Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
File: nkWapGAr_6LSZQumaBhFjIn8RYI.mft (raw, json)
Hash identifier: nF+PlVDgpIsqOGD6GiqHsDEOYWyM8f4xdwW9iK6YctM=
Subject key identifier: A2:42:77:CC:3E:4F:85:12:26:86:87:EA:72:59:CF:EA:48:62:AE:73
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 019835A7FEC230C8F2BB4AC4E119524BA4E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
Manifest number: 160A
Signing time: Wed 23 Jul 2025 05:00:58 +0000
Manifest this update: Wed 23 Jul 2025 05:00:58 +0000
Manifest next update: Thu 24 Jul 2025 05:00:58 +0000
Files and hashes: 1: 1ZViwBwJWukG7x8H8vOJHhjrl20.roa (hash: +aEN4SwtP07CGGNGf2sl0Ng37swdYqF9I3PWCaVNvKY=)
2: 5l7_YEP-iDlpzT3jJy_WcDYbdy0.roa (hash: T/EZxm6KOUDbBcP5LoW3SMWMDqFKAPr6qMUb20NyovQ=)
3: BvpS751y8vUXuWqwmfzJfn2h-Rk.roa (hash: KJ/6LdVihbuD7E6JKoxKY+vTCb8HPS492uKXFwv4y1I=)
4: EKZDCBFSzTnUZ-1EZg9n8EZ8oqc.roa (hash: xYPqHPCAO/XyHDtjaojjFFvTaUnv2cV0xvZkEmEN/Lc=)
5: Q8hPg5UjvdR5qe3RUKGr181TIsc.roa (hash: HQ9muwIQ/VGCuDJxXs8tCzXWThyvXdcPzV4TeZjGo30=)
6: _GnprUL9RiOSINIgt8MCDfPJSj8.roa (hash: Yrrm+IlBuBC0Z/pDmaIlkiimbDJKKuFiMeYQ+bxwX6M=)
7: _HwnYOx8loE1jVo8nfivar_tdig.roa (hash: QhMEIV71/g1ejlZrBi4D/Eo8F39EvYYIljovFNhdaUA=)
8: nkWapGAr_6LSZQumaBhFjIn8RYI.crl (hash: wIVkt054ZmyoEWiMvNN7a3UCjzBg0C2k6GmlNmDpBJo=)
9: wRQWlx5VTlfOioAPy2QXY4Uk2Xg.roa (hash: rPHBxj4mRhTnPsN1GhR6ZZjmr/wkKhGGUErpiW2+PN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:a7:fe:c2:30:c8:f2:bb:4a:c4:e1:19:52:4b:a4:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Jul 23 05:00:58 2025 GMT
Not After : Jul 24 05:00:58 2025 GMT
Subject: CN=a24277cc3e4f8512268687ea7259cfea4862ae73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8a:ff:64:28:44:f1:02:42:60:47:71:9a:f6:
bc:19:f3:71:53:a5:f2:be:68:3f:29:b6:1c:73:c9:
96:aa:2a:f7:c1:66:f2:f0:27:0e:6c:2e:2c:a0:ac:
e1:b5:4c:c9:3f:6d:25:54:82:71:d7:5e:a3:e1:d6:
dd:b1:7f:ec:a3:2a:62:8b:93:51:0a:4e:1f:d0:e1:
73:02:2e:83:d8:b3:d6:aa:82:1f:d2:9c:c9:68:12:
02:58:8e:7f:fc:2b:3e:38:0c:ae:83:bb:e3:c7:b3:
b5:b8:c8:10:8f:b0:ab:70:0d:4c:40:08:c5:e7:ca:
5c:06:a2:0b:2c:62:fa:43:74:06:3e:af:4f:70:29:
e5:0a:d3:c3:74:37:4c:20:b7:aa:10:d2:13:e9:2d:
22:c0:a7:c3:39:a9:29:57:44:03:69:b6:28:8c:00:
fb:57:ae:1a:9d:b0:0e:8c:10:e0:b6:8c:55:bf:b4:
1d:51:3b:1b:42:23:6a:d8:4a:57:4d:af:28:f2:44:
d1:e0:27:86:1d:94:0d:a5:e1:c5:8c:80:2e:7b:a8:
d9:8b:b5:92:be:79:1a:70:58:e0:4f:3d:55:f4:32:
5e:06:bc:b2:a5:4b:6b:e4:7f:6f:42:13:dd:80:e9:
c0:72:e1:82:7b:42:8a:d2:58:6b:1b:66:82:a0:68:
2a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:42:77:CC:3E:4F:85:12:26:86:87:EA:72:59:CF:EA:48:62:AE:73
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b6:c1:ed:e4:17:99:5f:54:3b:f8:3a:1d:5a:a2:62:6c:96:
0d:5f:a1:a7:42:f4:f5:1f:01:c8:6e:c6:65:56:23:c4:07:3c:
34:1c:2b:f3:14:da:dd:20:ea:95:22:24:d3:7b:75:41:17:21:
0d:3d:87:34:6b:e2:bf:a0:16:bb:b3:a0:ca:a3:11:72:7f:7b:
a5:3f:24:a8:af:f5:ff:4a:2c:20:a5:a6:e8:a5:45:f3:8e:dc:
aa:43:31:4d:b4:a0:79:39:c0:ad:f3:7d:95:45:1d:ff:13:4d:
81:72:d4:53:96:22:52:0b:ad:2a:3f:cc:55:ab:ed:1f:e0:51:
7c:b2:fb:0f:bf:93:13:91:4d:fe:63:c5:18:54:ec:1f:14:b7:
b5:2b:cb:d6:56:59:1a:3e:64:a0:bb:1b:80:f6:12:23:74:83:
fa:95:b3:b4:07:0e:4f:3a:f1:d8:95:3f:16:aa:d6:c3:5c:d3:
d0:62:41:41:e6:72:f9:6f:2d:48:52:07:de:b0:31:a4:6a:c9:
90:5b:45:8f:32:2e:b7:44:a1:e5:4f:e3:38:4f:fe:56:90:f1:
2c:57:f8:e1:77:da:db:89:e2:a9:d8:f5:81:b4:bd:61:90:6c:
a0:07:d5:0e:54:a0:4e:c3:a1:cf:4b:ce:0c:e5:87:99:b5:e6:
0c:d1:0b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:59:49 2025 by rpki-client