Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft
File: nk-ubSwl3V8vsWtPvqKE5mWMEro.mft (raw, json)
Hash identifier: OdHaa1Ntys1xtoCKbmtLC5M3GR2jGWdbXacSdg1Y1+Q=
Subject key identifier: F9:8B:3A:DF:6D:B9:21:71:11:20:2D:AE:94:6B:DE:9C:C9:E3:6A:F9
Authority key identifier: 9E:4F:AE:6D:2C:25:DD:5F:2F:B1:6B:4F:BE:A2:84:E6:65:8C:12:BA
Certificate issuer: /CN=9e4fae6d2c25dd5f2fb16b4fbea284e6658c12ba
Certificate serial: 01974CD7666F144CD77A74AB1A344DEC8370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nk-ubSwl3V8vsWtPvqKE5mWMEro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft
Manifest number: 0F79
Signing time: Sun 08 Jun 2025 00:01:14 +0000
Manifest this update: Sun 08 Jun 2025 00:01:14 +0000
Manifest next update: Mon 09 Jun 2025 00:01:14 +0000
Files and hashes: 1: FLJa1uRgHO4pR545s0EjhCR4g9I.roa (hash: 5Qe+7lHXv9Hk16E4Tqlbe5q64TOWj9YSYqv2nWFzqeY=)
2: nk-ubSwl3V8vsWtPvqKE5mWMEro.crl (hash: HI90WirJo3MUp2siShuUL5xRy04CJKijRcvUKJ80KOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft
rsync://rpki.ripe.net/repository/DEFAULT/nk-ubSwl3V8vsWtPvqKE5mWMEro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:66:6f:14:4c:d7:7a:74:ab:1a:34:4d:ec:83:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4fae6d2c25dd5f2fb16b4fbea284e6658c12ba
Validity
Not Before: Jun 8 00:01:14 2025 GMT
Not After : Jun 9 00:01:14 2025 GMT
Subject: CN=f98b3adf6db9217111202dae946bde9cc9e36af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a0:72:71:e7:c0:d2:6b:6f:0a:97:0e:a7:75:
de:09:7b:1f:f1:4b:1f:f7:01:78:20:aa:f8:c8:63:
22:8c:c7:c1:e5:b1:67:a8:9a:b5:3f:b5:69:34:ce:
12:74:66:e7:51:d1:6f:02:9b:bb:22:28:a7:03:69:
bc:5c:e7:8d:72:2b:5e:c4:95:1f:b9:bf:ff:95:cf:
16:87:6c:ca:99:1b:46:4d:4b:8e:b7:0f:38:68:ca:
a0:b6:e2:0f:98:ce:91:0a:11:18:e5:16:5a:89:90:
16:ad:a6:da:d2:80:67:ae:5b:79:b4:bb:e7:c2:81:
51:c0:81:63:7e:28:c1:18:fc:26:41:a4:f7:d9:9d:
51:1a:b5:1a:cc:32:43:00:1d:0d:02:57:a6:e3:05:
d2:b8:bd:d2:53:4b:74:ee:4f:f9:fc:95:e8:d4:a6:
60:f1:ef:7a:3b:92:2f:8a:e7:fe:2c:54:f3:a4:7d:
a2:4f:b8:2b:a1:35:0a:bd:71:7f:2e:84:ff:9a:ad:
66:ec:d2:f6:60:8e:c0:fc:0f:4d:8c:96:7b:24:b6:
56:8e:15:a2:8b:22:97:26:1d:95:72:34:1f:11:26:
7d:b4:d6:d4:3d:dc:cd:c7:42:1e:be:d5:8e:08:98:
f5:f6:bf:15:0e:41:c3:e7:f0:f0:79:b9:26:28:5f:
45:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8B:3A:DF:6D:B9:21:71:11:20:2D:AE:94:6B:DE:9C:C9:E3:6A:F9
X509v3 Authority Key Identifier:
keyid:9E:4F:AE:6D:2C:25:DD:5F:2F:B1:6B:4F:BE:A2:84:E6:65:8C:12:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nk-ubSwl3V8vsWtPvqKE5mWMEro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:0f:6a:9c:6d:11:35:a8:73:43:dc:43:4b:5a:7f:cb:53:b4:
ce:3a:e5:61:1e:99:f9:86:3c:36:ed:54:26:1e:93:48:9a:18:
6c:e5:32:ed:63:14:d8:ac:7b:dd:0d:75:1a:0b:a8:d7:f4:75:
15:c8:d6:a4:2c:46:b4:ed:ea:7a:16:78:56:da:80:8f:29:45:
97:4b:49:a1:7c:c3:a0:36:2a:bd:02:f8:59:72:de:b0:27:40:
e1:6c:a5:f4:52:b9:e5:d1:7d:d4:cb:17:70:0c:ee:bf:4b:ad:
22:f9:c9:d8:69:f5:64:83:1f:7c:d3:8d:b9:98:17:f9:71:8e:
a3:8b:45:d9:44:66:c0:76:04:34:92:6e:b3:99:48:17:e7:27:
3a:7c:86:e2:0c:8f:98:df:45:e7:72:70:30:eb:63:8d:5e:6a:
14:bc:b1:c0:02:81:cc:ad:79:b8:f1:21:cc:8f:b8:33:e8:95:
3f:73:b9:52:02:b5:88:32:01:b4:7e:f7:b0:20:c8:4e:c9:a1:
77:5a:6d:e2:c9:e1:44:fa:2f:2f:6c:81:41:60:87:0f:75:59:
8d:1f:6d:6f:51:b4:6c:64:17:04:9f:53:79:f1:fe:ad:de:4d:
41:f6:c3:f8:a7:04:6f:98:ee:90:aa:0b:97:92:51:0e:64:62:
07:bb:49:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:22:03 2025 by rpki-client