Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft
File: nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft (raw, json)
Hash identifier: TdY0MZS0oNxtctNlrxOT5D1XoUjaeR7ZGGppGisZOK0=
Subject key identifier: D9:1E:15:38:56:8E:84:26:E0:3C:93:6C:87:73:8B:58:F1:1B:1D:EA
Authority key identifier: 9D:66:A5:CF:A3:9C:FA:91:E3:13:44:3F:61:3E:73:CC:E7:3F:21:40
Certificate issuer: /CN=9d66a5cfa39cfa91e313443f613e73cce73f2140
Certificate serial: 01984708FEEA099B2753E14179A0A8FA2163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft
Manifest number: 0F2B
Signing time: Sat 26 Jul 2025 14:00:28 +0000
Manifest this update: Sat 26 Jul 2025 14:00:28 +0000
Manifest next update: Sun 27 Jul 2025 14:00:28 +0000
Files and hashes: 1: S97lFgLq26JbbTYFy87788PSLWo.roa (hash: is6nhjEc4wx03A1n5kSCHVis+Wuf1J/yxv2gFot2aXA=)
2: nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl (hash: gdyXMm924Vki7KEezc4hFNr3Jt8acxZOwDmO7sVWpj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:08:fe:ea:09:9b:27:53:e1:41:79:a0:a8:fa:21:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d66a5cfa39cfa91e313443f613e73cce73f2140
Validity
Not Before: Jul 26 14:00:28 2025 GMT
Not After : Jul 27 14:00:28 2025 GMT
Subject: CN=d91e1538568e8426e03c936c87738b58f11b1dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:21:51:a7:c7:ab:8d:47:e8:7c:76:b2:21:18:
93:bc:6f:f9:97:8c:fd:80:aa:a6:54:6d:82:5b:87:
c3:f5:8d:19:39:b2:34:37:a9:c4:48:16:f3:de:13:
8a:f3:67:05:a3:f0:74:67:ca:8b:df:ae:61:21:7c:
bc:47:6e:2d:a4:30:6a:4b:99:9b:48:96:52:3b:07:
25:4c:f3:eb:c2:e7:14:7d:51:c7:a7:12:10:10:b8:
f4:9e:e1:a7:a0:4e:16:e0:8d:77:fb:6a:5c:c7:59:
8d:1e:14:21:dd:6e:9d:f9:72:a4:45:0e:c6:89:f9:
36:ea:46:39:03:f4:90:45:26:04:49:da:03:a0:6d:
aa:fb:ed:0a:fb:3e:86:14:22:52:11:b9:19:18:1c:
82:bd:0d:cb:60:67:46:54:12:b7:bc:52:b3:4f:c7:
fb:81:56:e8:8e:3b:ca:69:f0:e0:24:5b:ad:ec:df:
84:97:0c:16:7e:76:ad:0e:51:76:b2:d6:27:1b:da:
41:10:ae:2d:2f:1a:f0:4b:44:1f:8e:71:f3:d4:b8:
34:f6:c5:04:69:63:1f:34:9e:73:04:9b:96:b8:b8:
7d:59:31:7c:f7:97:01:ba:73:ee:8a:f0:4a:a1:b1:
a7:26:4f:54:f9:5d:72:39:bf:60:f3:c7:f0:58:e4:
05:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1E:15:38:56:8E:84:26:E0:3C:93:6C:87:73:8B:58:F1:1B:1D:EA
X509v3 Authority Key Identifier:
keyid:9D:66:A5:CF:A3:9C:FA:91:E3:13:44:3F:61:3E:73:CC:E7:3F:21:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:bf:01:6b:d6:38:21:5a:49:57:7a:b4:eb:70:cb:24:42:df:
c3:29:48:f7:21:9c:56:23:96:77:b6:30:d3:65:78:a1:90:7e:
8f:bc:44:12:67:96:cd:38:a5:f6:17:e1:b2:64:cb:ed:c4:8c:
b6:47:fd:0b:0d:ae:a3:34:10:5c:22:28:10:3e:69:5d:79:ef:
16:e4:93:74:70:52:1d:6c:02:81:91:4c:d4:40:05:3f:d4:af:
a4:57:67:4e:24:fb:06:68:94:f5:91:08:e4:e6:76:26:dd:b4:
f9:3e:91:b0:ef:0b:c0:b1:19:9a:3d:5a:bd:45:4d:62:c5:b0:
2e:79:86:61:70:14:69:89:a7:95:79:a6:90:82:f8:31:01:e9:
03:76:38:e4:86:0d:e4:65:e7:7e:b5:38:fe:b6:b5:a6:e2:c9:
92:35:15:9b:01:a3:18:2a:1f:a8:79:5f:96:82:9a:bc:14:34:
88:db:5e:d7:c2:5d:bd:46:1b:8b:61:40:eb:67:8e:67:4f:2d:
3a:17:2f:90:4f:1e:22:8f:b3:98:e9:9f:49:8b:50:9c:02:5f:
48:ef:87:cd:94:f0:bc:25:26:d4:72:18:92:33:9c:1b:c1:24:
5e:11:14:9e:ff:6a:a4:d5:d9:8a:fa:a0:dd:79:f4:c6:49:24:
37:03:06:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:09:32 2025 by rpki-client