Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
File: nkdckgJgbmZn6Up3npA9tpelkCU.mft (raw, json)
Hash identifier: CTY8Qef9/KzHoKahz9CsscSGLfgRF7862BMhAmxvTBg=
Subject key identifier: AA:1C:0B:4B:6D:BF:14:79:1C:75:77:03:8B:B3:BC:65:63:E0:3E:01
Authority key identifier: 9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25
Certificate issuer: /CN=9e475c9202606e6667e94a779e903db697a59025
Certificate serial: 01975158832E91B988A2CA1CC13B62377176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
Manifest number: 0464
Signing time: Sun 08 Jun 2025 21:00:44 +0000
Manifest this update: Sun 08 Jun 2025 21:00:44 +0000
Manifest next update: Mon 09 Jun 2025 21:00:44 +0000
Files and hashes: 1: mR809BzawsocXcAGIqvH25pMqQs.roa (hash: YeYkP56hsu5/L5Jhs1MWZsAFAw78/bEVuYQMAvS7nO4=)
2: nkdckgJgbmZn6Up3npA9tpelkCU.crl (hash: NG/YvJcNysMdU7yNcFo+VufF2eVqMRrHqpSGcxPJ8s8=)
3: nmSg0-EK5kx_OFxZ-x2rJeid1NU.roa (hash: 8HytWsFdzKFviKTtfyGmrk77Cg5YhpoczU6o9u5sUno=)
4: qxkGe1Ztq8AC8Xy-vkslbb-4Yjc.roa (hash: Vk6as9yIInb4okYrwyyw/9HVRxpOcsbPGA6Y1uEJnuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:58:83:2e:91:b9:88:a2:ca:1c:c1:3b:62:37:71:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e475c9202606e6667e94a779e903db697a59025
Validity
Not Before: Jun 8 21:00:44 2025 GMT
Not After : Jun 9 21:00:44 2025 GMT
Subject: CN=aa1c0b4b6dbf14791c7577038bb3bc6563e03e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:08:42:bf:42:f8:aa:b1:95:0b:8a:93:b5:be:
d4:a6:69:8e:c8:09:80:2b:7e:52:bc:a7:c2:7a:38:
e4:84:e3:fd:a6:08:6d:18:ed:7f:40:ac:24:6f:a1:
e9:19:dd:2e:a0:c6:06:6a:b0:9f:62:fe:ba:38:01:
a9:1e:a7:c8:b3:cd:c6:82:a7:90:da:c4:9a:22:b9:
6c:e2:99:41:e4:72:bf:47:1e:74:24:ef:20:40:e6:
90:9b:ef:92:4e:a7:4f:cc:17:52:37:f9:b9:bf:41:
bb:ee:cb:b9:49:09:4b:c4:00:b1:15:16:89:d8:86:
b6:ba:11:2f:f7:97:6e:84:7f:96:ef:4b:e9:ab:32:
95:bc:6e:c3:5c:58:b0:b4:65:bf:cf:f7:2b:26:8c:
cf:53:59:28:bf:2c:37:d8:10:3d:c6:c2:7f:ae:b5:
2d:ee:49:80:ea:ce:82:6f:2c:72:4e:69:27:57:bf:
32:8d:4b:96:3e:c7:b0:0c:51:b7:4e:7c:41:2c:5a:
ff:76:30:e3:09:15:98:39:2a:5b:24:c2:c8:2d:b4:
d6:dd:7e:5d:d7:a0:2a:12:14:c1:e7:b7:66:cc:38:
27:d7:2d:72:a7:8e:31:32:10:65:be:a2:44:0a:bb:
f0:f6:c5:a6:90:f1:dc:0a:82:32:5f:33:3f:22:95:
4c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1C:0B:4B:6D:BF:14:79:1C:75:77:03:8B:B3:BC:65:63:E0:3E:01
X509v3 Authority Key Identifier:
keyid:9E:47:5C:92:02:60:6E:66:67:E9:4A:77:9E:90:3D:B6:97:A5:90:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkdckgJgbmZn6Up3npA9tpelkCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74bd35-0aa8-4718-8900-ccbb6e90a19b/1/nkdckgJgbmZn6Up3npA9tpelkCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:8a:a1:6d:d8:62:4c:4f:22:69:6d:8c:4c:cf:89:bc:0f:8a:
a1:09:3c:19:f5:fd:57:79:eb:d9:d3:2f:ec:e5:7e:4e:2e:21:
5e:6b:6d:b7:68:6e:4b:29:2a:dd:67:11:f3:da:3e:9b:a8:ac:
d4:10:c8:e7:b1:b6:bd:89:f5:0a:3b:9b:ee:88:f5:b6:ec:b5:
33:f0:fb:dc:7c:69:72:d4:a6:bb:35:2d:03:b0:7d:0e:fd:9a:
bb:8d:d7:f6:bf:de:50:de:29:69:af:93:84:e6:3d:6e:f5:33:
2c:af:49:00:18:7a:bd:3f:9d:90:dd:03:58:43:c6:93:0f:97:
89:3c:4d:a6:06:b9:94:f5:de:73:05:26:82:cf:00:ba:23:15:
93:a5:0a:39:3d:a9:0d:73:0a:66:4f:c5:7a:41:db:99:c7:37:
46:d9:ad:df:9c:3d:82:a6:94:0a:28:80:d2:01:3c:90:15:50:
47:e4:3d:a3:fe:d4:fc:fc:e1:da:23:2e:b8:51:c4:c1:61:de:
e3:9b:61:63:e1:8a:65:0f:aa:bd:db:67:4d:72:62:11:c7:cb:
16:53:04:a4:98:10:c8:ab:12:f8:3d:5b:5d:fb:0b:77:c0:7c:
a9:60:e7:d2:82:52:77:7a:2d:9e:4d:a6:a6:ad:47:07:69:3f:
a7:52:4c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:19:25 2025 by rpki-client