Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
File: nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft (raw, json)
Hash identifier: Dfg9g/E8qDglBroSyOsU1IOI+GuE+9UoBEF4G5OuM5o=
Subject key identifier: B0:8C:0B:8F:0D:41:08:AF:5C:BC:A9:0F:C5:73:9C:DE:DB:27:36:04
Authority key identifier: 9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C
Certificate issuer: /CN=9e481c098a649265291d402f5f02fc43dda0fc8c
Certificate serial: 019849D3C2A834D8573446B17B1578A326C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
Manifest number: 08FA
Signing time: Sun 27 Jul 2025 03:01:11 +0000
Manifest this update: Sun 27 Jul 2025 03:01:11 +0000
Manifest next update: Mon 28 Jul 2025 03:01:11 +0000
Files and hashes: 1: 1-Z1UOZXHudz9pMndWhDGiE0wZos.roa (hash: j553aDGXg+Mu/H/OVwEn4NDDiMjFpdhHQa+Xk6WS3jQ=)
2: nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl (hash: 0XKmiv8pyf3VamNHthA4Oz3/3ATdxJZmDUq5CihwOic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:c2:a8:34:d8:57:34:46:b1:7b:15:78:a3:26:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e481c098a649265291d402f5f02fc43dda0fc8c
Validity
Not Before: Jul 27 03:01:11 2025 GMT
Not After : Jul 28 03:01:11 2025 GMT
Subject: CN=b08c0b8f0d4108af5cbca90fc5739cdedb273604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:88:d1:05:2e:49:43:24:65:b0:84:65:54:76:
20:ef:62:18:18:4d:db:4d:c4:59:8e:38:10:74:3e:
16:b3:92:a4:28:b6:be:d9:f4:c2:53:46:b9:18:c2:
d9:cb:aa:6f:84:ab:6f:5c:ee:95:c2:8a:4e:a0:aa:
98:10:39:00:25:ee:31:0e:3e:d4:ca:ed:de:38:65:
a2:30:fd:a1:88:d0:11:cf:9a:54:5d:30:d2:5f:6a:
67:6b:5c:2a:26:ff:e5:7e:95:2e:a3:ea:f0:9f:3c:
72:b2:fd:bf:8f:31:d0:f4:ff:1e:a8:4c:0f:5b:d6:
77:16:76:27:24:03:9f:d9:5c:c6:5b:56:6b:4e:0e:
ec:6a:8c:d7:1a:89:ab:cc:2c:dd:dc:8c:f6:5d:06:
6b:ab:01:17:4c:e7:17:12:7b:fa:e9:05:f9:58:77:
9e:87:ab:41:f7:09:96:32:fb:e6:4c:67:e2:28:cd:
7c:a2:64:df:81:bd:7a:33:46:a8:43:80:e0:11:d6:
d7:e0:80:d5:30:f8:f1:3b:88:c9:82:f5:cd:ee:9f:
be:e4:ed:7a:ab:db:ac:05:33:4b:d0:cd:71:66:4a:
e3:9b:be:6b:d8:e5:d9:c7:f4:92:fa:e0:12:44:50:
aa:8c:93:46:eb:33:5f:6e:69:6f:98:ed:3d:05:8e:
6f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8C:0B:8F:0D:41:08:AF:5C:BC:A9:0F:C5:73:9C:DE:DB:27:36:04
X509v3 Authority Key Identifier:
keyid:9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ee:d3:6d:64:0d:80:c1:47:1b:a9:13:5a:55:f4:9c:e8:05:
