Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
File: nkVus5ycwGznHHdUoD8_PwCSgd0.mft (raw, json)
Hash identifier: Q9/gnV0B1eY952mU5pIqVyvncacAOjEyQKSvA8uArGw=
Subject key identifier: D4:82:E4:60:87:93:AB:B3:55:21:AC:1B:70:05:25:A5:1E:FD:D0:05
Authority key identifier: 9E:45:6E:B3:9C:9C:C0:6C:E7:1C:77:54:A0:3F:3F:3F:00:92:81:DD
Certificate issuer: /CN=9e456eb39c9cc06ce71c7754a03f3f3f009281dd
Certificate serial: 01984B5366E73E379D1392D0B4DFE3312267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkVus5ycwGznHHdUoD8_PwCSgd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 10:00:13 +0000
Manifest this update: Sun 27 Jul 2025 10:00:13 +0000
Manifest next update: Mon 28 Jul 2025 10:00:13 +0000
Files and hashes: 1: 0e3XvmLgCCLyXX2Pnl1oUQprG1Y.roa (hash: FMORsyXFiyuBPfP/wfzNQt83A1mlYj2dL5G6obhc0aU=)
2: nkVus5ycwGznHHdUoD8_PwCSgd0.crl (hash: k2jQEdYo5gDMcKHx30AYlY+KTscs447p6w/ukrGyHZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkVus5ycwGznHHdUoD8_PwCSgd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:66:e7:3e:37:9d:13:92:d0:b4:df:e3:31:22:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e456eb39c9cc06ce71c7754a03f3f3f009281dd
Validity
Not Before: Jul 27 10:00:13 2025 GMT
Not After : Jul 28 10:00:13 2025 GMT
Subject: CN=d482e4608793abb35521ac1b700525a51efdd005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b5:8e:a4:6b:ae:aa:23:54:00:bb:02:96:ee:
11:64:b6:02:67:41:33:82:7f:04:15:3c:00:b9:f5:
32:ba:ce:a8:10:48:fc:4d:5f:63:a6:be:52:2f:76:
b7:ba:05:78:10:e7:b9:8a:d7:dd:88:8d:bb:ff:84:
6e:52:e3:05:0a:75:46:3a:cb:e6:e8:55:02:ca:fe:
34:ba:47:21:66:50:f9:ce:f6:f0:72:03:6e:45:92:
dd:9e:3b:7d:9b:81:3a:76:fe:36:a5:1b:9b:ea:5a:
cf:7f:eb:0c:bd:12:68:a5:98:c0:f6:47:6e:01:ba:
42:92:9a:15:ad:bc:3c:f2:02:68:c1:c8:aa:94:4f:
28:52:76:5f:af:7b:a3:5a:e7:ce:a6:bc:87:46:27:
f8:79:ea:aa:6d:7d:52:a3:24:19:eb:18:19:9b:51:
69:11:1f:e8:0c:7b:31:e2:6e:99:0b:77:8a:bf:2a:
88:19:68:11:f7:58:22:07:6c:94:bf:17:a6:af:67:
3c:f2:11:9f:17:64:9c:6d:33:ae:34:cb:80:0d:d4:
14:89:7e:7a:fc:99:3b:9f:3d:a1:78:52:59:d1:c6:
ff:9e:57:ad:fb:72:b8:bf:a6:ee:a1:df:aa:22:bc:
98:ef:2d:1f:75:56:1c:54:39:31:34:32:61:67:34:
fb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:82:E4:60:87:93:AB:B3:55:21:AC:1B:70:05:25:A5:1E:FD:D0:05
X509v3 Authority Key Identifier:
keyid:9E:45:6E:B3:9C:9C:C0:6C:E7:1C:77:54:A0:3F:3F:3F:00:92:81:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkVus5ycwGznHHdUoD8_PwCSgd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12c712-0c6e-4fb5-90d9-c1f9158243ea/1/nkVus5ycwGznHHdUoD8_PwCSgd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:f8:aa:ca:f6:19:a1:27:aa:67:58:0f:8e:83:df:86:24:f8:
bc:83:2b:a3:2e:b9:af:da:4a:25:5b:8f:e1:c7:8a:09:f0:a3:
d1:ce:13:08:8e:2c:e4:6b:bf:85:07:5d:fb:92:0e:78:e8:4e:
42:3c:22:3a:20:e6:63:50:9d:02:46:18:77:a8:c3:fe:6a:0f:
51:c8:a8:35:da:1d:05:79:7f:09:9f:a4:6f:69:69:2d:6c:8e:
55:3d:8c:82:68:9a:fb:59:03:5c:84:98:2a:ef:47:4a:74:7e:
37:77:e8:80:6e:1d:b2:ce:5d:cb:d5:b1:1f:18:31:83:d1:46:
43:76:ae:aa:75:32:c6:45:c5:54:a8:02:4f:c3:aa:6d:95:b7:
0b:91:05:db:12:44:88:ee:4c:03:8c:21:7d:2f:f6:ca:4d:6f:
a4:78:89:ce:dd:8a:22:fe:12:b4:5d:57:b0:3d:00:c2:6c:1a:
f2:9f:94:bd:0d:8d:d5:38:50:12:c4:8a:2f:2e:b5:a1:a0:d2:
af:21:e4:4f:b5:81:bc:c5:03:ca:bb:fa:2c:d2:e6:ef:99:74:
15:16:3b:1c:da:5b:bc:8e:63:d1:6f:db:54:32:b1:ec:29:50:
3c:d8:11:2b:6c:77:77:a6:d1:74:86:70:47:63:a9:80:5e:6b:
a9:af:a8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:04:33 2025 by rpki-client