Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft
File: nk-ubSwl3V8vsWtPvqKE5mWMEro.mft (raw, json)
Hash identifier: IEwUMYPVL2SBN6fbV3SGa20X+G7Yuei9EtPhHqdyFLg=
Subject key identifier: 96:09:BE:A9:A7:44:A4:90:AA:81:FB:CA:CD:D2:88:4C:B7:EA:53:2E
Authority key identifier: 9E:4F:AE:6D:2C:25:DD:5F:2F:B1:6B:4F:BE:A2:84:E6:65:8C:12:BA
Certificate issuer: /CN=9e4fae6d2c25dd5f2fb16b4fbea284e6658c12ba
Certificate serial: 019849D2DED70AEB3F026CD3E4DE61F0992C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nk-ubSwl3V8vsWtPvqKE5mWMEro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft
Manifest number: 0FFC
Signing time: Sun 27 Jul 2025 03:00:12 +0000
Manifest this update: Sun 27 Jul 2025 03:00:12 +0000
Manifest next update: Mon 28 Jul 2025 03:00:12 +0000
Files and hashes: 1: FLJa1uRgHO4pR545s0EjhCR4g9I.roa (hash: 5Qe+7lHXv9Hk16E4Tqlbe5q64TOWj9YSYqv2nWFzqeY=)
2: nk-ubSwl3V8vsWtPvqKE5mWMEro.crl (hash: 5bZx/YYxaxxjtp6MezRJPzCRLuIOGJWGCNIDVoD1X7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft
rsync://rpki.ripe.net/repository/DEFAULT/nk-ubSwl3V8vsWtPvqKE5mWMEro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:de:d7:0a:eb:3f:02:6c:d3:e4:de:61:f0:99:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4fae6d2c25dd5f2fb16b4fbea284e6658c12ba
Validity
Not Before: Jul 27 03:00:12 2025 GMT
Not After : Jul 28 03:00:12 2025 GMT
Subject: CN=9609bea9a744a490aa81fbcacdd2884cb7ea532e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:48:7f:e5:9e:94:46:d2:01:87:78:96:46:7b:
59:a2:fa:83:5e:e1:e4:b9:dd:55:e7:7c:c9:d3:dc:
cf:84:79:be:7a:0f:5f:e5:95:30:9e:14:02:77:da:
23:4e:8a:82:ca:22:7f:0a:73:63:2e:27:d7:b2:a0:
3a:8a:65:60:0c:9a:fc:01:1e:3d:30:6f:f5:32:30:
d0:61:cf:fb:be:3d:4f:2f:9c:8f:a8:a7:44:9c:21:
64:5c:9a:f3:a1:c6:d4:54:c7:c6:e1:bf:d1:ed:3a:
84:04:0a:52:10:49:99:4a:83:e9:5a:f5:a2:07:38:
c3:e9:3b:ab:b4:13:dc:7d:97:29:d5:ea:52:27:43:
46:11:11:8a:a9:b2:ec:98:cf:36:9a:69:44:47:8b:
ee:d8:55:50:ba:a0:15:56:56:04:dc:83:05:b1:8c:
c1:39:dc:43:dc:29:9e:93:d4:31:92:e4:4f:69:30:
0e:10:25:26:d8:38:54:0a:37:1c:fc:13:88:e0:e3:
e3:f9:0c:a0:8d:a8:91:da:f9:12:36:32:e3:a1:d2:
25:a7:1d:fa:fd:b7:8a:f8:05:af:81:57:8e:0e:83:
38:85:fa:4d:ca:e4:43:3c:83:e3:75:27:4b:66:f8:
7f:2d:ed:76:8a:84:1e:5b:c4:e4:b2:85:bc:1a:e8:
b9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:09:BE:A9:A7:44:A4:90:AA:81:FB:CA:CD:D2:88:4C:B7:EA:53:2E
X509v3 Authority Key Identifier:
keyid:9E:4F:AE:6D:2C:25:DD:5F:2F:B1:6B:4F:BE:A2:84:E6:65:8C:12:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nk-ubSwl3V8vsWtPvqKE5mWMEro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:be:40:95:84:4b:c8:ae:fc:be:06:bb:22:68:43:a3:47:8a:
ee:f0:c5:2d:24:8c:79:df:97:1c:35:4a:f8:85:19:b7:f8:fd:
d5:eb:b8:f2:d6:22:4d:2e:e5:18:c6:3d:3d:90:c9:1e:14:8e:
0c:40:ba:83:66:2c:88:79:23:50:5f:bf:5f:17:71:ab:7e:87:
3d:49:d3:41:95:3c:51:67:e9:39:25:11:e3:ff:a6:1b:e2:5b:
a5:b4:52:d1:0a:be:ba:02:31:63:d9:95:a9:92:ed:4d:eb:2f:
72:12:8b:13:90:7c:a6:9f:c5:7f:98:27:c7:5e:d7:ac:e5:35:
ee:3d:e2:42:87:fc:4a:06:b2:c6:39:3b:ad:4e:8a:77:9d:7f:
48:c5:1f:82:ad:8f:06:3c:6d:e6:c2:d7:10:50:57:70:63:5a:
ad:08:ba:b2:85:90:02:5f:6a:a5:56:b6:57:62:13:47:a3:62:
1d:4c:f4:c1:7b:6a:91:87:4d:0c:3b:79:50:29:7a:85:c9:f8:
88:3d:d7:29:8d:45:28:13:4a:4d:0d:5e:fb:88:8e:2d:5e:92:
4d:95:bf:7a:30:44:ed:fa:92:df:7d:a0:dc:ef:6f:60:b8:c7:
a1:6b:ab:d4:e6:e5:c5:1c:4c:52:8b:17:89:42:fe:1d:07:b2:
69:91:87:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:29:19 2025 by rpki-client