Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
File: nkz1EkerV_Um84ByWaeNKwJZBgM.mft (raw, json)
Hash identifier: 3brYHeuVBMq2mk1apL4+8Fw1NiAOXfWtAZ3sLQQ+urQ=
Subject key identifier: 24:57:89:CD:D2:27:CB:20:56:A5:19:98:2F:3A:1D:D6:1E:70:C9:3F
Authority key identifier: 9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
Certificate issuer: /CN=9e4cf51247ab57f526f3807259a78d2b02590603
Certificate serial: 0197499F58B8D88295D458AA72F31FA77052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 09:01:09 +0000
Manifest this update: Sat 07 Jun 2025 09:01:09 +0000
Manifest next update: Sun 08 Jun 2025 09:01:09 +0000
Files and hashes: 1: bUexMEG5KZ30YS3AFv2LLIm5VUk.roa (hash: 73jcglvdcT9moQ9QgtlZoUeROl6dwy33TWezKXRJ6GM=)
2: nkz1EkerV_Um84ByWaeNKwJZBgM.crl (hash: 5o7J2aouK4YUsRCckV02mPdtZhOFOS63HUT0iipP0Yk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:58:b8:d8:82:95:d4:58:aa:72:f3:1f:a7:70:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4cf51247ab57f526f3807259a78d2b02590603
Validity
Not Before: Jun 7 09:01:09 2025 GMT
Not After : Jun 8 09:01:09 2025 GMT
Subject: CN=245789cdd227cb2056a519982f3a1dd61e70c93f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2a:32:97:e7:7c:df:83:38:5c:06:23:0b:4f:
ff:20:ee:37:04:78:44:17:eb:4c:f3:10:ad:9c:10:
dd:4b:04:8f:aa:a8:d5:19:47:cd:3a:e8:36:c7:69:
e4:d6:b6:17:17:07:a5:4b:67:b3:8b:c9:e8:08:d6:
f5:11:8b:5d:7f:08:f3:c9:c5:d6:fb:a1:5c:c7:cd:
c0:1b:ea:dc:cc:6e:12:22:1f:a4:96:79:9a:66:46:
14:c6:fe:2d:7c:d9:72:2b:6c:b5:d7:63:a4:66:a8:
95:8c:19:50:4f:2a:c4:e1:ea:19:3a:5f:88:06:89:
cd:2b:0a:31:28:5d:bc:03:ed:67:cf:60:2c:d2:da:
6b:c1:fe:11:d4:b9:ab:a2:41:5a:38:a9:38:83:4b:
16:93:7c:15:66:2c:c8:6b:51:c1:92:93:d7:4c:9f:
ec:fc:98:bf:e2:0a:1b:7f:25:c8:5e:c0:32:22:3f:
50:64:91:cf:3d:3e:26:53:51:14:ab:b8:aa:e4:91:
fa:a4:ae:07:46:0e:2f:b1:d2:3b:09:6d:6a:90:4d:
eb:a5:a5:0f:ad:dd:fc:ad:f1:65:a4:31:f2:9c:c7:
33:63:f9:d1:65:eb:5e:98:1c:14:18:5f:98:c4:db:
12:35:03:50:99:a2:1f:9c:81:d2:68:53:56:2a:c0:
91:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:57:89:CD:D2:27:CB:20:56:A5:19:98:2F:3A:1D:D6:1E:70:C9:3F
X509v3 Authority Key Identifier:
keyid:9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:12:6e:8f:7d:d6:31:53:1a:20:e4:c1:bc:fe:d9:98:2c:55:
2f:c1:83:56:2b:f2:88:71:9a:23:47:ec:4d:86:6a:4c:95:4b:
40:c5:bf:44:5c:dd:d8:a5:a4:09:9f:57:f7:28:5b:a0:05:6a:
b5:7a:37:7b:89:af:71:f6:a6:69:bc:f3:f8:04:ec:f2:bf:8b:
1c:6a:26:43:65:1d:3c:02:90:20:99:01:ab:0d:0b:dc:76:4c:
4d:d4:d4:ba:26:ae:7a:d6:09:1a:a9:38:59:5d:b5:8d:a3:ac:
97:7d:55:1c:09:3d:00:dd:60:ac:2c:4b:2b:1b:35:1f:cc:e8:
63:cb:f6:04:58:14:e8:cc:3d:f5:67:fe:86:c7:dd:fb:62:4e:
3d:db:6f:c4:2f:2a:d7:c2:b8:48:07:46:fb:38:0d:d3:a4:13:
37:67:73:db:97:cd:d6:1d:4e:41:c2:ed:98:05:66:2e:a5:83:
16:a8:3a:d2:71:92:64:2d:8f:b3:ea:95:97:31:16:3f:a6:4f:
0a:62:e4:e6:f3:d3:b6:51:d5:e1:70:27:d4:12:1e:e7:e0:55:
e1:d2:c7:92:ac:7f:01:9a:07:47:cd:56:38:cb:8f:e2:30:53:
48:1d:09:0c:14:62:ad:c2:25:a5:13:19:38:18:97:87:f4:b2:
af:8d:de:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:26:58 2025 by rpki-client