Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/6b2a58-becc-49bc-8d84-a03892fc340b/1/nwAKfifXFIcphPrjeIda9lvkBWw.mft
File: nwAKfifXFIcphPrjeIda9lvkBWw.mft (raw, json)
Hash identifier: OzQjDptuXza+zGR+DfpOAPt0EYNOGtWD8BpfJCOMgNM=
Subject key identifier: 30:C4:BE:56:AC:4D:D6:29:8D:6C:6E:6C:88:8D:16:9F:53:44:54:F8
Authority key identifier: 9F:00:0A:7E:27:D7:14:87:29:84:FA:E3:78:87:5A:F6:5B:E4:05:6C
Certificate issuer: /CN=9f000a7e27d714872984fae378875af65be4056c
Certificate serial: 01982AB5FE278F57361912A7A2C52B48A939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwAKfifXFIcphPrjeIda9lvkBWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/6b2a58-becc-49bc-8d84-a03892fc340b/1/nwAKfifXFIcphPrjeIda9lvkBWw.mft
Manifest number: 45
Signing time: Mon 21 Jul 2025 02:00:26 +0000
Manifest this update: Mon 21 Jul 2025 02:00:26 +0000
Manifest next update: Tue 22 Jul 2025 02:00:26 +0000
Files and hashes: 1: nwAKfifXFIcphPrjeIda9lvkBWw.crl (hash: mxoNNF+HbJYK2rCziI4nkoC4MLR9bG8E8yj8qYyD3Hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/6b2a58-becc-49bc-8d84-a03892fc340b/1/nwAKfifXFIcphPrjeIda9lvkBWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/6b2a58-becc-49bc-8d84-a03892fc340b/1/nwAKfifXFIcphPrjeIda9lvkBWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwAKfifXFIcphPrjeIda9lvkBWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2a:b5:fe:27:8f:57:36:19:12:a7:a2:c5:2b:48:a9:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f000a7e27d714872984fae378875af65be4056c
Validity
Not Before: Jul 21 02:00:26 2025 GMT
Not After : Jul 22 02:00:26 2025 GMT
Subject: CN=30c4be56ac4dd6298d6c6e6c888d169f534454f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a6:f6:db:ba:be:24:1a:19:38:a6:46:7b:35:
3e:f1:30:65:50:ef:6e:6f:0e:44:fa:11:6f:07:61:
a1:6c:d2:7c:40:1c:4f:50:e2:87:d1:37:a9:33:48:
43:e4:5a:54:93:2a:d8:d8:96:d9:93:fa:ef:e2:63:
1f:48:5d:68:c3:09:c9:05:ae:2d:4a:a6:10:96:6a:
ba:72:1e:89:2c:cd:df:06:eb:0a:1a:59:b7:48:5c:
66:38:06:63:0f:92:b0:95:bc:de:4f:24:87:5c:29:
cb:d9:e8:61:e5:42:46:3f:f7:1f:f9:0e:93:31:d4:
a0:37:19:2f:79:9e:bf:58:ab:81:02:04:35:d6:ad:
25:db:4a:a0:be:b0:83:b2:de:53:e8:24:53:01:db:
c7:de:06:25:25:af:69:8b:80:a5:aa:e6:df:1d:29:
03:34:a1:e9:6a:bd:11:b3:dc:5f:2b:36:ce:00:64:
4e:c3:bc:c1:44:1e:8b:96:b5:16:2c:e9:71:bb:f3:
d5:b6:0c:57:2a:81:fe:8b:5f:7d:47:ee:f4:a8:a8:
4f:f6:37:75:49:b2:12:9c:d1:db:f7:ed:ec:1e:d5:
8c:13:c8:b0:7d:8f:03:00:6c:9f:e4:a0:e4:37:d6:
a4:a2:de:33:30:9c:8a:88:3b:43:73:45:50:fe:77:
30:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C4:BE:56:AC:4D:D6:29:8D:6C:6E:6C:88:8D:16:9F:53:44:54:F8
X509v3 Authority Key Identifier:
keyid:9F:00:0A:7E:27:D7:14:87:29:84:FA:E3:78:87:5A:F6:5B:E4:05:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwAKfifXFIcphPrjeIda9lvkBWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6b2a58-becc-49bc-8d84-a03892fc340b/1/nwAKfifXFIcphPrjeIda9lvkBWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6b2a58-becc-49bc-8d84-a03892fc340b/1/nwAKfifXFIcphPrjeIda9lvkBWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:66:64:70:d8:80:ae:6c:ac:57:1c:e0:ea:7a:07:c4:98:18:
cd:08:e0:9b:6f:b1:b3:93:05:3b:30:52:ac:b9:85:1b:2b:bd:
4f:9b:b6:f4:52:55:87:43:05:ad:be:4a:6e:e0:e2:4c:98:b4:
db:1b:11:22:a2:21:10:b5:90:46:ba:af:21:a7:e8:e9:fd:5f:
0c:ae:04:7b:1f:a9:f1:79:31:3c:3e:be:87:67:39:08:73:ca:
0f:36:b5:90:f8:4a:bb:c4:82:96:7c:a6:62:e9:6a:ae:c0:0c:
2f:c1:70:5e:51:07:fd:48:ca:a5:c5:a5:ab:c1:dc:53:47:4c:
ba:b2:3f:7c:28:f0:fb:ed:63:29:99:67:0e:90:12:61:df:3c:
70:2f:9d:81:0e:ab:93:02:85:78:3b:81:0a:bc:c1:27:da:4a:
da:af:9e:02:4d:d8:d5:59:07:01:de:6e:7f:51:a3:c6:0c:00:
fe:86:58:bc:ce:19:8e:32:88:64:bb:89:a8:f0:ff:71:3b:21:
8c:14:ad:33:f6:0a:41:bd:5e:9e:5e:61:85:5e:7e:59:2b:cf:
0b:c3:f2:a7:62:86:11:05:ae:a3:5c:5d:5e:ff:7e:63:22:84:
b9:3c:0d:16:0d:ac:7c:75:4b:91:76:52:ce:04:f0:d5:08:24:
c7:ed:43:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 03:18:27 2025 by rpki-client