
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
File: nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft (raw, json)
Hash identifier: syaY8Z4/EHo4vukS+rjTR0NWjBU5m3to83yULxE+Rd4=
Subject key identifier: 16:20:2C:3C:F4:47:4B:50:C6:75:85:BB:4D:BF:A1:82:14:9D:D3:27
Authority key identifier: 9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
Certificate issuer: /CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Certificate serial: 01984AAF38D37D2DD3D972774B679DE0941C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
Manifest number: EB
Signing time: Sun 27 Jul 2025 07:00:53 +0000
Manifest this update: Sun 27 Jul 2025 07:00:53 +0000
Manifest next update: Mon 28 Jul 2025 07:00:53 +0000
Files and hashes: 1: 4hEwPlQV2R3wkknVQDbhfUdi-Hg.roa (hash: mjLFc+VoWHA5LJYiCj4OZP4v7wKlAoLVjBHa2WdTgLI=)
2: nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl (hash: zcp/AbUBLqRm9uZEqBsTkiRZfI6tdwIp3Wh9UhMX1sQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:38:d3:7d:2d:d3:d9:72:77:4b:67:9d:e0:94:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Validity
Not Before: Jul 27 07:00:53 2025 GMT
Not After : Jul 28 07:00:53 2025 GMT
Subject: CN=16202c3cf4474b50c67585bb4dbfa182149dd327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2d:cd:89:ea:0d:70:41:91:92:b9:b1:c9:a6:
a1:63:cc:a0:bb:37:07:82:b8:79:ce:03:e6:a5:54:
bc:f7:48:b9:cc:bb:66:38:e5:00:96:ca:54:9c:c0:
56:5c:77:78:e0:28:bc:f8:73:2d:71:ec:61:ea:94:
ab:aa:be:af:76:57:1e:9a:29:9c:63:94:ea:28:72:
f2:cc:c3:62:5a:47:e0:36:0d:c3:5d:65:78:74:7c:
4b:4b:39:20:9e:6a:39:ad:74:b9:24:d8:11:f1:9b:
20:fb:0b:81:a0:cc:d2:6a:be:87:40:99:df:10:2d:
47:30:7c:59:98:2b:c6:56:f1:e7:f6:22:39:9d:9b:
6a:f8:38:2e:54:80:b7:4e:dc:c8:cd:85:1b:fb:fa:
ee:18:11:1b:b7:78:8d:4b:72:56:9e:68:ae:c6:5d:
11:7c:95:25:cd:50:e6:66:42:79:8a:92:23:7c:85:
56:f1:2a:2a:f2:90:c1:aa:af:e2:93:d5:55:27:fe:
90:a4:c7:10:d3:7a:3b:f4:5a:f4:c5:e1:2b:a4:8f:
99:c1:cb:e2:6f:60:7f:46:29:46:ba:6d:bc:5e:0d:
b2:af:1a:e5:44:79:3b:4b:fa:db:0a:72:d0:8f:09:
97:f6:c2:98:5b:bf:3e:82:aa:87:eb:58:d5:5e:32:
9e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:20:2C:3C:F4:47:4B:50:C6:75:85:BB:4D:BF:A1:82:14:9D:D3:27
X509v3 Authority Key Identifier:
keyid:9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:86:3f:77:15:04:e4:71:56:7e:2d:85:c8:8e:02:27:ab:85:
e0:a5:46:31:e6:b3:be:91:fe:d3:ca:57:6f:c4:75:3a:46:d7:
