Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
File: nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft (raw, json)
Hash identifier: I5bQaHIQfLRuETgj8arg37iIewmK86vymzKe30T41kY=
Subject key identifier: CE:C3:B5:CA:83:F4:5D:B5:07:9D:34:B6:C8:44:58:39:57:4E:07:5E
Authority key identifier: 9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA
Certificate issuer: /CN=9e4372f63932ba7fe8f161b564b93860614a80ba
Certificate serial: 019873E30E1BFC74C79293DEA827944A3C43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
Manifest number: 060A
Signing time: Mon 04 Aug 2025 07:01:56 +0000
Manifest this update: Mon 04 Aug 2025 07:01:56 +0000
Manifest next update: Tue 05 Aug 2025 07:01:56 +0000
Files and hashes: 1: TaAxyGE0YZ7m-xRwM6T1q9wMqQw.roa (hash: 76tscvyJdodgkrjTmEZQdEHR921zYs8tliL/2ouT7RA=)
2: nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl (hash: poW34JlxQ8B/YqRPpj964Wq1YmQl9Ke6pf3zr9a+++M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:0e:1b:fc:74:c7:92:93:de:a8:27:94:4a:3c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4372f63932ba7fe8f161b564b93860614a80ba
Validity
Not Before: Aug 4 07:01:56 2025 GMT
Not After : Aug 5 07:01:56 2025 GMT
Subject: CN=cec3b5ca83f45db5079d34b6c8445839574e075e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:dc:18:83:fd:c5:0d:47:85:6c:b8:6b:fb:7e:
33:f1:6a:87:eb:d0:15:d7:63:3e:96:98:2c:72:dc:
73:30:3c:4c:8c:de:02:9c:00:85:ff:5d:a3:59:b1:
2b:50:67:f2:9c:8d:cd:b9:6d:75:6f:aa:92:21:bf:
ee:68:8d:97:e4:1a:ed:cd:15:50:5d:fb:94:a3:8f:
70:b3:18:57:ed:af:c9:04:a0:8f:19:4d:ff:e9:9a:
21:8b:38:10:76:90:5a:5d:54:b1:74:ae:94:ec:8b:
7c:38:18:41:17:d7:d7:7b:2a:21:0e:16:42:76:1c:
89:f7:e7:0d:21:00:1f:14:b7:76:e8:53:10:3a:70:
e0:e4:aa:8e:a1:c6:51:fa:53:69:51:94:d0:d6:bd:
c9:bc:fc:f1:31:c0:ed:8e:1f:f1:a5:69:ea:59:4a:
90:39:e3:91:49:c4:a5:35:c4:c9:42:5f:00:9e:38:
73:00:ce:06:e3:d9:e0:66:20:d6:93:6d:ea:e9:76:
80:57:35:43:28:e9:9d:7a:07:1f:c0:2d:cb:27:5d:
01:cb:1d:1f:0a:b4:1c:81:6b:87:cc:6c:ec:ca:60:
7f:15:58:b0:37:ff:72:cf:42:02:05:68:a3:cd:3f:
bc:b6:03:ed:6c:bd:ba:2d:9e:1a:cd:6d:85:41:b3:
3f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C3:B5:CA:83:F4:5D:B5:07:9D:34:B6:C8:44:58:39:57:4E:07:5E
X509v3 Authority Key Identifier:
keyid:9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:dd:26:38:73:ad:09:88:75:b8:85:fe:26:95:12:aa:32:d3:
93:7b:94:a6:02:f4:a4:f8:9b:85:bf:21:7c:30:73:51:7f:0c:
