Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
File: nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft (raw, json)
Hash identifier: y/uutdTJPweXQ/frqwRebfCJNjImCVOjv03BsBA/dd8=
Subject key identifier: EC:68:B8:6A:FC:68:75:D0:34:A4:B4:C6:65:9C:2E:48:0D:0D:C9:31
Authority key identifier: 9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA
Certificate issuer: /CN=9e4372f63932ba7fe8f161b564b93860614a80ba
Certificate serial: 01976D3D5B430D51A8A518647F48977E729B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
Manifest number: 0582
Signing time: Sat 14 Jun 2025 07:00:26 +0000
Manifest this update: Sat 14 Jun 2025 07:00:26 +0000
Manifest next update: Sun 15 Jun 2025 07:00:26 +0000
Files and hashes: 1: TaAxyGE0YZ7m-xRwM6T1q9wMqQw.roa (hash: 76tscvyJdodgkrjTmEZQdEHR921zYs8tliL/2ouT7RA=)
2: nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl (hash: 6UXVLrMBhvNISRPfmi8V6OBwwNTi13nMUxpK7XHus7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:5b:43:0d:51:a8:a5:18:64:7f:48:97:7e:72:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4372f63932ba7fe8f161b564b93860614a80ba
Validity
Not Before: Jun 14 07:00:26 2025 GMT
Not After : Jun 15 07:00:26 2025 GMT
Subject: CN=ec68b86afc6875d034a4b4c6659c2e480d0dc931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0f:d7:bd:18:d6:9d:5e:39:6a:05:79:59:b9:
87:52:25:45:61:49:32:1b:3e:94:b7:d6:68:42:7b:
a5:52:17:d0:a3:ea:11:67:28:da:11:ea:19:f4:2c:
3f:dd:7b:20:4b:2d:33:ab:0f:28:df:20:d6:d6:58:
d9:32:2a:1b:53:0e:6c:22:cd:c3:76:98:e5:07:c2:
b7:0b:48:e2:07:34:17:2c:4c:f8:8f:23:b0:d1:09:
d6:1e:b1:f3:be:59:26:1c:4e:d4:39:b2:f9:f4:ee:
99:f2:f7:19:b7:65:b8:08:c1:12:57:6e:db:a7:4c:
58:b1:95:04:d8:7c:f4:fb:70:2e:09:b6:70:be:8d:
38:9c:e0:68:1b:69:d6:09:59:1a:18:c7:d5:35:22:
ff:06:d7:26:38:0f:a3:96:d8:d6:23:72:ae:65:d8:
dc:d6:44:ec:15:26:c3:2b:1e:02:fc:8a:72:b3:77:
58:e8:22:1b:53:5a:17:90:47:ac:82:d3:af:85:46:
bf:86:e0:67:75:a6:e3:1e:4e:77:35:bb:66:e7:f6:
a9:5a:61:7a:f9:f2:7b:42:9b:81:11:36:95:b6:fe:
f0:22:60:4c:98:ac:70:41:54:2b:c2:7f:30:68:93:
e0:d9:12:c9:14:fb:da:96:d5:44:42:40:58:ab:d0:
76:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:68:B8:6A:FC:68:75:D0:34:A4:B4:C6:65:9C:2E:48:0D:0D:C9:31
X509v3 Authority Key Identifier:
keyid:9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:80:1d:4c:e9:0a:a8:c7:73:d5:e1:00:50:6a:87:26:91:e3:
