Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
File: nkJ08Tm9Zpqu93TWUDso2ZZje70.mft (raw, json)
Hash identifier: hlCQ94W/qWr4V5yQ8o2Hp9K2YUUr40hmviEN1s5fkQY=
Subject key identifier: 78:F3:40:3A:D9:8F:7C:1A:29:EE:B4:A9:7E:AD:5F:81:75:CB:72:8F
Authority key identifier: 9E:42:74:F1:39:BD:66:9A:AE:F7:74:D6:50:3B:28:D9:96:63:7B:BD
Certificate issuer: /CN=9e4274f139bd669aaef774d6503b28d996637bbd
Certificate serial: 019750B456A16B047FBC41DAAD51A748BFC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 18:01:25 +0000
Manifest this update: Sun 08 Jun 2025 18:01:25 +0000
Manifest next update: Mon 09 Jun 2025 18:01:25 +0000
Files and hashes: 1: j4Iq2zixx3mYag3J5EZ9oVMKB3Q.roa (hash: /Gl9L/9VfxRkLzepVwRrDXgXI17GQGF8IKxBmlZI9QI=)
2: nkJ08Tm9Zpqu93TWUDso2ZZje70.crl (hash: 6j/Vz0H1cpmnpUe+lv7iXETeq4O+Y4QOBhSwjhEuje8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 18:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b4:56:a1:6b:04:7f:bc:41:da:ad:51:a7:48:bf:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4274f139bd669aaef774d6503b28d996637bbd
Validity
Not Before: Jun 8 18:01:25 2025 GMT
Not After : Jun 9 18:01:25 2025 GMT
Subject: CN=78f3403ad98f7c1a29eeb4a97ead5f8175cb728f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:52:e5:9f:90:c2:f1:44:74:6c:67:58:7a:53:
7d:52:0f:7a:b1:2f:6a:17:37:e0:63:e7:b9:e4:55:
86:8e:4c:61:cf:23:eb:fd:4a:f9:11:47:07:12:33:
3b:e4:6f:83:05:ab:a5:8d:bb:d0:8e:07:d1:00:5e:
f4:bb:65:5f:67:f8:be:9f:79:6c:29:36:b9:0f:1d:
b4:21:97:bc:4a:eb:de:31:fe:41:0b:72:bf:c5:44:
f9:df:aa:76:d6:63:a6:cf:d6:9c:66:97:78:bb:6c:
dd:9f:b6:5c:ec:d8:60:b5:67:8a:2c:77:69:87:cb:
01:d9:06:d1:43:1a:87:c0:ea:a0:66:38:41:54:ee:
51:80:72:f1:60:a1:c8:ad:d9:2b:90:30:17:a3:de:
42:01:08:d2:b0:61:c2:a9:c9:18:93:b3:b6:2c:4e:
ba:8a:68:74:1f:27:2f:7f:fc:c0:c6:be:8b:ed:e5:
c2:46:94:6d:89:6b:77:e6:a8:98:87:61:aa:6a:fc:
fe:ca:52:28:f4:b6:1f:5e:f6:2a:3e:d1:3a:b9:bb:
39:cc:30:3c:91:4f:cf:e6:8d:64:94:49:a7:ce:51:
8c:6e:58:47:5d:71:01:0a:6e:49:4a:24:67:7e:b0:
26:8e:b0:9f:7e:e2:ac:81:7b:e5:b2:cf:39:f0:1a:
5c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F3:40:3A:D9:8F:7C:1A:29:EE:B4:A9:7E:AD:5F:81:75:CB:72:8F
X509v3 Authority Key Identifier:
keyid:9E:42:74:F1:39:BD:66:9A:AE:F7:74:D6:50:3B:28:D9:96:63:7B:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:50:78:9b:71:4a:21:d2:9d:0d:1e:e0:d0:a5:4e:dc:82:61:
8a:79:71:68:97:68:01:c4:64:df:85:ea:80:fc:43:9c:eb:c9:
71:33:59:d2:79:ef:8c:67:40:86:43:73:26:d9:12:13:b0:93:
d4:88:dc:0e:41:11:e6:2d:f4:9e:48:8f:38:80:24:c4:95:e7:
de:26:85:9b:77:35:38:5e:b9:36:a4:5a:f7:63:be:2e:cb:e6:
db:20:8e:7f:85:14:8d:4a:60:63:9a:76:ba:a7:da:77:3f:41:
bb:86:6b:f7:24:f3:ba:f0:70:7d:49:77:38:96:67:b7:d3:1f:
65:cb:2c:76:5c:17:54:df:f8:24:e7:8d:9c:67:69:bb:34:c4:
6d:7e:57:b5:eb:08:83:5e:76:04:63:e6:a7:96:75:2d:cf:69:
ec:5a:79:31:12:7f:53:b0:54:f3:81:75:e3:6b:a2:f2:72:40:
7d:a4:fb:74:5a:da:f9:21:2b:73:3b:81:0f:ce:cf:ea:55:23:
af:a2:ab:94:40:80:79:1a:85:04:bf:63:c4:8e:ab:30:0e:e7:
fc:07:bb:e7:dc:1a:51:51:33:9b:15:d6:92:ad:ce:1f:d1:73:
76:54:f1:42:b8:ac:1b:1f:fd:5d:22:f9:69:73:c3:39:a2:63:
1c:9e:b0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:16:34 2025 by rpki-client