Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
File: nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft (raw, json)
Hash identifier: jfRZ2RgISE4jEQZd3ldNn4MlGgc9wXFnqSpce71O6d8=
Subject key identifier: D2:16:F4:97:08:E0:30:C9:33:CD:A0:4A:3C:EA:2F:7D:E9:81:B4:A0
Authority key identifier: 9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
Certificate issuer: /CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Certificate serial: 01984DE6DC4DD73277D68051335DD99A74C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
Manifest number: 0EC3
Signing time: Sun 27 Jul 2025 22:00:31 +0000
Manifest this update: Sun 27 Jul 2025 22:00:31 +0000
Manifest next update: Mon 28 Jul 2025 22:00:31 +0000
Files and hashes: 1: nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl (hash: w8MUZkUikhxVMdX//9s85475AD7GK39isFo29G0ntIE=)
2: wTe6nqB8fZi5LCCWrszMuZB2Wbc.roa (hash: J68IWCsFvDV9cShA3lK5AicjeJ9rPLGBf/VEjmcr5l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:e6:dc:4d:d7:32:77:d6:80:51:33:5d:d9:9a:74:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Validity
Not Before: Jul 27 22:00:31 2025 GMT
Not After : Jul 28 22:00:31 2025 GMT
Subject: CN=d216f49708e030c933cda04a3cea2f7de981b4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5b:c9:6a:fd:d6:30:02:4c:2b:9e:d1:cc:60:
cc:1c:9c:9b:b4:0b:05:b3:df:91:fd:cc:79:5d:56:
fd:59:d8:39:e0:ed:10:ab:0e:39:2f:e8:30:b5:0d:
72:9a:19:e2:fd:62:c4:cb:34:c3:62:68:df:5a:84:
80:12:a0:d3:d2:12:c5:8d:f3:57:b9:50:c6:3c:4f:
75:84:be:0d:64:3d:fd:47:ca:e5:25:33:af:96:6a:
00:07:59:c8:ab:df:69:ae:48:d2:dd:b1:71:76:22:
a7:3d:bd:a2:f7:16:ab:0e:43:99:2c:d7:66:da:c2:
5f:2a:32:42:90:63:99:e1:00:e9:7d:dd:24:76:f7:
fc:58:4a:b8:91:be:2d:99:02:57:7c:da:dc:b6:3a:
7b:41:e0:74:b8:d6:d2:75:3a:86:4b:3e:5d:f3:1a:
c1:54:d2:56:95:74:f3:90:dd:48:0a:f7:50:38:02:
c8:ed:8f:2d:77:e9:e6:d6:58:c2:8b:d2:2e:96:67:
f2:f4:64:94:9a:9e:4e:3c:d4:9c:df:5c:e9:98:de:
47:3e:28:4d:e3:9d:82:6f:cd:26:59:f2:79:d9:6f:
cb:63:32:f1:2f:f9:70:f0:e6:71:24:0c:be:1f:ad:
f3:2e:de:17:5c:95:48:19:2e:07:1e:35:3a:e6:32:
b5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:16:F4:97:08:E0:30:C9:33:CD:A0:4A:3C:EA:2F:7D:E9:81:B4:A0
X509v3 Authority Key Identifier:
keyid:9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e4:ad:b9:6e:66:b6:7f:b9:a1:3c:be:e3:eb:18:28:bd:cf:
34:e1:81:08:6c:e4:e1:0e:bb:82:45:fe:99:dc:ec:48:dc:43:
d7:e6:6d:19:c1:ae:28:22:cd:2a:b3:c2:ee:cf:79:01:d1:38:
75:7c:f7:25:5b:54:e1:d8:9a:52:fd:19:32:f5:11:c9:43:57:
4f:f7:e8:ee:f2:55:1f:3d:e2:37:90:33:5b:2a:c3:2e:17:32:
ad:62:a0:6d:5f:ae:63:a0:7f:e4:de:d3:21:e4:1e:a2:a0:b5:
96:1f:51:3c:50:d0:03:91:a8:32:d8:c8:bc:ef:03:6a:99:21:
f4:d5:60:b5:3a:17:dd:1d:ce:07:56:95:20:33:b8:22:61:62:
7f:5b:71:1b:62:cb:33:af:39:3d:db:44:f2:be:ce:c0:dc:9a:
8f:a7:65:00:72:89:ed:94:61:5d:10:00:e2:ea:77:c2:69:c4:
56:dc:85:72:f2:4d:e0:cd:cb:6e:81:89:32:32:0e:05:09:0f:
e9:1d:95:f3:47:58:25:cd:8a:be:10:6b:a1:e9:14:9c:ac:4f:
68:b6:4a:aa:d4:bd:2e:c9:8b:ec:ec:ee:52:de:61:a3:6b:5e:
6e:6b:61:07:6a:7a:e3:c1:97:b8:ab:1c:a8:3f:8d:5a:dd:b8:
2f:bc:49:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 07:35:00 2025 by rpki-client