Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
File: nwTDqGM44XBgXmZdNNilyGmUigU.mft (raw, json)
Hash identifier: z6x+rT7AgTJ+hN8O5/8M5HTv55X8ErCQTvWBZQYnNw8=
Subject key identifier: 48:41:CB:56:A0:07:48:EC:F5:85:18:17:AA:71:91:48:A2:9D:55:93
Authority key identifier: 9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
Certificate issuer: /CN=9f04c3a86338e170605e665d34d8a5c869948a05
Certificate serial: 019A258A6BB48933196ABDB79C88FD080BA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
Manifest number: 0716
Signing time: Mon 27 Oct 2025 12:00:19 +0000
Manifest this update: Mon 27 Oct 2025 12:00:19 +0000
Manifest next update: Tue 28 Oct 2025 12:00:19 +0000
Files and hashes: 1: nwTDqGM44XBgXmZdNNilyGmUigU.crl (hash: DhCwdIpo8ugqm1OCJ+VTWdxvvsHbqb51MwJsbAf15AU=)
2: wa6e-L5g3p2SNEGIRb1a4oqT56I.roa (hash: iBFSre5PI6/cZlAuQmnNGFmFLfmyjvaYR/9ZuSUPyuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:8a:6b:b4:89:33:19:6a:bd:b7:9c:88:fd:08:0b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f04c3a86338e170605e665d34d8a5c869948a05
Validity
Not Before: Oct 27 12:00:19 2025 GMT
Not After : Oct 28 12:00:19 2025 GMT
Subject: CN=4841cb56a00748ecf5851817aa719148a29d5593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:70:b6:86:da:32:48:f6:13:86:6e:7e:9e:c8:
9b:4d:85:dc:4e:94:eb:4b:6d:2e:e3:c4:55:8c:bf:
34:da:10:b5:95:ee:d1:15:d0:88:2e:35:9e:0c:75:
87:33:9d:ee:77:10:ea:26:19:ae:9f:3f:ce:b4:5c:
4a:2a:a3:70:0a:22:f0:e9:16:76:00:00:74:ef:14:
f9:05:90:69:b1:71:05:f5:92:cf:35:37:c0:9f:5c:
ba:f3:13:0b:9a:1d:13:61:b3:aa:73:36:aa:09:7d:
0f:aa:70:2d:66:62:0f:95:e3:8e:f6:e2:81:46:28:
cd:ec:ea:35:41:09:b5:6b:a8:70:e5:04:18:bc:c4:
07:16:12:87:37:80:70:31:57:e9:dc:b4:f7:de:13:
ad:34:52:91:4d:25:35:1b:30:6e:c4:8b:18:34:4b:
51:5a:9f:d8:6a:9e:94:48:42:a9:5b:2a:bd:57:97:
0f:45:70:44:d7:38:6c:ce:20:34:b7:86:e8:c3:2d:
0a:75:d8:89:72:71:34:5d:0b:6e:ad:83:b0:20:3b:
a2:d9:a6:62:fa:ce:d7:e7:97:7a:27:7b:8d:9c:8e:
bc:6c:e5:22:e5:d9:f6:ac:57:77:29:78:a8:6f:dd:
01:36:ac:77:5f:4b:29:5f:cf:1e:5e:e1:94:c8:8f:
b3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:41:CB:56:A0:07:48:EC:F5:85:18:17:AA:71:91:48:A2:9D:55:93
X509v3 Authority Key Identifier:
keyid:9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c9:f2:4b:88:ad:4d:47:91:a3:00:36:0a:9a:37:11:31:2d:
45:e7:52:2a:54:13:22:4c:50:d3:5c:be:bb:5a:94:42:37:59:
8b:42:6a:79:8a:eb:76:97:66:59:08:86:c2:28:8b:15:4d:d4:
98:da:34:4c:cc:d9:6a:b2:b9:01:30:31:46:95:1b:18:86:df:
02:eb:c8:c7:95:88:d8:32:91:9c:7d:c6:ba:c6:d6:34:23:84:
d4:e0:ec:dd:99:63:0c:82:2a:bd:ac:42:59:65:b8:85:b4:11:
c5:98:28:b4:8d:6c:7c:4d:8f:0e:de:b4:54:57:3b:c5:59:88:
80:64:26:e9:3e:be:68:0e:11:c9:4e:4f:57:7a:b2:63:fa:c3:
30:91:b3:75:55:41:8a:6a:cb:d3:7d:c3:82:54:23:b7:bd:8d:
c4:cc:91:24:51:71:7c:b3:17:fa:91:28:18:d8:13:77:a6:a9:
11:2e:e3:f8:ba:a3:c1:80:b9:53:e4:91:00:95:ba:68:02:9b:
e6:d1:b4:2e:c2:9c:11:66:9a:1a:84:95:b2:8a:1d:c4:98:80:
4c:5e:98:c2:81:09:d5:db:44:00:1d:70:de:ac:56:35:11:d0:
4f:05:cd:12:cb:f9:7b:2f:17:d2:5a:3f:b0:2a:ff:70:c3:04:
98:d5:ce:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 15:00:53 2025 by rpki-client