Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
File: NwjgT9e_gbZ13L57KaomPJEgeLY.mft (raw, json)
Hash identifier: typlbwJ5jPriN7UurLhk23/MmYVcUbUCUg8DVNPiOsA=
Subject key identifier: 26:25:A1:A2:DC:3E:39:7D:65:83:D1:B6:D3:96:86:C6:65:69:39:EA
Authority key identifier: 37:08:E0:4F:D7:BF:81:B6:75:DC:BE:7B:29:AA:26:3C:91:20:78:B6
Certificate issuer: /CN=3708e04fd7bf81b675dcbe7b29aa263c912078b6
Certificate serial: 019849D38AAFC2A47037C0D48BF0C8941BD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
Manifest number: 0A2F
Signing time: Sun 27 Jul 2025 03:00:57 +0000
Manifest this update: Sun 27 Jul 2025 03:00:57 +0000
Manifest next update: Mon 28 Jul 2025 03:00:57 +0000
Files and hashes: 1: NwjgT9e_gbZ13L57KaomPJEgeLY.crl (hash: 1NE3aS/oVMXh1Shtn6zdfN6wPqvFxC68BhRW8B8NHZQ=)
2: dQrN5l4ER8ioZrR3Ol61rF1mTIM.roa (hash: i6nZan7ltRkXD1mx1+9g2E7sNbpHefpKiqIOGyeWWGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:8a:af:c2:a4:70:37:c0:d4:8b:f0:c8:94:1b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3708e04fd7bf81b675dcbe7b29aa263c912078b6
Validity
Not Before: Jul 27 03:00:57 2025 GMT
Not After : Jul 28 03:00:57 2025 GMT
Subject: CN=2625a1a2dc3e397d6583d1b6d39686c6656939ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:02:f4:d1:a1:cb:44:e1:da:fd:ee:ea:87:e4:
75:35:ed:74:ca:02:71:17:22:bd:1e:3c:a9:b4:5b:
fc:25:69:2c:32:00:4c:92:46:a9:38:69:61:7c:a8:
61:27:54:41:7c:39:11:7a:93:96:a9:6e:a5:1d:b4:
7a:69:eb:8a:da:3e:65:ae:6f:7c:80:ec:45:6f:33:
ba:d6:4c:28:2d:ae:3b:43:64:2a:23:39:4c:ea:b5:
34:39:d4:5d:8d:88:c2:27:ea:26:3b:9b:1a:40:6e:
4e:10:64:fd:a3:6c:1f:79:d4:6b:49:89:1f:b2:e7:
e1:00:6b:64:91:b5:98:c5:69:6a:d2:c7:3d:23:a9:
08:4a:b7:33:4b:8f:21:76:23:df:1a:7a:8f:34:d5:
08:87:1a:57:e1:ac:d2:fe:28:82:fd:60:2a:95:9f:
60:3f:0c:3c:64:bb:68:b0:b9:5a:cd:0f:d7:30:bd:
50:ae:b4:67:2d:90:8c:07:cc:04:fd:46:3a:e9:e4:
85:25:1b:6f:c3:b8:f7:93:a2:6e:15:79:4c:2d:f4:
b7:29:90:2a:c5:3c:b1:ca:6b:c0:d7:0d:9c:e2:77:
f8:4b:70:fe:0b:aa:8c:81:2a:62:10:dc:ff:f6:e0:
91:5a:dd:9f:c4:e8:f6:6b:ed:96:43:d0:8c:51:79:
54:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:25:A1:A2:DC:3E:39:7D:65:83:D1:B6:D3:96:86:C6:65:69:39:EA
X509v3 Authority Key Identifier:
keyid:37:08:E0:4F:D7:BF:81:B6:75:DC:BE:7B:29:AA:26:3C:91:20:78:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:41:3e:0b:b4:cb:68:29:14:23:33:7b:4f:4d:5e:48:bd:34:
