Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
File: nwSzzyTPS4GyIhFGoA8id7w0h4A.mft (raw, json)
Hash identifier: H0TjZCFBcbcfrAFjxafCv+llhQTg48ydD7kS+xH3E9A=
Subject key identifier: 41:07:DE:F2:ED:0A:23:B1:F6:C4:C7:6D:BF:11:18:C6:D3:2E:4B:1C
Authority key identifier: 9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
Certificate issuer: /CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Certificate serial: 0198439AE8BD320BF01A9033F702326F86B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
Manifest number: 10A0
Signing time: Fri 25 Jul 2025 22:01:22 +0000
Manifest this update: Fri 25 Jul 2025 22:01:22 +0000
Manifest next update: Sat 26 Jul 2025 22:01:22 +0000
Files and hashes: 1: JkR72JNkfOOkf4Hdto9Hn61nIOM.roa (hash: GdSC1LJhK3esreP7fCY/nmDtbQZgfXPG6XPWXjCKZig=)
2: Q8bZioVPDoZ4xd-x42q6Z5HkkPQ.roa (hash: uBME2SsaTDhptgYkDGLlHO5wga4qvwY0K6f/+pZrE38=)
3: nwSzzyTPS4GyIhFGoA8id7w0h4A.crl (hash: s/OtLNJWk+BCA52Ow1XbXlGmH6QhjXaonNcWoWBpIjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:9a:e8:bd:32:0b:f0:1a:90:33:f7:02:32:6f:86:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Validity
Not Before: Jul 25 22:01:22 2025 GMT
Not After : Jul 26 22:01:22 2025 GMT
Subject: CN=4107def2ed0a23b1f6c4c76dbf1118c6d32e4b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0d:b0:63:17:bf:3a:9d:53:0a:ce:fb:91:da:
71:68:74:35:a0:9b:57:85:78:3f:52:4a:44:6b:d1:
a0:04:5c:f0:56:a6:c2:44:37:d1:29:24:9f:a5:d4:
f2:08:fc:39:03:75:39:9c:34:d1:78:3a:b5:d1:fe:
e9:d5:cb:e0:8b:b8:0e:16:7c:4e:35:5f:a4:14:b9:
fa:b3:37:83:33:9d:23:dc:f4:66:cc:5a:37:7c:8a:
83:d6:c5:2f:21:be:31:62:fe:b4:6c:b5:c8:e4:0f:
52:65:85:d3:5e:3b:81:8b:97:a5:fb:1c:36:f6:27:
d6:6e:a7:96:1b:9d:d0:b2:f1:8f:1b:04:2e:f3:49:
86:b6:39:4b:0d:d7:09:22:58:e2:b2:00:bb:f1:97:
f4:1a:65:fb:97:80:54:24:8d:fb:7c:a0:46:58:e2:
ee:1e:67:0f:3d:da:61:f0:f1:a1:0d:78:bc:57:2b:
5f:b7:10:8a:84:c8:dc:4a:ac:95:a2:fa:11:46:db:
1f:fa:7f:d5:05:a0:6f:5e:e7:6b:03:cc:6a:e4:15:
8f:51:4b:4a:24:dc:a4:98:36:ae:7f:ee:3c:77:0f:
3b:6d:83:d8:8f:6d:2d:2e:42:d9:17:65:0a:ec:af:
e6:0f:4d:52:e9:4b:d8:cf:d7:74:73:ca:56:49:5e:
6c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:07:DE:F2:ED:0A:23:B1:F6:C4:C7:6D:BF:11:18:C6:D3:2E:4B:1C
X509v3 Authority Key Identifier:
keyid:9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ee:4b:50:59:30:a8:95:5f:2b:05:5e:7c:bc:d9:de:45:d8:
