Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft
File: nwM4t9tUQAKUEDl1Fckw60UtdbA.mft (raw, json)
Hash identifier: H6mWH002LKs570g3XT+RaxUChJ6ZDqVlK40Kc14vDn4=
Subject key identifier: 21:1E:5C:7B:78:3B:4E:B8:C9:60:91:1B:60:B7:77:04:8E:60:A4:1F
Authority key identifier: 9F:03:38:B7:DB:54:40:02:94:10:39:75:15:C9:30:EB:45:2D:75:B0
Certificate issuer: /CN=9f0338b7db5440029410397515c930eb452d75b0
Certificate serial: 019922FAD372FD671DB87D63C6B0A00F267F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 07:01:27 +0000
Manifest this update: Sun 07 Sep 2025 07:01:27 +0000
Manifest next update: Mon 08 Sep 2025 07:01:27 +0000
Files and hashes: 1: HhSxQEAct_Hilmn4S8Eq6DvrLvI.roa (hash: crLyXY2X5OyUyjzwP0FotFChrfWXLKr+2gME4D4k2t8=)
2: nwM4t9tUQAKUEDl1Fckw60UtdbA.crl (hash: am+9AwO0C5SkV+7muqgIToAS5i36WmoqKR9SxEwVV5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:d3:72:fd:67:1d:b8:7d:63:c6:b0:a0:0f:26:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0338b7db5440029410397515c930eb452d75b0
Validity
Not Before: Sep 7 07:01:27 2025 GMT
Not After : Sep 8 07:01:27 2025 GMT
Subject: CN=211e5c7b783b4eb8c960911b60b777048e60a41f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:53:00:1c:40:e5:75:53:08:bf:1a:48:53:69:
dd:8d:30:5f:e0:b3:01:59:48:64:75:d2:1c:fc:be:
8a:31:dd:5a:26:6b:fe:3c:52:76:3d:7e:68:12:36:
d0:58:10:38:f8:2f:08:04:58:1c:b7:2a:1f:af:6a:
86:32:91:50:9d:7c:7e:c7:69:a2:0c:62:85:cc:e8:
64:75:74:81:c2:64:48:b9:13:2c:8e:ce:68:09:e1:
9b:e6:33:a7:6c:b8:9d:53:b5:1b:11:d3:a5:01:19:
0b:e9:87:0b:a5:9e:ab:c7:28:77:74:57:33:e3:62:
c1:91:94:e0:5f:98:14:95:7d:77:05:79:72:c4:fb:
30:f5:b5:4b:d1:ac:e9:9f:a8:e6:22:dc:c4:62:4f:
b9:cc:46:fc:bf:77:19:ea:a0:27:80:23:94:b2:4b:
89:79:3e:c6:ea:3c:89:16:c3:fa:6a:e2:ec:fc:5a:
c5:9b:30:31:38:cd:0e:46:02:69:4f:d5:3e:6e:fc:
24:c3:f4:73:35:60:53:b5:04:36:44:26:b0:f6:f2:
91:05:5a:18:00:a4:a6:0e:42:96:c8:23:c5:cf:4d:
79:05:33:3c:a2:df:8a:ff:b0:6b:8f:90:d9:43:69:
10:67:60:4e:72:c1:35:7f:f3:2f:58:88:c9:d6:b3:
c6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:1E:5C:7B:78:3B:4E:B8:C9:60:91:1B:60:B7:77:04:8E:60:A4:1F
X509v3 Authority Key Identifier:
keyid:9F:03:38:B7:DB:54:40:02:94:10:39:75:15:C9:30:EB:45:2D:75:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:44:e7:4f:c8:b4:e3:c8:f8:13:2f:9f:55:b5:84:98:b0:cd:
bd:20:c0:1c:c5:96:57:42:fa:0d:41:4f:b8:b6:2d:89:aa:8e:
b3:32:f0:27:45:10:39:e0:43:c1:d6:0c:98:70:f4:a0:6b:85:
c5:11:80:b4:ac:83:81:88:7f:f2:1a:ba:b3:38:89:29:d0:40:
a2:a2:c4:d4:f3:6e:05:c3:2e:7b:82:01:f8:05:c5:36:fe:f9:
54:23:50:22:fb:16:36:c6:a4:30:79:15:3f:73:6d:a3:d7:7c:
69:b2:ed:15:bf:64:e3:6f:f4:2d:7d:55:49:9f:62:bf:71:88:
7b:55:76:ff:c5:83:d1:3e:9d:b6:30:ce:8f:d5:c9:15:e1:34:
b5:a4:a6:1c:de:2b:52:94:f3:f7:d2:11:9c:7a:64:3c:19:57:
21:c6:d1:20:32:63:e2:83:9d:e3:5e:bc:d9:3f:e5:94:a1:58:
40:77:bc:bc:04:d6:49:27:83:0b:a3:73:26:6d:b1:03:7a:7d:
fc:74:19:9d:30:aa:c3:fa:6b:c5:b2:4f:82:18:a4:c5:1f:4a:
79:10:7d:cf:14:5a:ad:20:97:84:e4:c9:4d:2d:3e:1d:f6:6a:
42:9c:37:5a:c9:c6:70:14:5b:fe:47:f7:b9:20:45:0c:64:35:
80:9c:eb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:07 2025 by rpki-client