Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
File: nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft (raw, json)
Hash identifier: CrKe/okknJ6+NOrnMUfCUA1Jpi+Tc/SBvRnkECaZ7Ag=
Subject key identifier: 8B:34:82:51:99:E1:F7:C9:C5:58:20:6C:B3:4E:C8:5F:C2:AC:D5:98
Authority key identifier: 9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA
Certificate issuer: /CN=9e4372f63932ba7fe8f161b564b93860614a80ba
Certificate serial: 0197488C84394AB7D2BD8D9F24D0B0082B0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
Manifest number: 056F
Signing time: Sat 07 Jun 2025 04:00:57 +0000
Manifest this update: Sat 07 Jun 2025 04:00:57 +0000
Manifest next update: Sun 08 Jun 2025 04:00:57 +0000
Files and hashes: 1: TaAxyGE0YZ7m-xRwM6T1q9wMqQw.roa (hash: 76tscvyJdodgkrjTmEZQdEHR921zYs8tliL/2ouT7RA=)
2: nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl (hash: RapCdXYuZyMuIPuoKiH4VpOCczd47k94HvX9jJmfk6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:84:39:4a:b7:d2:bd:8d:9f:24:d0:b0:08:2b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4372f63932ba7fe8f161b564b93860614a80ba
Validity
Not Before: Jun 7 04:00:57 2025 GMT
Not After : Jun 8 04:00:57 2025 GMT
Subject: CN=8b34825199e1f7c9c558206cb34ec85fc2acd598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dd:28:78:39:e3:47:56:f0:46:a4:6a:ff:a4:
68:f3:3e:42:0a:0d:69:f4:e1:d5:a1:5d:4a:2a:a1:
34:78:d6:9f:f9:f2:7d:35:92:87:f0:93:f4:c5:b8:
63:a4:53:5b:b1:63:ca:90:3c:9e:a0:ee:bd:b3:f5:
41:71:13:ce:7c:09:8f:bf:fc:1c:c4:a7:de:d3:bb:
e5:c3:57:5b:2c:3b:c6:67:36:cc:93:e5:c5:b2:68:
92:f4:83:84:95:b0:4c:21:11:23:28:ae:1d:47:89:
d2:b9:26:9a:ac:0a:a5:4e:f1:52:f8:8a:91:8c:ff:
9d:5a:b2:1c:57:87:06:dc:14:a8:c8:00:0e:dc:8b:
ab:16:42:f7:82:e1:5e:2b:c0:d3:01:e4:9e:3a:a1:
78:49:23:45:99:e7:f5:a3:8a:21:88:d9:bb:2b:73:
66:79:a6:ea:18:74:d4:40:e7:1c:21:d7:f9:27:6c:
0d:50:a0:a0:70:5f:22:8c:82:00:f8:3a:c8:a8:95:
5c:1a:6f:53:89:cd:99:77:70:e6:4e:cd:6c:b3:98:
6c:25:0c:ff:07:c4:1d:cc:41:64:45:5e:fb:4b:b9:
2f:6a:3f:da:83:9d:dc:b1:26:7a:a7:da:d8:22:a6:
81:c5:5d:d9:b1:1f:46:72:60:b2:42:e3:4a:61:14:
6c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:34:82:51:99:E1:F7:C9:C5:58:20:6C:B3:4E:C8:5F:C2:AC:D5:98
X509v3 Authority Key Identifier:
keyid:9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e6:0e:d2:1d:4e:0f:c6:30:4c:45:b1:f4:36:3e:27:f8:0a:
fe:40:7e:25:8a:a6:2f:81:08:fb:fd:4f:6a:76:fc:2c:74:db:
26:46:8c:7a:f8:f0:23:63:0c:c2:4c:da:9c:e5:1b:24:6a:5a:
8c:42:3a:74:da:5f:d9:24:33:c1:87:83:e9:6c:28:20:12:ab:
b0:5c:31:a3:2a:7b:f3:ce:35:3f:3a:e9:fa:78:f3:d4:0f:4d:
63:34:a9:72:c5:c9:b3:55:ec:81:7f:ae:7c:d5:29:51:71:5d:
37:f4:95:79:88:98:af:ed:14:67:81:eb:b1:45:05:e1:36:37:
0b:b4:a6:38:24:14:7d:5f:a2:73:dc:f1:14:2c:17:60:d6:89:
e2:7b:b9:38:45:04:d4:75:ab:dd:9c:8b:5b:ff:b0:1e:d9:88:
99:79:a3:61:0d:47:16:06:b4:8e:7b:77:c2:4e:58:ba:3f:44:
73:4e:a5:11:2f:ed:fc:a5:b0:59:72:98:29:91:0a:fc:1d:a0:
e8:ae:f0:7f:e5:5c:8d:78:38:66:70:97:bc:a5:48:37:29:2d:
50:6a:72:53:e9:80:fc:40:44:05:28:ea:f2:45:92:84:50:42:
f7:9d:02:4d:4a:12:05:e6:36:cf:7b:27:34:1d:fb:5c:6b:63:
1e:c2:65:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:47:54 2025 by rpki-client