Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
File: nkQennBa2j-cHoJ80nbb0JdIdgg.mft (raw, json)
Hash identifier: IEogcoEw6Cs+zdlFh716n0oWudGqOO4aR/Dql+9bA0c=
Subject key identifier: 89:E2:BB:BD:F3:E6:11:3A:64:CF:CE:50:85:D9:05:17:B8:6E:23:1F
Authority key identifier: 9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
Certificate issuer: /CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Certificate serial: 0197499F5976B9BB30EFC63CBCB18DCDB6D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
Manifest number: 0EFB
Signing time: Sat 07 Jun 2025 09:01:09 +0000
Manifest this update: Sat 07 Jun 2025 09:01:09 +0000
Manifest next update: Sun 08 Jun 2025 09:01:09 +0000
Files and hashes: 1: 7ySzESdDI-Eg0Y6xfFTDZOEQmZk.roa (hash: pTSWdDbQ1VFptqQJI8HP8UxKCCjXnA4njHY5srW26VY=)
2: BJvFiCQhGiEcXR3ndqL7T5BbDaU.roa (hash: Z+0E4ULnb/cJktOfFSiZcNmisROmxseIx6dqsZlDt4s=)
3: bKdFeyVH_r7HsHfe9GqBe_UUrg8.roa (hash: vnPbAxKFKizMFdUh2dDG9y/SGopR40zinaRVaCXXct4=)
4: nkQennBa2j-cHoJ80nbb0JdIdgg.crl (hash: ZX31VinUzynucBip6ACd3CNWJcGWxrARDsN4N+R3WRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:59:76:b9:bb:30:ef:c6:3c:bc:b1:8d:cd:b6:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e441e9e705ada3f9c1e827cd276dbd097487608
Validity
Not Before: Jun 7 09:01:09 2025 GMT
Not After : Jun 8 09:01:09 2025 GMT
Subject: CN=89e2bbbdf3e6113a64cfce5085d90517b86e231f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3d:4c:e1:dd:22:b4:31:af:7f:f3:23:03:38:
4c:be:91:c7:75:96:8c:92:03:b7:72:1f:89:b9:f4:
05:52:93:a2:cf:f8:6d:c7:ea:57:af:5a:bb:f3:8c:
8e:13:7b:04:9b:42:ee:7a:94:2c:31:cd:a2:66:53:
01:50:e9:de:61:08:79:53:cc:14:16:28:49:ff:6a:
49:d8:fc:89:70:a0:d0:85:42:f2:94:f9:54:e8:d8:
87:5f:fa:60:04:ec:9b:29:54:1f:8f:0f:3c:15:2d:
10:6a:da:6b:5f:b2:26:d9:44:2a:34:72:e4:44:4c:
16:00:6a:63:bc:b0:bc:00:ab:98:f9:40:e8:1b:fb:
d8:61:d5:6a:ad:e9:a2:f5:02:28:5f:fe:b2:28:e2:
56:de:bf:6b:29:58:31:3e:6e:dd:3b:01:62:35:6d:
c5:a8:6b:4d:cd:e6:c2:85:09:79:53:67:84:76:25:
d5:57:54:c7:30:86:7e:24:d8:08:a9:3b:66:7a:e0:
30:8d:1a:19:7c:89:1f:7e:c0:fd:c8:86:f9:6b:e5:
f8:2f:5a:b5:21:ac:57:3d:f0:aa:0f:6f:98:cf:6c:
b0:60:7b:f7:8a:5b:95:aa:0e:09:dc:55:af:d0:b5:
75:d3:ef:75:9c:80:ce:bb:e1:d3:39:30:91:a6:fe:
09:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E2:BB:BD:F3:E6:11:3A:64:CF:CE:50:85:D9:05:17:B8:6E:23:1F
X509v3 Authority Key Identifier:
keyid:9E:44:1E:9E:70:5A:DA:3F:9C:1E:82:7C:D2:76:DB:D0:97:48:76:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkQennBa2j-cHoJ80nbb0JdIdgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ce16f7-b868-4b4c-9d9b-932d16b08df0/1/nkQennBa2j-cHoJ80nbb0JdIdgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a1:32:ca:1d:ee:e1:42:b0:a0:ca:bb:5b:37:91:08:75:d4:
2a:07:dc:47:e5:77:cf:79:86:59:3e:ed:66:8a:ab:e4:43:c6:
b9:25:13:a1:d1:8d:f4:13:60:66:49:f4:3c:23:67:f5:a2:14:
0b:71:f4:f2:ff:7a:c2:b0:d6:d6:5b:c1:ba:41:75:59:16:f0:
3a:92:0b:5b:b0:3a:4f:42:b1:40:45:76:a5:16:df:5b:45:f2:
9b:e7:81:b5:5a:ff:e1:f7:d8:1e:8d:1c:1f:3e:fa:14:46:d1:
48:be:a9:21:92:5a:2e:e7:4f:89:5f:4d:62:70:99:9e:fe:64:
e1:2b:94:0b:ad:29:30:2e:7e:ee:dc:68:56:4b:c8:a5:5d:52:
a0:d9:56:ea:76:f3:a4:61:a5:70:b2:2b:90:3c:bd:d1:21:a4:
84:7b:eb:5d:d2:71:14:a4:1d:0f:e0:8f:de:2f:59:fb:d4:c0:
79:da:b6:a1:14:44:1e:3a:d5:7c:5e:ac:6b:de:9f:c9:87:4c:
2f:06:bc:46:ad:a9:07:46:2a:be:80:91:9b:b5:42:53:b5:48:
20:a2:c7:cc:e4:37:f1:02:ae:d2:5f:d9:7e:0f:3d:f5:04:e2:
84:e8:a3:47:f7:2f:79:c0:64:00:1f:38:23:c6:74:a5:24:b7:
31:df:b5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:41:12 2025 by rpki-client