Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
File: nkQennBa2j-cHoJ80nbb0JdIdgg.mft (raw, json)
Hash identifier: 4KuRkfdbWot9NMqcYYQZaGkD476cU9rDjUR+o9zOMMQ=
Subject key identifier: 3A:D7:B4:F2:D7:9B:F0:A1:4D:AE:E5:37:A9:36:A1:B0:C1:F7:AF:B9
Authority key identifier: 9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
Certificate issuer: /CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Certificate serial: 0198560EA1330AC1F003BA899FD295F46C5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
Manifest number: 0F86
Signing time: Tue 29 Jul 2025 12:00:55 +0000
Manifest this update: Tue 29 Jul 2025 12:00:55 +0000
Manifest next update: Wed 30 Jul 2025 12:00:55 +0000
Files and hashes: 1: 7ySzESdDI-Eg0Y6xfFTDZOEQmZk.roa (hash: pTSWdDbQ1VFptqQJI8HP8UxKCCjXnA4njHY5srW26VY=)
2: BJvFiCQhGiEcXR3ndqL7T5BbDaU.roa (hash: Z+0E4ULnb/cJktOfFSiZcNmisROmxseIx6dqsZlDt4s=)
3: bKdFeyVH_r7HsHfe9GqBe_UUrg8.roa (hash: vnPbAxKFKizMFdUh2dDG9y/SGopR40zinaRVaCXXct4=)
4: nkQennBa2j-cHoJ80nbb0JdIdgg.crl (hash: uR+umTIh9WRJ5XiHXHHof2IxUX/occH1sIVV4IVjoE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:0e:a1:33:0a:c1:f0:03:ba:89:9f:d2:95:f4:6c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Validity
Not Before: Jul 29 12:00:55 2025 GMT
Not After : Jul 30 12:00:55 2025 GMT
Subject: CN=3ad7b4f2d79bf0a14daee537a936a1b0c1f7afb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b1:4d:57:5f:0b:c7:78:27:58:2a:1d:5a:6c:
c2:69:07:ff:37:78:9b:65:4c:bf:5b:33:b3:7d:cd:
8e:4e:4a:53:1b:90:7a:15:be:fa:5f:e9:8d:93:1e:
24:3a:2d:62:31:99:a9:16:e2:c7:ea:95:8f:3b:e7:
9d:56:0b:14:26:85:ca:e5:f1:b6:1b:b9:4b:55:2d:
a2:45:3b:53:dd:a8:fb:01:b7:fa:91:67:6f:69:3f:
ab:b6:32:fa:98:f7:52:2f:07:e0:4f:2d:06:b2:1a:
7f:16:a4:10:4f:0c:dd:b6:fc:6e:ea:f0:83:5e:7c:
71:97:b9:c0:85:0b:b8:cf:f3:04:67:f1:57:02:f4:
f5:de:83:dc:92:85:50:6d:69:16:8f:06:87:1b:0c:
74:e6:94:1a:8c:d6:68:6b:25:b6:7b:54:66:7d:44:
92:eb:fc:48:4f:39:0f:64:36:1a:42:bc:e9:53:00:
55:6c:cf:c1:7f:76:e6:2d:88:27:ee:fc:00:5c:12:
2e:aa:3b:02:d4:2c:04:e6:74:4e:93:68:fa:64:f8:
53:8d:fc:0e:0a:a4:94:fe:72:8d:d5:13:10:82:fd:
6f:b4:06:22:66:5e:9f:6a:fd:ea:d2:df:7f:98:15:
78:8c:9a:70:8c:3c:06:48:61:fd:10:76:16:14:0b:
5b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D7:B4:F2:D7:9B:F0:A1:4D:AE:E5:37:A9:36:A1:B0:C1:F7:AF:B9
X509v3 Authority Key Identifier:
keyid:9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:4f:b4:17:15:1d:b8:13:18:68:08:03:e0:a6:16:4f:a4:1f:
2d:9d:8b:9c:7f:fe:84:59:28:db:22:6d:ed:be:77:4e:30:af:
2a:2b:a3:b3:9c:6c:2d:b8:08:60:e4:5e:f3:43:9d:18:1b:62:
5e:1e:80:0d:84:c2:7a:14:c4:79:cc:24:cb:f7:f8:cc:c5:46:
33:ac:f6:3a:d1:95:a5:21:ac:0b:d3:3c:59:2a:25:4d:e6:75:
38:50:eb:54:7f:0c:cb:54:bf:65:d2:27:bc:6e:c2:1d:d1:ff:
88:49:53:15:84:59:b5:e0:df:25:cb:d8:bd:70:01:93:bc:c2:
4d:10:b8:35:b3:31:f2:56:48:7f:6d:19:0d:9f:9d:03:f3:65:
80:3b:d4:97:20:cf:1c:2e:38:57:b8:6d:2b:46:bf:13:ef:5f:
f6:d4:b6:a5:82:e8:c4:e2:c6:36:89:e4:c4:07:e3:c7:e0:30:
65:33:78:14:46:91:78:e9:f9:32:a2:43:dd:01:a1:61:d4:2d:
5c:eb:d2:0f:71:51:89:7e:a6:1b:d8:6c:e4:fd:dc:d3:9f:11:
20:ac:37:be:d5:81:78:8c:57:da:51:7a:8b:98:c6:cc:6c:7f:
36:ea:b8:b2:65:d9:4c:89:04:42:e9:40:2c:cb:38:c6:ba:07:
cd:44:03:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:36:49 2025 by rpki-client