ff:46:4b:c3:cf:f2:ed:22:78:1f:41:05:53:04:ea:80:e8:93:
c4:61:81:ef:84:60:3e:5c:20:59:c9:f9:4f:a5:df:7b:36:08:
cf:4d:db:40:30:b2:14:8a:2e:c3:56:20:13:b8:da:ec:21:ca:
ec:a6:f7:4d:9b:df:e3:f5:63:ab:18:8f:2f:80:d6:1f:90:e7:
43:93:a4:76:5a:03:21:c7:5e:c0:d9:25:f5:eb:8a:e4:fe:db:
ed:97:12:12:98:be:04:e3:6b:0d:4a:b9:c2:c3:27:81:c0:df:
54:1b:74:ab:f6:4e:9d:ba:4a:6d:b6:8e:84:61:91:58:b3:a4:
37:fa:0e:bd:8a:28:d7:75:8f:77:d2:b9:2d:b9:93:f6:74:55:
51:8a:26:9f:4b:94:c7:de:e9:c6:71:aa:20:2a:20:21:c7:de:
34:42:14:70:54:b6:6b:47:e2:e6:90:9f:d2:6a:bc:91:b4:3f:
5a:b3:f6:17:14:7f:9f:56:5e:66:61:fc:5a:51:54:01:bc:91:
4e:39:6c:10:b2:57:38:46:63:c0:8d:6c:5c:9f:f3:c7:ee:16:
00:e3:d7:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4w4b/HTHkpPeqCeUSjxDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNDM3MmY2MzkzMmJhN2ZlOGYxNjFiNTY0YjkzODYwNjE0
YTgwYmEwHhcNMjUwODA0MDcwMTU2WhcNMjUwODA1MDcwMTU2WjAzMTEwLwYDVQQD
EyhjZWMzYjVjYTgzZjQ1ZGI1MDc5ZDM0YjZjODQ0NTgzOTU3NGUwNzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztwYg/3FDUeFbLhr+34z8WqH69AV
12M+lpgsctxzMDxMjN4CnACF/12jWbErUGfynI3NuW11b6qSIb/uaI2X5BrtzRVQ
XfuUo49wsxhX7a/JBKCPGU3/6ZohizgQdpBaXVSxdK6U7It8OBhBF9fXeyohDhZC
dhyJ9+cNIQAfFLd26FMQOnDg5KqOocZR+lNpUZTQ1r3JvPzxMcDtjh/xpWnqWUqQ
OeORScSlNcTJQl8AnjhzAM4G49ngZiDWk23q6XaAVzVDKOmdegcfwC3LJ10Byx0f
CrQcgWuHzGzsymB/FViwN/9yz0ICBWijzT+8tgPtbL26LZ4azW2FQbM/TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7DtcqD9F21B500tshEWDlXTgdeMB8GA1UdIwQY
MBaAFJ5DcvY5Mrp/6PFhtWS5OGBhSoC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtOeTlqa3l1bl9vOFdHMVpMazRZR0ZLZ0xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8zOTY3YTYtNzlmMy00YWZmLWIzNGIt
YWUwZWE2NjQzYmJkLzEvbmtOeTlqa3l1bl9vOFdHMVpMazRZR0ZLZ0xvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi8zOTY3YTYtNzlmMy00YWZmLWIzNGItYWUwZWE2NjQzYmJk
LzEvbmtOeTlqa3l1bl9vOFdHMVpMazRZR0ZLZ0xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY90mOHOt
CYh1uIX+JpUSqjLTk3uUpgL0pPibhb8hfDBzUX8M/0ZLw8/y7SJ4H0EFUwTqgOiT
xGGB74RgPlwgWcn5T6XfezYIz03bQDCyFIouw1YgE7ja7CHK7Kb3TZvf4/VjqxiP
L4DWH5DnQ5OkdloDIcdewNkl9euK5P7b7ZcSEpi+BONrDUq5wsMngcDfVBt0q/ZO
nbpKbbaOhGGRWLOkN/oOvYoo13WPd9K5LbmT9nRVUYomn0uUx97pxnGqICogIcfe
NEIUcFS2a0fi5pCf0mq8kbQ/WrP2FxR/n1ZeZmH8WlFUAbyRTjlsELJXOEZjwI1s
XJ/zx+4WAOPXXg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:05:05 2025 by rpki-client