Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
File: NawwjJT1exHO4bqE7xJ4RHxnhes.mft (raw, json)
Hash identifier: I4TNkotG1kxh20LKttdUvNaKumv/effWH5jO+VLRomE=
Subject key identifier: 48:8C:C9:2E:A8:2A:AA:28:53:D8:72:55:74:E3:A4:96:D6:61:E6:97
Authority key identifier: 35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB
Certificate issuer: /CN=35ac308c94f57b11cee1ba84ef1278447c6785eb
Certificate serial: 019A1798319FE9480E776F69595289C45762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
Manifest number: 16F2
Signing time: Fri 24 Oct 2025 19:00:41 +0000
Manifest this update: Fri 24 Oct 2025 19:00:41 +0000
Manifest next update: Sat 25 Oct 2025 19:00:41 +0000
Files and hashes: 1: NawwjJT1exHO4bqE7xJ4RHxnhes.crl (hash: ZZi0Cnk1+lm2ZB0V5dY8QmLDhAcYYG+5moz+054O7J0=)
2: ge72rIVKenfFe0v5asZR_PaxIp4.roa (hash: o9engqettqOIJ9n8PYQ/SXW11G8NZE3fZOewqKwRqSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 19:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:17:98:31:9f:e9:48:0e:77:6f:69:59:52:89:c4:57:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ac308c94f57b11cee1ba84ef1278447c6785eb
Validity
Not Before: Oct 24 19:00:41 2025 GMT
Not After : Oct 25 19:00:41 2025 GMT
Subject: CN=488cc92ea82aaa2853d8725574e3a496d661e697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:69:8c:94:31:e2:43:cc:8b:6e:77:22:ca:32:
c6:1b:c1:4b:3f:37:81:f3:13:e2:cf:fc:69:47:8a:
b3:af:bf:0d:d7:d4:56:ec:c3:1c:ff:78:91:b3:99:
12:d7:66:88:d6:f5:fa:96:a7:99:4c:27:22:e8:cd:
37:2d:46:7e:93:16:94:c5:1e:27:af:4d:58:77:ff:
50:98:ab:77:8b:0f:81:ac:c5:fd:57:bf:ea:e7:22:
8b:26:43:3e:3f:c3:6b:72:93:09:36:c5:75:ea:4a:
32:d1:94:4f:8f:ef:fe:39:6a:e1:21:1c:18:81:52:
79:10:00:95:90:bc:ea:a9:cc:ba:2e:02:c5:b2:ee:
f4:22:57:11:69:ab:d8:27:2d:93:b7:06:bd:4d:7a:
7c:47:55:fc:89:61:e7:50:99:ac:4f:b1:81:2b:f8:
3e:f5:8e:61:41:73:b1:8e:f3:0e:9d:6b:2d:a0:e3:
99:7b:aa:d3:a1:44:bb:6d:1f:07:04:45:53:f9:d4:
9a:e6:46:b2:b1:af:52:87:7a:4a:5a:d0:64:0b:14:
aa:55:28:9b:a7:08:30:40:b2:5c:cf:12:34:3b:7b:
f3:f3:93:ac:90:18:1d:b1:06:06:5f:f3:f5:22:5a:
ee:c9:65:84:c4:fc:11:e1:78:29:17:d5:bf:17:fd:
00:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8C:C9:2E:A8:2A:AA:28:53:D8:72:55:74:E3:A4:96:D6:61:E6:97
X509v3 Authority Key Identifier:
keyid:35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3b:2e:d4:b3:88:a6:47:45:3e:8c:8e:0d:f8:3d:5d:0a:a6:
47:a9:89:a8:5c:eb:55:8f:13:5d:fe:34:ca:b4:f9:5d:4e:e0:
49:84:37:9b:51:79:5c:e2:1e:bb:9b:a3:c8:66:21:5e:15:31:
40:e7:45:b1:78:54:ec:e7:d9:24:4a:c3:58:76:25:04:71:da:
cd:0c:cb:49:60:10:74:e6:cb:74:35:5f:4a:5e:0e:bb:4f:ac:
90:e2:76:19:47:c7:e9:48:da:09:95:30:70:54:3b:2d:e6:07:
a2:d5:f8:18:03:a9:c6:23:28:ce:b2:e3:db:6c:42:09:37:9e:
b0:7e:bd:94:f3:57:f4:34:78:f9:d8:89:34:7e:64:ff:77:5e:
07:18:3f:ac:ce:68:e1:26:c3:3b:9f:fa:99:ba:bc:cb:29:9e:
23:17:ac:ed:95:00:41:b7:94:4a:5c:61:3c:7e:c0:fc:db:a1:
d4:b3:79:ed:f9:43:cb:9d:29:d2:f1:00:38:f4:56:e4:95:6a:
4e:b5:6f:21:ee:8f:1c:c3:25:d8:4e:f2:35:17:47:b0:d2:19:
e0:56:c5:fb:3e:cd:c0:08:89:10:75:d5:ac:ab:40:25:6c:dc:
ac:a3:3e:18:6e:84:ff:c1:dd:c4:eb:55:14:8f:3a:b4:3c:89:
09:e7:89:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 04:21:13 2025 by rpki-client