09:d5:e4:17:e1:2c:d3:0f:b3:b9:70:36:c1:79:16:22:bf:d9:
f0:b0:e1:64:1f:c6:db:3a:c7:3a:f6:5a:16:25:46:ea:22:b4:
8c:87:73:28:5d:49:f2:7b:53:40:b1:e6:77:df:af:07:c1:4e:
c0:e8:6b:89:9a:b3:fe:ae:7c:32:08:12:70:2c:2e:c5:db:42:
37:4c:97:12:dc:43:a5:1f:c0:c8:4b:8f:0e:ca:b8:58:a1:57:
26:5b:30:13:9a:34:33:e2:f9:48:b4:e4:23:d4:c3:3e:d7:2e:
7e:30:f0:43:4d:7b:db:69:d2:fa:55:a7:cd:1b:d8:9b:a5:cb:
72:76:01:74:de:bf:35:15:39:e0:7a:08:f8:ef:97:e2:6f:4b:
aa:fd:29:d3:1f:af:79:dd:90:43:b4:6e:9b:43:8f:12:56:50:
07:b0:f4:af:cb:9c:12:de:05:bf:a8:1c:e0:55:27:cd:84:6a:
8c:de:58:b0:54:69:86:ae:d1:7b:0b:6b:88:6a:6d:ae:fa:31:
2f:43:67:be:08:43:b1:d6:c6:60:a0:9d:03:4d:0e:65:78:93:
65:a7:a8:95:78:39:16:72:4d:34:b2:a1:7e:4b:f3:b8:bb:74:
b9:c3:a3:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ04qvwqRwN8DUi/DIlBvUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MDhlMDRmZDdiZjgxYjY3NWRjYmU3YjI5YWEyNjNjOTEy
MDc4YjYwHhcNMjUwNzI3MDMwMDU3WhcNMjUwNzI4MDMwMDU3WjAzMTEwLwYDVQQD
EygyNjI1YTFhMmRjM2UzOTdkNjU4M2QxYjZkMzk2ODZjNjY1NjkzOWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgL00aHLROHa/e7qh+R1Ne10ygJx
FyK9HjyptFv8JWksMgBMkkapOGlhfKhhJ1RBfDkRepOWqW6lHbR6aeuK2j5lrm98
gOxFbzO61kwoLa47Q2QqIzlM6rU0OdRdjYjCJ+omO5saQG5OEGT9o2wfedRrSYkf
sufhAGtkkbWYxWlq0sc9I6kISrczS48hdiPfGnqPNNUIhxpX4azS/iiC/WAqlZ9g
Pww8ZLtosLlazQ/XML1QrrRnLZCMB8wE/UY66eSFJRtvw7j3k6JuFXlMLfS3KZAq
xTyxymvA1w2c4nf4S3D+C6qMgSpiENz/9uCRWt2fxOj2a+2WQ9CMUXlU7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYloaLcPjl9ZYPRttOWhsZlaTnqMB8GA1UdIwQY
MBaAFDcI4E/Xv4G2ddy+eymqJjyRIHi2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTndqZ1Q5ZV9nYloxM0w1N0thb21QSkVnZUxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMmZjZmEtN2RjMS00MjAwLTg5OWUt
YmM0OTNkNWNiYjVjLzEvTndqZ1Q5ZV9nYloxM0w1N0thb21QSkVnZUxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9jMmZjZmEtN2RjMS00MjAwLTg5OWUtYmM0OTNkNWNiYjVj
LzEvTndqZ1Q5ZV9nYloxM0w1N0thb21QSkVnZUxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArkE+C7TL
aCkUIzN7T01eSL00CdXkF+Es0w+zuXA2wXkWIr/Z8LDhZB/G2zrHOvZaFiVG6iK0
jIdzKF1J8ntTQLHmd9+vB8FOwOhriZqz/q58MggScCwuxdtCN0yXEtxDpR/AyEuP
Dsq4WKFXJlswE5o0M+L5SLTkI9TDPtcufjDwQ01722nS+lWnzRvYm6XLcnYBdN6/
NRU54HoI+O+X4m9Lqv0p0x+ved2QQ7Rum0OPElZQB7D0r8ucEt4Fv6gc4FUnzYRq
jN5YsFRphq7RewtriGptrvoxL0NnvghDsdbGYKCdA00OZXiTZaeolXg5FnJNNLKh
fkvzuLt0ucOjvw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:50:36 2025 by rpki-client