Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
File: nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft (raw, json)
Hash identifier: pDfkqU3fMlzUxnldcpPY+fBlEJNGebHAHVaKZpM2JKs=
Subject key identifier: 19:A8:BB:89:C8:12:75:8B:EC:75:4D:15:46:65:08:D0:A8:B3:E6:E7
Authority key identifier: 9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
Certificate issuer: /CN=9e42ca46688a837b575234ce6a1a326587d6c204
Certificate serial: 01984AAEE9BD39E89BE8FE8F8FB1A97ACECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
Manifest number: 10A5
Signing time: Sun 27 Jul 2025 07:00:33 +0000
Manifest this update: Sun 27 Jul 2025 07:00:33 +0000
Manifest next update: Mon 28 Jul 2025 07:00:33 +0000
Files and hashes: 1: 2sz7XXaQR044rc-q4fD0WIzUxYQ.roa (hash: pi07prhyU4hZ/cG1dB+HetMAgpuPmtLhNCb2plULwQE=)
2: D2HSpId2VYXPjhlDPg7eWeC18Pw.roa (hash: UXPvVbmh0MzKjV4UFrcu58vEq8RZqO0eg1YthASI72I=)
3: UnUG9yNZwHFtxPW6hAKjubIbusM.roa (hash: xsmRUWemFAWw0xMxDEpqyiLbWsqfijBX0AOIJJiaM5U=)
4: nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl (hash: zdu0f1XnZ9o4DCxtgAihso7upKNvZnt6rSBGIBuPH+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:e9:bd:39:e8:9b:e8:fe:8f:8f:b1:a9:7a:ce:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e42ca46688a837b575234ce6a1a326587d6c204
Validity
Not Before: Jul 27 07:00:33 2025 GMT
Not After : Jul 28 07:00:33 2025 GMT
Subject: CN=19a8bb89c812758bec754d15466508d0a8b3e6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:42:e7:e9:9f:ab:2c:e2:f5:da:6b:cf:9f:c3:
98:5f:cb:1b:f1:56:f3:de:07:e5:61:f3:97:a4:c5:
3d:45:a3:85:a8:32:84:d3:bc:82:a5:30:14:cd:35:
2b:40:d6:ec:b6:65:ad:b6:81:50:60:2c:7d:d3:53:
2a:cd:c7:bc:1e:14:80:f2:bf:d3:cd:1b:09:4d:5d:
49:0f:3a:79:3f:f4:fa:86:de:d4:71:27:e9:ff:dc:
14:3c:0c:d9:de:1c:cc:75:e7:f6:23:06:78:0c:f2:
93:82:b0:18:17:fe:b0:84:70:cf:85:f6:f5:3d:9b:
c3:00:59:fd:71:c7:0e:57:95:1c:92:aa:d0:b3:a2:
90:fe:b1:d8:3e:5c:6d:b9:3c:31:a6:20:46:14:6a:
86:3a:b3:ab:11:eb:0a:21:52:d5:3b:0a:68:14:c7:
19:bc:bc:90:d0:29:1a:31:8c:9e:cb:fd:d0:26:59:
d3:bb:4e:80:ce:d6:1d:9c:68:f1:69:a7:b7:1d:fc:
4b:46:b7:e5:3c:07:5b:28:4e:74:53:af:88:49:23:
10:ed:17:1e:c9:33:8d:1a:c2:00:7f:fe:a5:b4:9c:
22:66:e1:d1:24:65:21:4a:8d:cb:a3:7c:3d:c1:8c:
2a:cb:3e:76:59:6c:19:fc:ac:8e:9a:54:fa:13:af:
21:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A8:BB:89:C8:12:75:8B:EC:75:4D:15:46:65:08:D0:A8:B3:E6:E7
X509v3 Authority Key Identifier:
keyid:9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:f3:54:cb:27:69:87:aa:13:43:55:4e:ba:e5:e0:4c:43:63:
40:59:2d:f1:7f:aa:75:8d:c1:11:78:96:10:18:6e:20:7b:d4:
a5:89:38:a7:48:6f:16:ca:ff:11:ba:40:ee:35:b4:bf:86:6a:
0c:4b:08:4a:1c:9e:6f:5a:e2:9b:6d:c3:9c:ce:91:ef:b9:ec:
d7:e4:bd:3e:dd:dd:ca:d3:d3:9d:7b:a4:b6:30:60:66:86:21:
00:8a:26:ae:dc:58:6c:3d:7e:ce:8e:85:0b:8f:e9:56:ba:d5:
64:9b:b1:6f:19:c7:fc:16:62:9a:44:4c:31:54:b7:30:ef:17:
86:e1:8f:9a:cc:95:2b:1c:c8:97:9c:53:70:d9:bb:bf:ae:c6:
eb:3c:f3:5e:fd:19:ea:b3:91:93:ce:49:0f:b1:05:44:29:e4:
5d:03:26:c8:8b:10:67:fd:c3:b0:94:a9:4e:1c:1b:57:56:ee:
b5:d2:19:08:83:92:de:a4:5f:4a:9f:e2:2d:5f:21:af:4c:43:
81:5e:1d:c5:e1:ef:f5:88:f9:5d:1d:db:17:74:aa:d3:33:e8:
b0:dd:62:ad:28:43:ec:e1:32:fc:5e:fc:fe:ed:8d:75:ba:18:
de:d2:00:d8:c9:dc:07:da:0a:46:8e:87:70:84:4b:1e:a2:05:
68:2e:02:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKrum9Oeib6P6Pj7Gpes7LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNDJjYTQ2Njg4YTgzN2I1NzUyMzRjZTZhMWEzMjY1ODdk
NmMyMDQwHhcNMjUwNzI3MDcwMDMzWhcNMjUwNzI4MDcwMDMzWjAzMTEwLwYDVQQD
EygxOWE4YmI4OWM4MTI3NThiZWM3NTRkMTU0NjY1MDhkMGE4YjNlNmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokLn6Z+rLOL12mvPn8OYX8sb8Vbz
3gflYfOXpMU9RaOFqDKE07yCpTAUzTUrQNbstmWttoFQYCx901Mqzce8HhSA8r/T
zRsJTV1JDzp5P/T6ht7UcSfp/9wUPAzZ3hzMdef2IwZ4DPKTgrAYF/6whHDPhfb1
PZvDAFn9cccOV5UckqrQs6KQ/rHYPlxtuTwxpiBGFGqGOrOrEesKIVLVOwpoFMcZ
vLyQ0CkaMYyey/3QJlnTu06AztYdnGjxaae3HfxLRrflPAdbKE50U6+ISSMQ7Rce
yTONGsIAf/6ltJwiZuHRJGUhSo3Lo3w9wYwqyz52WWwZ/KyOmlT6E68hLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmou4nIEnWL7HVNFUZlCNCos+bnMB8GA1UdIwQY
MBaAFJ5CykZoioN7V1I0zmoaMmWH1sIEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtMS1JtaUtnM3RYVWpUT2Fob3laWWZXd2dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9lZTI3OTMtYTBjOS00MmRjLWE2YTIt
MzI5YmEzODhiN2NmLzEvbmtMS1JtaUtnM3RYVWpUT2Fob3laWWZXd2dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9lZTI3OTMtYTBjOS00MmRjLWE2YTItMzI5YmEzODhiN2Nm
LzEvbmtMS1JtaUtnM3RYVWpUT2Fob3laWWZXd2dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcvNUyydp
h6oTQ1VOuuXgTENjQFkt8X+qdY3BEXiWEBhuIHvUpYk4p0hvFsr/EbpA7jW0v4Zq
DEsIShyeb1rim23DnM6R77ns1+S9Pt3dytPTnXuktjBgZoYhAIomrtxYbD1+zo6F
C4/pVrrVZJuxbxnH/BZimkRMMVS3MO8XhuGPmsyVKxzIl5xTcNm7v67G6zzzXv0Z
6rORk85JD7EFRCnkXQMmyIsQZ/3DsJSpThwbV1butdIZCIOS3qRfSp/iLV8hr0xD
gV4dxeHv9Yj5XR3bF3Sq0zPosN1irShD7OEy/F78/u2NdboY3tIA2MncB9oKRo6H
cIRLHqIFaC4CrQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:35:10 2025 by rpki-client