9a:f3:18:bb:59:b2:32:71:9c:23:69:7d:7b:a3:8e:41:6f:e8:
95:e6:db:f7:54:f1:89:22:8a:49:08:bf:b2:0c:f5:5b:4e:6a:
66:c4:63:3d:77:e6:ae:fb:56:fe:35:8a:db:84:5a:32:2b:20:
c6:2a:14:60:c2:cb:e2:51:92:fd:df:35:23:fb:92:68:25:5f:
53:f2:69:50:19:5b:e6:f3:50:5f:1a:30:78:01:5a:b9:6a:74:
73:e5:db:b6:ff:c1:c0:fc:e3:79:4e:0e:47:8e:e7:f5:66:55:
12:d9:ca:4a:f4:50:ae:e1:b9:44:42:0b:64:1b:1c:65:7c:15:
72:cd:c2:54:e0:8e:ea:2a:aa:0b:fe:86:b0:50:ac:ec:57:ff:
5a:eb:4b:a2:ee:8c:63:f5:51:8d:af:8f:d0:ae:60:f7:31:ac:
a7:fc:af:c2:93:81:22:6e:92:31:c5:be:11:ea:30:45:27:7a:
a6:c9:b9:51:04:f6:a0:ba:e1:ec:91:90:fc:4f:42:a2:9c:91:
e8:ed:e3:62:8e:94:c7:80:b0:a3:10:ec:00:7a:d7:34:b8:50:
d6:8f:31:23:97:df:a6:a2:b7:e5:97:b8:c3:cd:2c:4f:32:85:
c1:ee:db:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPVtDDVGopRhkf0iXfnKbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNDM3MmY2MzkzMmJhN2ZlOGYxNjFiNTY0YjkzODYwNjE0
YTgwYmEwHhcNMjUwNjE0MDcwMDI2WhcNMjUwNjE1MDcwMDI2WjAzMTEwLwYDVQQD
EyhlYzY4Yjg2YWZjNjg3NWQwMzRhNGI0YzY2NTljMmU0ODBkMGRjOTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA/XvRjWnV45agV5WbmHUiVFYUky
Gz6Ut9ZoQnulUhfQo+oRZyjaEeoZ9Cw/3XsgSy0zqw8o3yDW1ljZMiobUw5sIs3D
dpjlB8K3C0jiBzQXLEz4jyOw0QnWHrHzvlkmHE7UObL59O6Z8vcZt2W4CMESV27b
p0xYsZUE2Hz0+3AuCbZwvo04nOBoG2nWCVkaGMfVNSL/BtcmOA+jltjWI3KuZdjc
1kTsFSbDKx4C/Ipys3dY6CIbU1oXkEesgtOvhUa/huBndabjHk53Nbtm5/apWmF6
+fJ7QpuBETaVtv7wImBMmKxwQVQrwn8waJPg2RLJFPvaltVEQkBYq9B2PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxouGr8aHXQNKS0xmWcLkgNDckxMB8GA1UdIwQY
MBaAFJ5DcvY5Mrp/6PFhtWS5OGBhSoC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtOeTlqa3l1bl9vOFdHMVpMazRZR0ZLZ0xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8zOTY3YTYtNzlmMy00YWZmLWIzNGIt
YWUwZWE2NjQzYmJkLzEvbmtOeTlqa3l1bl9vOFdHMVpMazRZR0ZLZ0xvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi8zOTY3YTYtNzlmMy00YWZmLWIzNGItYWUwZWE2NjQzYmJk
LzEvbmtOeTlqa3l1bl9vOFdHMVpMazRZR0ZLZ0xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJIAdTOkK
qMdz1eEAUGqHJpHjmvMYu1myMnGcI2l9e6OOQW/olebb91TxiSKKSQi/sgz1W05q
ZsRjPXfmrvtW/jWK24RaMisgxioUYMLL4lGS/d81I/uSaCVfU/JpUBlb5vNQXxow
eAFauWp0c+Xbtv/BwPzjeU4OR47n9WZVEtnKSvRQruG5REILZBscZXwVcs3CVOCO
6iqqC/6GsFCs7Ff/WutLou6MY/VRja+P0K5g9zGsp/yvwpOBIm6SMcW+EeowRSd6
psm5UQT2oLrh7JGQ/E9CopyR6O3jYo6Ux4CwoxDsAHrXNLhQ1o8xI5ffpqK35Ze4
w80sTzKFwe7boQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:47:43 2025 by rpki-client