70:42:93:4f:63:af:f2:a9:c1:e1:e1:6c:c0:2e:f4:75:4b:1c:
e1:d7:78:4e:dc:94:f3:66:7a:95:fb:af:3a:87:26:4c:a0:1f:
1c:04:50:2b:5f:d0:52:c9:37:5d:47:1a:72:65:72:af:5e:92:
8a:9a:d1:48:9d:00:1d:4c:06:45:73:bf:97:82:21:54:6d:1f:
78:bf:65:5f:98:9e:4c:32:51:b1:42:8b:7f:5f:f2:4b:cc:10:
7a:c4:d6:ed:6c:cf:bd:4a:3c:71:c6:39:b8:f6:67:7e:30:da:
3a:f1:db:69:d1:3a:82:bd:71:e6:ab:0b:29:72:69:3f:7a:d0:
b1:27:85:e1:6b:bc:53:c9:e0:2a:94:69:a2:5b:01:80:e3:05:
bc:ec:13:fa:00:41:b9:21:e2:06:e5:09:41:9e:1d:32:9c:e6:
ca:17:cf:7d:fb:b0:d8:c8:fa:ca:fd:c0:35:a1:37:c2:be:4c:
c4:ec:55:a0:17:aa:a3:3f:09:e4:27:30:f3:9c:d2:c0:ad:e6:
ab:97:be:23:91:f0:27:e6:94:a6:1d:fb:cb:c6:92:78:2e:d6:
92:99:d9:52:24:35:10:1e:0b:b6:cd:0c:70:5a:8d:3c:c2:a3:
d3:c3:15:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhDmui9MgvwGpAz9wIyb4a3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMDRiM2NmMjRjZjRiODFiMjIyMTE0NmEwMGYyMjc3YmMz
NDg3ODAwHhcNMjUwNzI1MjIwMTIyWhcNMjUwNzI2MjIwMTIyWjAzMTEwLwYDVQQD
Eyg0MTA3ZGVmMmVkMGEyM2IxZjZjNGM3NmRiZjExMThjNmQzMmU0YjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtA2wYxe/Op1TCs77kdpxaHQ1oJtX
hXg/UkpEa9GgBFzwVqbCRDfRKSSfpdTyCPw5A3U5nDTReDq10f7p1cvgi7gOFnxO
NV+kFLn6szeDM50j3PRmzFo3fIqD1sUvIb4xYv60bLXI5A9SZYXTXjuBi5el+xw2
9ifWbqeWG53QsvGPGwQu80mGtjlLDdcJIljisgC78Zf0GmX7l4BUJI37fKBGWOLu
HmcPPdph8PGhDXi8VytftxCKhMjcSqyVovoRRtsf+n/VBaBvXudrA8xq5BWPUUtK
JNykmDauf+48dw87bYPYj20tLkLZF2UK7K/mD01S6UvYz9d0c8pWSV5sqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEH3vLtCiOx9sTHbb8RGMbTLkscMB8GA1UdIwQY
MBaAFJ8Es88kz0uBsiIRRqAPIne8NIeAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbndTenp5VFBTNEd5SWhGR29BOGlkN3cwaDRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9kYTM1OGMtMmU0Ny00NGVjLWIwYzUt
MmFkOTY4YjM2MmRlLzEvbndTenp5VFBTNEd5SWhGR29BOGlkN3cwaDRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9kYTM1OGMtMmU0Ny00NGVjLWIwYzUtMmFkOTY4YjM2MmRl
LzEvbndTenp5VFBTNEd5SWhGR29BOGlkN3cwaDRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAme5LUFkw
qJVfKwVefLzZ3kXYcEKTT2Ov8qnB4eFswC70dUsc4dd4TtyU82Z6lfuvOocmTKAf
HARQK1/QUsk3XUcacmVyr16SiprRSJ0AHUwGRXO/l4IhVG0feL9lX5ieTDJRsUKL
f1/yS8wQesTW7WzPvUo8ccY5uPZnfjDaOvHbadE6gr1x5qsLKXJpP3rQsSeF4Wu8
U8ngKpRpolsBgOMFvOwT+gBBuSHiBuUJQZ4dMpzmyhfPffuw2Mj6yv3ANaE3wr5M
xOxVoBeqoz8J5Ccw85zSwK3mq5e+I5HwJ+aUph37y8aSeC7WkpnZUiQ1EB4Lts0M
cFqNPMKj08MVnw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 06:29:32 2025 by rpki-client