Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
File: nKihMlGaJClJSXNjuMqjPnLGc_g.mft (raw, json)
Hash identifier: WkN1M30TohKFcF9uiWSDvaLA8JHEhx+OtnoIONd9uwU=
Subject key identifier: 20:97:4B:A8:8A:DE:F5:F2:02:05:EE:46:E1:E2:F1:DE:F4:9C:D9:3D
Authority key identifier: 9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
Certificate issuer: /CN=9ca8a132519a242949497363b8caa33e72c673f8
Certificate serial: 019748C33CC91E6C47B4D71C313380444883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
Manifest number: 0F7B
Signing time: Sat 07 Jun 2025 05:00:43 +0000
Manifest this update: Sat 07 Jun 2025 05:00:43 +0000
Manifest next update: Sun 08 Jun 2025 05:00:43 +0000
Files and hashes: 1: dXm9nDAbHEfPr8e0rvdta5vcQCQ.roa (hash: ZAX5/DrLWdB1icFKrgXw3Y2Wbffkldc6zIYnws0ruBM=)
2: iRubAGtbRFzHiw3kU73WMgNN_Ew.roa (hash: zVFcmjx3cq29/V7ruFQJSBuo9AC0OuJEahRAn89+q2w=)
3: nKihMlGaJClJSXNjuMqjPnLGc_g.crl (hash: vr6BesEClOhclpV1aAZiz+NUDYWEP9HpPs9xYWbOoXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:3c:c9:1e:6c:47:b4:d7:1c:31:33:80:44:48:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca8a132519a242949497363b8caa33e72c673f8
Validity
Not Before: Jun 7 05:00:43 2025 GMT
Not After : Jun 8 05:00:43 2025 GMT
Subject: CN=20974ba88adef5f20205ee46e1e2f1def49cd93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a3:bb:5b:5f:03:11:7c:00:24:31:24:44:83:
3d:34:fb:0a:4e:6b:3c:0a:fe:a0:c9:31:92:8f:15:
c4:d5:23:4e:7a:dc:f0:54:e3:fb:73:ff:35:4b:3b:
a3:c0:d0:36:9e:28:e5:c1:99:ca:1a:d7:b9:86:fb:
b0:2a:fb:5e:33:7f:a7:85:c8:65:ab:16:80:44:4d:
56:62:01:ca:d3:45:73:5d:37:59:2f:11:5b:68:45:
f9:f3:23:36:85:14:29:d1:d3:5d:3b:d3:59:50:42:
1e:93:73:8b:3c:6c:a7:c7:23:45:6f:77:9c:ee:cd:
41:01:1b:6c:e6:70:13:a7:f7:c5:f5:80:dc:be:e1:
2c:d4:cf:b9:9e:3f:be:c0:9d:08:4a:be:46:f3:27:
aa:ca:af:f5:30:a4:33:bf:af:89:41:7b:24:36:b1:
17:54:01:21:bf:fa:c2:56:1b:09:69:6a:88:30:48:
0f:86:e1:35:4a:1e:67:a2:f8:04:90:8d:c3:0c:b9:
bd:be:7a:a3:70:59:07:b0:42:a0:7a:86:07:c4:8c:
98:24:d4:8c:91:a6:a8:33:6b:01:2f:6f:a0:bd:9b:
c5:e1:f8:26:72:7b:5e:26:0e:11:ab:25:73:48:c9:
46:25:1d:07:00:96:bd:25:3f:d5:99:f7:49:15:cc:
6b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:97:4B:A8:8A:DE:F5:F2:02:05:EE:46:E1:E2:F1:DE:F4:9C:D9:3D
X509v3 Authority Key Identifier:
keyid:9C:A8:A1:32:51:9A:24:29:49:49:73:63:B8:CA:A3:3E:72:C6:73:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKihMlGaJClJSXNjuMqjPnLGc_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3e0e9a-51f3-49de-9d1b-00cd86af849d/1/nKihMlGaJClJSXNjuMqjPnLGc_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:20:06:76:34:ca:68:d9:21:06:d5:12:34:9a:02:5b:8e:11:
fa:33:de:fc:55:59:8e:ee:c6:7a:37:00:a2:b7:18:93:78:ba:
8e:e3:f9:4e:a0:3b:11:34:1c:bd:4a:dd:ec:46:c7:78:f6:d7:
b0:e7:68:c9:a9:53:7b:89:3c:3a:d8:5d:c6:dc:ff:d7:e1:09:
37:02:e1:3e:8c:d6:c3:6b:13:46:fc:2f:2e:06:5b:d3:ed:df:
25:33:1d:32:82:d4:25:76:5c:24:b3:cf:6a:b9:3e:49:b3:8f:
95:43:08:9f:e5:e7:45:14:4e:f1:7f:42:9e:9a:5b:f1:9f:fb:
8b:e6:4b:bc:5a:02:a4:6b:45:1f:45:c4:77:4f:e7:0d:f5:c8:
05:bc:88:e1:0e:1d:aa:bc:0b:ee:7d:c2:b6:67:a9:39:68:28:
7b:ea:d8:4e:66:81:29:d3:82:f9:28:6c:e6:44:5d:c8:80:f9:
4b:b4:ef:0f:93:c2:10:66:a7:20:4e:57:de:1c:84:c0:57:68:
14:7d:40:3a:f5:58:26:7d:5c:e7:13:db:d8:ac:7d:ce:22:23:
5e:59:49:fa:94:9e:c5:13:d6:32:9e:0c:69:03:da:9b:7a:62:
89:1a:d8:ce:ad:fb:30:00:be:36:3c:fb:5b:d0:41:7d:49:ae:
b9:c7:27:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:07:57 2025 by rpki-client