Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
File: nKihMlGaJClJSXNjuMqjPnLGc_g.mft (raw, json)
Hash identifier: cf6qGDkKrsrMlAclpSbDVBbvUaPZd+j1tW6QBQAdkMY=
Subject key identifier: B0:06:84:80:F9:2C:44:97:E9:7E:05:C2:6F:A9:AA:E4:18:5F:B9:80
Authority key identifier: 9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
Certificate issuer: /CN=9ca8a132519a242949497363b8caa33e72c673f8
Certificate serial: 0198499C3D2DD37C2A4009A05DEFD41AD6FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
Manifest number: 1000
Signing time: Sun 27 Jul 2025 02:00:32 +0000
Manifest this update: Sun 27 Jul 2025 02:00:32 +0000
Manifest next update: Mon 28 Jul 2025 02:00:32 +0000
Files and hashes: 1: dXm9nDAbHEfPr8e0rvdta5vcQCQ.roa (hash: ZAX5/DrLWdB1icFKrgXw3Y2Wbffkldc6zIYnws0ruBM=)
2: iRubAGtbRFzHiw3kU73WMgNN_Ew.roa (hash: zVFcmjx3cq29/V7ruFQJSBuo9AC0OuJEahRAn89+q2w=)
3: nKihMlGaJClJSXNjuMqjPnLGc_g.crl (hash: ZsxSpPvcAnQQsz/UVF+y9mWIZkhXEoahoZqGj7ptTLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:3d:2d:d3:7c:2a:40:09:a0:5d:ef:d4:1a:d6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca8a132519a242949497363b8caa33e72c673f8
Validity
Not Before: Jul 27 02:00:32 2025 GMT
Not After : Jul 28 02:00:32 2025 GMT
Subject: CN=b0068480f92c4497e97e05c26fa9aae4185fb980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:64:94:ba:b5:9c:ef:e8:06:62:64:f6:45:03:
a2:f7:88:48:3a:81:74:7b:0c:22:cd:f9:87:56:b6:
41:e5:4e:a5:57:ee:88:a2:01:64:6d:53:fe:9b:6b:
8c:b1:5a:28:bc:94:c5:48:17:8d:32:f1:2b:f7:1c:
a4:e8:d7:8a:eb:9c:46:b7:b7:4c:f2:07:ab:a7:b4:
87:c1:29:ea:a8:fa:e3:af:12:25:ab:a9:a6:3d:a2:
75:3e:73:d0:16:bd:62:49:19:2a:6f:f5:79:fc:fd:
e8:79:0d:69:6d:9d:79:66:98:f4:4d:76:c7:27:7a:
d7:f1:21:88:c5:1f:5a:d4:e5:13:7f:91:32:05:3e:
42:a0:1c:bc:0d:51:e8:3c:47:9e:ef:7f:9f:7a:01:
b5:6c:a4:f1:0f:44:55:f5:86:37:de:f1:1b:4b:a3:
63:79:e9:71:76:2d:62:1b:a4:46:10:00:c3:e6:9e:
99:e2:08:63:93:c3:71:9f:90:23:8d:92:c2:98:0c:
bc:48:2d:c5:36:f4:3e:b2:20:3c:8c:04:03:0d:a7:
b6:76:7f:6e:aa:aa:d1:38:4f:9c:fe:02:72:f9:28:
d7:69:3b:ab:34:b1:31:61:37:d7:bc:80:7a:d5:e9:
13:c9:a6:c3:6a:f1:92:a4:39:19:b0:85:31:e3:5d:
97:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:06:84:80:F9:2C:44:97:E9:7E:05:C2:6F:A9:AA:E4:18:5F:B9:80
X509v3 Authority Key Identifier:
keyid:9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:d9:d5:60:3e:59:62:d9:76:2c:79:ef:aa:28:0c:4f:27:68:
f6:d4:4f:ff:2a:ad:bf:78:de:35:97:85:62:68:61:48:3a:58:
22:fb:66:24:bc:ff:39:1c:97:55:b0:8c:fe:69:72:16:41:ca:
60:a2:72:e6:1d:6a:eb:28:35:c6:d1:dc:4a:84:53:11:3b:02:
24:94:82:c4:a5:82:3e:eb:e0:c8:81:7d:c6:35:a9:a0:42:de:
03:b3:99:5d:81:c7:d1:d3:5c:24:dc:74:f7:d9:93:00:56:09:
cd:89:5f:58:43:fa:d8:65:a8:8d:a2:3e:c1:45:7a:ac:ee:3e:
68:49:a3:20:10:de:56:b4:89:92:79:fd:10:16:e0:07:9f:fc:
25:35:ec:f4:f5:2d:d1:55:f2:c8:16:98:17:8c:f4:7a:76:08:
ab:f8:2b:50:88:b3:a6:4e:6b:38:f8:6d:a2:b9:09:ff:ae:28:
aa:95:f0:f3:6e:62:a3:cb:8f:21:92:62:50:30:7b:17:12:68:
1f:67:a2:70:30:bc:b7:f4:70:d5:7a:31:e4:cd:78:74:76:54:
bf:06:88:31:6b:fb:00:b1:0b:9a:04:97:a4:e4:c9:02:59:20:
23:f9:19:b4:26:cb:5b:ee:81:b8:f3:26:2a:37:f1:4f:d4:f0:
cf:d3:a2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:28:14 2025 by rpki-client