Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
File: NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft (raw, json)
Hash identifier: jn1COLXjCB+GNT8NUtsW5/3aG2tpAEh4ZwnRgIKTOhM=
Subject key identifier: 8E:C6:61:CC:AE:AC:6F:81:02:07:E2:0C:A1:B9:B4:6C:8A:C2:C6:E5
Authority key identifier: 34:A6:3D:C8:61:20:E8:7F:4C:FF:8C:59:AF:32:61:E6:E1:29:2F:D9
Certificate issuer: /CN=34a63dc86120e87f4cff8c59af3261e6e1292fd9
Certificate serial: 019846647D459761EF6F6E26F80E807892FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
Manifest number: 0F36
Signing time: Sat 26 Jul 2025 11:00:47 +0000
Manifest this update: Sat 26 Jul 2025 11:00:47 +0000
Manifest next update: Sun 27 Jul 2025 11:00:47 +0000
Files and hashes: 1: MjfPB6z00e-ff7RNJtIi20gDUz8.roa (hash: Cpw1zTo9jE0fDsY0ux+7L1DgxTy3Nnzm8fXHw47pw5Q=)
2: NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl (hash: GeiVZdiLuLxMCRvTKAfpUtWe5NFxeuKA4VVI60qhf7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:7d:45:97:61:ef:6f:6e:26:f8:0e:80:78:92:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34a63dc86120e87f4cff8c59af3261e6e1292fd9
Validity
Not Before: Jul 26 11:00:47 2025 GMT
Not After : Jul 27 11:00:47 2025 GMT
Subject: CN=8ec661ccaeac6f810207e20ca1b9b46c8ac2c6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9d:9b:59:93:c4:72:7e:d4:e5:49:f7:4a:68:
1b:5e:c1:99:7a:17:d6:2a:f5:fe:ba:2d:03:9a:48:
02:04:1d:be:23:f8:6c:2c:c8:32:9e:36:a3:7d:55:
d2:c6:97:89:76:87:04:41:cc:af:c5:e8:ee:09:cc:
27:d1:d4:72:1b:63:1e:b5:91:29:a5:ee:1f:cf:10:
bb:f7:32:9c:8d:f1:74:bd:24:21:af:8d:49:f5:97:
5b:eb:6b:a3:0c:13:16:f8:ce:cc:75:b2:dd:78:58:
19:05:8b:db:e6:3b:95:5b:25:69:86:7e:34:ac:bf:
da:b2:c6:82:f7:21:70:5f:ab:9f:58:f5:09:16:fc:
4e:b5:88:0c:44:75:96:dd:97:12:64:e0:bc:b9:9f:
b6:c3:5f:ff:bf:72:c7:4b:5e:9f:ce:4b:e2:96:8b:
ca:45:e6:6c:54:1d:bd:cb:ad:57:59:1e:a3:53:6a:
05:2a:0f:bd:41:52:fe:6c:4c:99:59:40:1a:a0:73:
9e:15:de:72:db:bf:37:f5:34:12:58:7c:bf:ed:44:
c0:56:75:99:ed:8c:93:ff:8b:b3:59:84:80:e7:08:
74:a6:a3:c0:1e:a6:f7:45:28:c2:a1:5e:8e:4a:f5:
ed:76:69:8e:7e:71:39:22:a2:03:e2:f5:21:48:b3:
2e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C6:61:CC:AE:AC:6F:81:02:07:E2:0C:A1:B9:B4:6C:8A:C2:C6:E5
X509v3 Authority Key Identifier:
keyid:34:A6:3D:C8:61:20:E8:7F:4C:FF:8C:59:AF:32:61:E6:E1:29:2F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:cc:e9:10:a8:69:31:12:52:ac:fe:ad:85:f3:c4:29:81:3c:
15:64:f3:66:77:4a:c3:81:34:1d:5d:b9:0d:ec:49:61:eb:76:
84:83:69:1d:3c:51:4f:0d:ac:85:9b:76:05:8b:39:f0:0a:c0:
05:18:4e:1e:ae:8a:a2:60:93:59:f7:ef:7f:a1:51:92:88:1f:
b0:fc:d0:24:55:29:8b:c7:9a:52:5a:eb:5b:62:0b:4c:d0:08:
c0:dd:2a:e1:4f:97:e4:28:e0:39:99:da:c5:b4:58:19:ce:99:
97:fb:d6:5d:af:6a:b0:45:57:65:3e:91:51:31:9a:5c:05:72:
5a:91:a6:0c:b6:20:ce:af:e1:f9:85:c9:97:64:d7:70:2c:ff:
cc:9f:3a:24:d4:48:c0:9e:ad:e2:d1:23:d0:36:fa:87:c9:f0:
b6:3e:79:47:75:eb:73:a0:3e:05:ae:e5:e7:66:62:5d:1f:bb:
e5:15:55:e8:0d:00:b5:d3:55:01:e6:37:55:6e:51:6b:8f:9d:
a0:22:74:b7:fd:34:25:9a:e0:95:6f:8e:22:24:d3:c7:93:38:
52:cb:99:4f:a9:fc:52:70:ce:a6:fc:a6:c0:c7:05:80:6a:58:
40:9a:0b:78:ee:84:41:cc:f6:c7:5f:9e:6a:57:f4:c5:91:a6:
66:71:57:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:26:36 2025 by rpki-client