91:b1:1f:a2:d4:81:a8:b9:00:59:ba:78:af:6b:38:94:b2:f3:
68:ac:6d:1d:7a:a4:d9:9d:13:cb:ec:47:b5:5a:ab:bc:71:61:
02:ad:68:0b:06:6f:9b:3f:48:f7:4e:6e:e5:af:09:fa:a2:1c:
85:65:28:8e:a8:80:e7:a2:4f:a1:15:2f:9e:66:fa:ae:21:a9:
32:a5:32:3d:99:0d:4b:40:c5:c4:9e:f7:b6:f8:8f:a4:55:28:
32:f0:ba:86:36:0a:a2:93:28:af:3b:ff:4f:61:d3:fc:f3:3c:
93:06:a3:1b:32:85:79:77:8e:cf:5f:d6:21:29:60:a6:39:6e:
e0:09:2f:5c:fb:f9:dc:a4:e8:b3:a7:89:bc:80:06:f5:97:7e:
eb:01:7b:e3:33:5e:50:bf:b0:52:c0:09:1b:79:bc:5f:79:f5:
33:e2:5f:4a:01:4b:39:8e:5d:2e:46:ae:cc:07:f6:ea:e8:4b:
e3:ab:22:48:d0:be:a4:7a:e0:36:6f:c5:83:de:6d:6c:31:f1:
b8:d3:6b:93:b5:ac:ac:c5:aa:eb:67:85:95:d3:09:2c:72:3e:
d3:0b:1d:44:c9:bf:28:44:a2:94:48:67:ee:83:cd:36:c3:99:
5c:b1:92:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ08KoNNhXNEaxexV4oybBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNDgxYzA5OGE2NDkyNjUyOTFkNDAyZjVmMDJmYzQzZGRh
MGZjOGMwHhcNMjUwNzI3MDMwMTExWhcNMjUwNzI4MDMwMTExWjAzMTEwLwYDVQQD
EyhiMDhjMGI4ZjBkNDEwOGFmNWNiY2E5MGZjNTczOWNkZWRiMjczNjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIjRBS5JQyRlsIRlVHYg72IYGE3b
TcRZjjgQdD4Ws5KkKLa+2fTCU0a5GMLZy6pvhKtvXO6VwopOoKqYEDkAJe4xDj7U
yu3eOGWiMP2hiNARz5pUXTDSX2pna1wqJv/lfpUuo+rwnzxysv2/jzHQ9P8eqEwP
W9Z3FnYnJAOf2VzGW1ZrTg7saozXGomrzCzd3Iz2XQZrqwEXTOcXEnv66QX5WHee
h6tB9wmWMvvmTGfiKM18omTfgb16M0aoQ4DgEdbX4IDVMPjxO4jJgvXN7p++5O16
q9usBTNL0M1xZkrjm75r2OXZx/SS+uASRFCqjJNG6zNfbmlvmO09BY5v4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCMC48NQQivXLypD8VznN7bJzYEMB8GA1UdIwQY
MBaAFJ5IHAmKZJJlKR1AL18C/EPdoPyMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtnY0NZcGtrbVVwSFVBdlh3TDhROTJnX0l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9lNjQxNjktZDJiZC00NDk0LWIxZjkt
ZDY5ODU3ZWY3ZDFhLzEvbmtnY0NZcGtrbVVwSFVBdlh3TDhROTJnX0l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9lNjQxNjktZDJiZC00NDk0LWIxZjktZDY5ODU3ZWY3ZDFh
LzEvbmtnY0NZcGtrbVVwSFVBdlh3TDhROTJnX0l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjO7TbWQN
gMFHG6kTWlX0nOgFkbEfotSBqLkAWbp4r2s4lLLzaKxtHXqk2Z0Ty+xHtVqrvHFh
Aq1oCwZvmz9I905u5a8J+qIchWUojqiA56JPoRUvnmb6riGpMqUyPZkNS0DFxJ73
tviPpFUoMvC6hjYKopMorzv/T2HT/PM8kwajGzKFeXeOz1/WISlgpjlu4AkvXPv5
3KTos6eJvIAG9Zd+6wF74zNeUL+wUsAJG3m8X3n1M+JfSgFLOY5dLkauzAf26uhL
46siSNC+pHrgNm/Fg95tbDHxuNNrk7WsrMWq62eFldMJLHI+0wsdRMm/KESilEhn
7oPNNsOZXLGSVw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:47:56 2025 by rpki-client