10:e4:ae:d2:76:c7:79:8e:e2:b8:da:bd:39:3f:8f:95:7c:91:
43:f0:bc:fc:da:01:2c:dc:ac:b6:23:65:10:67:15:e0:f9:58:
41:79:e7:b5:33:18:05:16:29:19:76:5e:5a:fd:b0:ea:18:fe:
8c:9d:9f:15:69:4d:10:5a:45:4b:91:18:1e:d8:37:b5:64:dc:
c7:37:dd:3a:48:1e:8b:9f:0d:2e:af:5c:bc:7b:6f:3f:9a:6e:
b4:51:90:83:d8:11:80:f1:51:82:2e:15:4f:5b:b5:01:b0:e7:
5d:79:ce:12:2f:53:cc:ff:c2:2d:af:67:4e:4c:c6:58:90:ad:
8a:ef:d9:ee:10:94:3a:f8:4b:c4:e9:33:06:dc:6f:10:a5:27:
26:f4:1f:49:99:6a:f7:e1:65:08:26:61:1c:23:1f:c4:db:25:
f3:c1:ce:5e:6b:0a:35:f3:bd:94:14:a0:27:fa:d4:c5:b7:a8:
dd:a2:64:7b:83:98:41:e9:cb:19:ac:4c:aa:22:12:86:9d:d1:
50:40:ff:31:da:26:73:41:55:3d:b5:61:e5:10:e2:91:c0:45:
32:52:e6:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKrzjTfS3T2XJ3S2ed4JQcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMDY3ZTUyYjRiNWIyNDEyZmVjMDE0OGRmYzZjYjFiMzRl
OTI3NGIwHhcNMjUwNzI3MDcwMDUzWhcNMjUwNzI4MDcwMDUzWjAzMTEwLwYDVQQD
EygxNjIwMmMzY2Y0NDc0YjUwYzY3NTg1YmI0ZGJmYTE4MjE0OWRkMzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnS3NieoNcEGRkrmxyaahY8yguzcH
grh5zgPmpVS890i5zLtmOOUAlspUnMBWXHd44Ci8+HMtcexh6pSrqr6vdlcemimc
Y5TqKHLyzMNiWkfgNg3DXWV4dHxLSzkgnmo5rXS5JNgR8Zsg+wuBoMzSar6HQJnf
EC1HMHxZmCvGVvHn9iI5nZtq+DguVIC3TtzIzYUb+/ruGBEbt3iNS3JWnmiuxl0R
fJUlzVDmZkJ5ipIjfIVW8Soq8pDBqq/ik9VVJ/6QpMcQ03o79Fr0xeErpI+Zwcvi
b2B/RilGum28Xg2yrxrlRHk7S/rbCnLQjwmX9sKYW78+gqqH61jVXjKeJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYgLDz0R0tQxnWFu02/oYIUndMnMB8GA1UdIwQY
MBaAFJ8GflK0tbJBL+wBSN/Gyxs06SdLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbndaLVVyUzFza0V2N0FGSTM4YkxHelRwSjBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8wY2Q2NWMtZTU3ZC00MTJlLWJhNjUt
MDJhMDliN2E0ZWI3LzEvbndaLVVyUzFza0V2N0FGSTM4YkxHelRwSjBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8wY2Q2NWMtZTU3ZC00MTJlLWJhNjUtMDJhMDliN2E0ZWI3
LzEvbndaLVVyUzFza0V2N0FGSTM4YkxHelRwSjBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGIY/dxUE
5HFWfi2FyI4CJ6uF4KVGMeazvpH+08pXb8R1OkbXEOSu0nbHeY7iuNq9OT+PlXyR
Q/C8/NoBLNystiNlEGcV4PlYQXnntTMYBRYpGXZeWv2w6hj+jJ2fFWlNEFpFS5EY
Htg3tWTcxzfdOkgei58NLq9cvHtvP5putFGQg9gRgPFRgi4VT1u1AbDnXXnOEi9T
zP/CLa9nTkzGWJCtiu/Z7hCUOvhLxOkzBtxvEKUnJvQfSZlq9+FlCCZhHCMfxNsl
88HOXmsKNfO9lBSgJ/rUxbeo3aJke4OYQenLGaxMqiIShp3RUED/Mdomc0FVPbVh
5RDikcBFMlLmcg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:25:01 2025 by rpki-client