Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
File: nkdckgJgbmZn6Up3npA9tpelkCU.mft (raw, json)
Hash identifier: Z8Cqo//bqogLdrrFIPi38fTJg2CcpCMdnje57huiXl8=
Subject key identifier: 99:6F:62:7E:BB:59:8E:4A:04:FC:7B:E8:7C:B5:F5:88:54:82:15:D5
Authority key identifier: 9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25
Certificate issuer: /CN=9e475c9202606e6667e94a779e903db697a59025
Certificate serial: 0198469B441A33E028DE3218FF421612DB83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
Manifest number: 04E3
Signing time: Sat 26 Jul 2025 12:00:37 +0000
Manifest this update: Sat 26 Jul 2025 12:00:37 +0000
Manifest next update: Sun 27 Jul 2025 12:00:37 +0000
Files and hashes: 1: mR809BzawsocXcAGIqvH25pMqQs.roa (hash: YeYkP56hsu5/L5Jhs1MWZsAFAw78/bEVuYQMAvS7nO4=)
2: nkdckgJgbmZn6Up3npA9tpelkCU.crl (hash: OgJCs2ilLcEqEnl6wB6yUV9t+KZ+II2Q5HHFciNW+P0=)
3: nmSg0-EK5kx_OFxZ-x2rJeid1NU.roa (hash: 8HytWsFdzKFviKTtfyGmrk77Cg5YhpoczU6o9u5sUno=)
4: qxkGe1Ztq8AC8Xy-vkslbb-4Yjc.roa (hash: Vk6as9yIInb4okYrwyyw/9HVRxpOcsbPGA6Y1uEJnuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:44:1a:33:e0:28:de:32:18:ff:42:16:12:db:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e475c9202606e6667e94a779e903db697a59025
Validity
Not Before: Jul 26 12:00:37 2025 GMT
Not After : Jul 27 12:00:37 2025 GMT
Subject: CN=996f627ebb598e4a04fc7be87cb5f588548215d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:58:de:4c:4b:10:12:bb:02:a3:24:98:b2:49:
e4:d2:ee:ef:0b:55:8c:64:6f:08:13:c7:27:04:00:
e7:57:84:69:2c:68:24:c8:eb:a2:d6:ec:40:cb:93:
37:85:5c:0e:bc:3d:22:03:bd:5b:fe:b0:43:22:1f:
ef:30:fb:e2:7b:48:3e:13:5b:9e:dd:8b:05:eb:ea:
f0:0e:04:39:ea:4f:9e:20:16:8a:6c:67:30:b9:1f:
93:76:70:dd:4d:d4:9f:db:39:c0:ce:cb:e1:b2:36:
70:b2:0b:4e:78:7d:3d:08:85:17:a9:07:46:b2:e9:
b7:5f:ce:1e:79:9b:98:33:92:e2:73:39:47:7c:77:
c4:50:cc:74:f1:e4:52:2c:31:98:2f:1e:a5:48:85:
d6:23:0a:d4:2d:24:ff:af:6a:4c:d4:c7:72:0f:6f:
b6:05:41:11:e6:c5:66:79:95:33:93:ba:35:77:0c:
e9:8e:42:27:25:4f:ec:09:d3:ea:5c:f9:08:82:ef:
28:bd:35:6f:09:ec:ee:41:bf:52:3b:ec:52:42:4d:
43:f6:bc:7f:da:c2:7b:76:88:1b:10:ae:63:e1:d5:
86:84:40:b2:08:6f:c7:c0:44:4d:42:ec:63:6a:ed:
af:d7:32:1f:4b:6f:64:97:b6:99:70:24:e3:c2:0f:
5a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6F:62:7E:BB:59:8E:4A:04:FC:7B:E8:7C:B5:F5:88:54:82:15:D5
X509v3 Authority Key Identifier:
keyid:9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:96:ca:0a:ff:f2:70:c3:26:2b:52:74:46:8d:48:31:e1:43:
a1:91:53:b7:60:44:e6:e5:41:df:02:5e:1e:64:9b:89:4c:56:
e6:ca:91:87:88:08:dc:4e:e6:e6:ed:9f:ef:00:f8:fe:55:05:
0b:32:ef:62:b5:3d:2d:db:1b:5d:89:0d:7b:c0:29:4b:2f:7c:
a1:a4:4a:91:24:95:30:b9:d0:08:b3:0e:95:a5:d7:d3:96:ce:
c9:2f:ec:7d:78:0d:36:bd:de:97:b7:6b:b4:b1:0d:67:8f:71:
d9:7d:66:23:d7:68:7c:b8:bd:85:cc:79:b6:63:67:c1:aa:01:
6a:aa:46:a2:24:00:29:fa:c1:d6:31:3c:31:f1:21:fe:82:9d:
94:f8:48:02:c8:0f:3c:2d:67:21:9c:46:86:7f:56:f7:04:05:
89:6c:d1:c7:68:30:4d:c0:01:6e:bd:d9:fa:c2:54:b3:81:ee:
fd:77:28:10:53:a2:34:67:01:36:59:c8:dc:c3:09:a8:a9:bb:
d1:35:86:f3:d9:19:06:c7:2b:40:0b:f7:7e:f1:0a:e9:c0:67:
d3:6f:57:b5:08:ba:0c:c3:43:8f:ec:fa:d5:88:2f:a8:f2:e2:
94:53:8b:3f:9c:24:7f:78:16:d7:6b:c1:eb:93:0d:a0:b2:49:
29:5d:2b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:01:44 2025 by rpki-client