Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
File: nJKqU9MpCqgDeZNTNdufzD_9Kao.mft (raw, json)
Hash identifier: pnKvTMoRmVT+UgxPP1GSddt2udV5j6U7oT2DlPf6/Ac=
Subject key identifier: 9C:E4:E2:DF:76:60:44:0D:1E:87:08:9D:33:03:66:33:8A:DB:3A:3D
Authority key identifier: 9C:92:AA:53:D3:29:0A:A8:03:79:93:53:35:DB:9F:CC:3F:FD:29:AA
Certificate issuer: /CN=9c92aa53d3290aa80379935335db9fcc3ffd29aa
Certificate serial: 019854FCB309F39336D0102A0F89082ED023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
Manifest number: 02EF
Signing time: Tue 29 Jul 2025 07:01:43 +0000
Manifest this update: Tue 29 Jul 2025 07:01:43 +0000
Manifest next update: Wed 30 Jul 2025 07:01:43 +0000
Files and hashes: 1: If4EKlwd9K1sFMswbVmwiqIL9EU.roa (hash: Xi+2lm3juwWtv3l4CgI611xVpcAT1z+T6D2yne87CLU=)
2: nJKqU9MpCqgDeZNTNdufzD_9Kao.crl (hash: JYGjYh+CUn2ZQcKOpGWFBFddlQKTPgusu4NBT5pxzok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fc:b3:09:f3:93:36:d0:10:2a:0f:89:08:2e:d0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c92aa53d3290aa80379935335db9fcc3ffd29aa
Validity
Not Before: Jul 29 07:01:43 2025 GMT
Not After : Jul 30 07:01:43 2025 GMT
Subject: CN=9ce4e2df7660440d1e87089d330366338adb3a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e6:64:05:f5:b0:ce:14:55:28:3f:5b:d7:53:
d6:91:3a:51:3f:af:04:43:6c:fd:b6:27:e0:b9:2b:
50:05:6b:ed:1b:62:cd:96:80:b1:b5:83:ae:59:0a:
40:48:27:d3:fa:2e:42:9b:2a:af:a5:84:f4:3e:35:
aa:af:85:ac:17:35:5f:b5:6d:d1:fb:c6:ef:1a:fd:
79:6c:d4:c4:bb:91:0d:96:5a:cb:f9:23:18:3e:cf:
fd:d2:a0:cc:22:d4:15:f3:76:08:75:d0:0a:92:ef:
a4:ea:8b:b9:52:11:78:d8:ef:36:11:8d:5f:78:82:
1b:78:ae:63:ff:9d:f1:d6:8a:dd:93:6a:13:7b:98:
61:52:ce:bc:ec:2a:5c:ab:1e:f2:c9:0c:b5:85:d5:
58:eb:2d:0e:5c:5e:56:b1:0a:9c:04:15:d2:3e:be:
2b:e1:a9:27:74:0f:26:6a:9d:75:38:02:45:1d:af:
25:1a:b1:50:12:0b:0c:79:fe:9e:b9:25:3e:6e:d3:
df:16:62:c6:6f:30:aa:18:d8:b7:e4:3b:f1:da:51:
d1:21:7c:2a:5f:ba:37:18:8d:ee:04:83:76:82:73:
a0:64:41:a4:8d:5f:71:df:59:d1:54:33:0b:5e:d4:
e8:f8:8c:86:ce:11:5c:ca:22:cd:62:f3:17:2b:ce:
40:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E4:E2:DF:76:60:44:0D:1E:87:08:9D:33:03:66:33:8A:DB:3A:3D
X509v3 Authority Key Identifier:
keyid:9C:92:AA:53:D3:29:0A:A8:03:79:93:53:35:DB:9F:CC:3F:FD:29:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:11:39:27:be:b5:d0:0c:d2:f7:b6:b1:ac:e6:8c:9a:32:8b:
66:b1:bd:fb:02:31:25:7d:39:c0:da:e8:b0:01:de:62:e6:20:
c6:22:c2:58:01:35:d2:93:e4:3d:93:a8:d9:17:e9:89:7a:35:
e7:5f:f2:2f:a4:79:f9:4b:32:4d:1b:6f:b6:09:b8:60:73:93:
de:1d:f0:91:02:90:51:9f:e1:5b:c6:3e:75:5b:4e:db:14:a2:
71:48:32:f7:0c:15:5b:25:f4:15:07:05:7f:29:64:c2:91:56:
45:9f:fe:3d:38:86:5f:08:ab:5c:2e:f1:5a:9b:83:70:3b:ad:
03:ce:fe:37:cf:30:e5:ad:f0:1c:e9:7a:c7:2e:ca:22:7b:68:
51:a5:be:62:eb:e4:2b:c3:78:61:70:b6:fa:0f:17:54:9f:55:
7c:93:b8:9e:9d:e9:64:34:24:19:10:4d:0f:82:c1:1e:73:ee:
af:01:d5:ee:ab:b6:2a:74:cf:1e:56:1f:fd:a5:a1:fc:06:57:
f8:70:29:33:79:c8:70:96:0b:6b:b7:2a:a2:13:6f:20:02:6d:
43:26:8f:65:2d:5c:20:43:83:d2:e3:e3:ca:d6:e3:11:23:83:
ca:a0:bd:ac:32:4c:d9:48:75:0b:3a:8a:18:c2:9c:65:4d:37:
2c:e5:d2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 16:33:00 2025 by rpki-client