Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
File: nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft (raw, json)
Hash identifier: vVNwIq/X3if89wZuUEq0hHAkkpEMS6CSQULOKigKoZI=
Subject key identifier: 21:CC:8F:C7:2A:B2:5B:1E:1C:C7:D2:37:98:B7:3C:26:EB:A0:C8:EF
Authority key identifier: 9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
Certificate issuer: /CN=9e42ca46688a837b575234ce6a1a326587d6c204
Certificate serial: 019749D5F0CBF545BDFB4404A9D6A446275A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
Manifest number: 1020
Signing time: Sat 07 Jun 2025 10:00:46 +0000
Manifest this update: Sat 07 Jun 2025 10:00:46 +0000
Manifest next update: Sun 08 Jun 2025 10:00:46 +0000
Files and hashes: 1: 2sz7XXaQR044rc-q4fD0WIzUxYQ.roa (hash: pi07prhyU4hZ/cG1dB+HetMAgpuPmtLhNCb2plULwQE=)
2: D2HSpId2VYXPjhlDPg7eWeC18Pw.roa (hash: UXPvVbmh0MzKjV4UFrcu58vEq8RZqO0eg1YthASI72I=)
3: UnUG9yNZwHFtxPW6hAKjubIbusM.roa (hash: xsmRUWemFAWw0xMxDEpqyiLbWsqfijBX0AOIJJiaM5U=)
4: nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl (hash: fukC4Llh9tcvi+gY/mxo0dvI1yxpngufqLJe5rj99jY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:f0:cb:f5:45:bd:fb:44:04:a9:d6:a4:46:27:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e42ca46688a837b575234ce6a1a326587d6c204
Validity
Not Before: Jun 7 10:00:46 2025 GMT
Not After : Jun 8 10:00:46 2025 GMT
Subject: CN=21cc8fc72ab25b1e1cc7d23798b73c26eba0c8ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:92:ef:89:4a:5e:ea:0a:5b:1a:10:23:c8:00:
a9:3a:8f:5a:32:cf:ca:a7:3e:77:9f:61:54:a1:62:
52:a7:3f:ef:8a:43:69:b3:a5:9c:f3:2e:cb:6b:bb:
e7:ef:88:20:c6:1e:4f:42:64:ff:f9:23:e4:72:00:
e8:80:05:91:fb:ee:e7:1b:13:3f:5d:37:43:9a:45:
c5:9a:5b:ce:df:ff:1f:f2:84:77:85:75:c0:3c:09:
d4:f0:fc:9b:25:49:64:59:94:ff:30:79:2b:a0:83:
d8:b9:14:8d:2a:de:cd:a4:02:af:38:dd:f2:b2:3e:
71:34:33:9e:c1:be:d9:54:6e:1f:f9:73:1c:0b:5e:
36:91:7f:f2:63:87:14:71:84:27:23:aa:27:68:93:
be:be:c4:b5:af:b3:b0:32:fe:70:a4:9d:24:ce:3c:
cd:80:ba:9e:0f:27:ca:00:33:0a:c0:85:09:a0:15:
c6:fb:b3:39:2a:7f:76:c1:a8:8e:6c:ed:da:08:ea:
50:73:fd:f4:b2:31:45:da:bc:25:85:0f:6c:e7:e6:
88:40:d7:a5:42:50:72:8f:f6:a8:02:0b:e5:02:54:
bd:5b:2e:56:a0:d9:cd:da:bb:70:35:c9:6d:ab:ed:
8a:8c:b8:73:14:a4:dc:37:4c:2d:1c:6c:4e:ec:d3:
54:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CC:8F:C7:2A:B2:5B:1E:1C:C7:D2:37:98:B7:3C:26:EB:A0:C8:EF
X509v3 Authority Key Identifier:
keyid:9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:99:b7:86:61:22:6f:51:7f:d0:a2:d8:f4:7c:e1:15:eb:6d:
ff:a0:05:94:15:8c:2a:60:44:d3:ee:dd:58:e3:07:b2:4c:cd:
2c:69:8f:d4:9c:06:34:2b:c9:6d:d5:cf:a2:95:69:72:78:fc:
fd:99:91:91:33:f5:7e:02:cc:96:eb:76:e8:54:b0:d6:cd:27:
37:90:5d:18:39:a4:65:0a:57:20:e4:db:e5:88:39:6e:8a:23:
f1:07:31:ee:a0:7d:2b:eb:b9:d0:00:71:d1:a4:f1:bd:a4:8c:
88:ee:6d:d3:72:ec:b3:fd:1f:6c:b4:4d:ac:a3:1b:56:f5:3b:
eb:52:16:a8:8f:da:8a:c6:40:8a:74:82:8f:fd:82:29:f3:84:
58:5e:11:ca:83:5b:a0:af:d4:2d:99:04:8a:88:7d:e0:54:9d:
62:0f:7e:a7:48:95:8b:5e:d5:57:70:08:68:46:33:74:bb:87:
93:0f:34:8a:cd:05:ae:c7:2c:80:af:24:29:8e:69:1a:17:72:
c6:47:0b:2a:b9:70:43:00:7f:8b:57:ce:ea:95:f2:89:ce:8f:
12:c2:e5:df:f8:1a:89:6f:1c:d4:18:4b:b8:f4:0f:79:87:6b:
b6:8d:ab:e1:d1:4b:23:21:a3:ea:97:80:30:3e:16:79:68:f2:
a8:87:d1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:11:09 2025 by rpki-client