9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A
Certificate issuer: /CN=9e4b818c92c4e69686b3c28100855dfa503a057a
Certificate serial: 0198917EA8C0B4442397B91C363129730E89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
Manifest number: 1623
Signing time: Sun 10 Aug 2025 01:00:53 +0000
Manifest this update: Sun 10 Aug 2025 01:00:53 +0000
Manifest next update: Mon 11 Aug 2025 01:00:53 +0000
Files and hashes: 1: nkuBjJLE5paGs8KBAIVd-lA6BXo.crl (hash: RzNnW4EILBo45NH8dOrO/jJiwagnYOvubSw1KGZXTx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 01:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:7e:a8:c0:b4:44:23:97:b9:1c:36:31:29:73:0e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4b818c92c4e69686b3c28100855dfa503a057a
Validity
Not Before: Aug 10 01:00:53 2025 GMT
Not After : Aug 11 01:00:53 2025 GMT
Subject: CN=ec08a1c9c0a963191b681eafa94c2f0057611082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d7:53:23:a7:86:d8:68:59:bb:56:51:7a:16:
70:80:68:19:da:9c:a3:26:26:ed:ba:ed:be:d1:23:
79:30:1f:07:74:be:f6:25:2b:ef:ef:ff:b6:2b:e0:
6c:c3:14:2c:d1:42:81:36:42:69:64:74:0d:fb:d3:
8b:4a:f2:c4:16:29:02:13:2f:e1:7a:32:44:c3:04:
12:67:79:89:c2:3d:8e:8a:8f:bb:73:38:e8:8f:78:
31:bb:48:b4:d4:9a:cc:5b:fa:6a:79:04:6c:a5:a9:
45:ec:3b:e4:f5:55:1e:63:1d:41:5b:49:a8:84:e4:
41:32:7c:50:45:4a:ec:a1:3c:01:fe:e6:6b:b1:05:
ac:66:5b:25:65:48:e7:c1:30:29:69:16:e9:e2:5e:
66:36:ac:71:ed:e9:a0:71:a7:c8:c5:58:6b:b8:47:
29:e8:74:a1:fe:44:22:5c:d0:75:c2:93:ce:78:6e:
0e:87:b8:21:21:91:ee:63:24:20:25:49:25:66:44:
ae:e2:e2:11:7e:2f:36:45:ca:63:95:3c:1d:fc:03:
d7:c6:35:a4:9a:21:08:3d:50:4a:e5:31:59:ab:eb:
53:4a:ec:5f:1a:1e:32:0f:bb:36:e4:59:45:7d:11:
92:4f:b2:c0:55:cc:23:f7:c4:6b:38:e0:12:81:2b:
59:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:08:A1:C9:C0:A9:63:19:1B:68:1E:AF:A9:4C:2F:00:57:61:10:82
X509v3 Authority Key Identifier:
keyid:9E:4B:81:8C:92:C4:E6:96:86:B3:C2:81:00:85:5D:FA:50:3A:05:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkuBjJLE5paGs8KBAIVd-lA6BXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e4e81c-4e84-4524-8ddc-4010a36d9cdd/1/nkuBjJLE5paGs8KBAIVd-lA6BXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:76:6d:f7:18:ac:99:c6:42:3f:5b:74:d7:fe:1b:5f:a2:11:
a1:6f:01:5b:e2:9a:ff:67:d9:1b:20:8d:50:2d:b1:f4:1f:bd:
c2:90:7b:e1:84:5e:c7:b0:97:82:80:f7:30:d9:13:70:a3:d2:
27:08:18:8c:a6:94:e7:f9:11:e3:b7:bb:bf:e6:94:2b:ba:d3:
e7:1e:e3:6e:27:bf:e7:b0:89:00:86:ae:63:9d:8f:82:7b:85:
46:66:ee:59:95:7b:3c:9b:5a:55:a9:89:3a:7a:04:31:48:08:
fb:c7:4f:9a:c5:90:26:4e:18:a7:f7:6f:e2:3f:df:89:b7:2e:
99:1f:3a:b2:9b:6a:90:5b:47:27:c2:d5:a0:d8:ac:9d:4e:dc:
0a:44:1b:e8:67:77:81:08:24:ac:a9:2d:97:ae:ba:12:74:20:
e3:f8:40:8f:5d:80:64:48:9c:2b:3a:6e:8d:8b:61:64:a0:b2:
1a:c7:47:54:7f:08:3f:c6:fa:b3:17:29:a4:90:2c:02:35:77:
68:a2:27:2c:e5:9f:77:98:df:44:52:bc:bc:e6:20:07:e2:07:
92:2d:06:1b:39:9c:94:64:67:59:d3:4d:6b:9b:66:9c:1a:80:
fb:aa:60:a2:94:b8:14:b0:23:3a:2e:cd:9b:ac:36:4b:52:49:
a1:3f:79:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:42:20 2025 by rpki-client