Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
File: nmw2D-XITxlWHHrpu89PnPpHi08.mft (raw, json)
Hash identifier: w0a2hwVIoOLBQZdex34/tRSuE6cjSTwTxvf+uuaBbAk=
Subject key identifier: AE:94:7E:A2:43:F5:50:6B:BC:BD:BE:7E:31:FA:9A:CA:64:52:1B:25
Authority key identifier: 9E:6C:36:0F:E5:C8:4F:19:56:1C:7A:E9:BB:CF:4F:9C:FA:47:8B:4F
Certificate issuer: /CN=9e6c360fe5c84f19561c7ae9bbcf4f9cfa478b4f
Certificate serial: 019A711341374928DE01A5D398F3E7E38762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmw2D-XITxlWHHrpu89PnPpHi08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
Manifest number: 09D6
Signing time: Tue 11 Nov 2025 04:01:18 +0000
Manifest this update: Tue 11 Nov 2025 04:01:18 +0000
Manifest next update: Wed 12 Nov 2025 04:01:18 +0000
Files and hashes: 1: nmw2D-XITxlWHHrpu89PnPpHi08.crl (hash: ufq5ghdE29MqZuP42jmGRkOOqchcBECIWG122qfPbnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmw2D-XITxlWHHrpu89PnPpHi08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:41:37:49:28:de:01:a5:d3:98:f3:e7:e3:87:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6c360fe5c84f19561c7ae9bbcf4f9cfa478b4f
Validity
Not Before: Nov 11 04:01:18 2025 GMT
Not After : Nov 12 04:01:18 2025 GMT
Subject: CN=ae947ea243f5506bbcbdbe7e31fa9aca64521b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:06:5f:e8:10:76:61:9f:04:b5:df:9f:ca:28:
11:f4:61:a4:49:bb:30:df:7c:cd:e5:94:05:97:8e:
d4:46:4a:5a:3a:4a:bb:d8:ed:6f:92:28:d8:da:3b:
a9:12:dc:f1:ce:88:a1:b6:fa:e9:f0:4d:08:2e:db:
78:40:25:d4:f8:23:5f:ad:70:14:49:32:da:c5:eb:
3d:8c:f7:86:f7:34:b8:f5:a6:6b:17:38:e8:b8:2a:
7b:8d:17:e0:3d:60:bf:b0:4c:ce:c0:75:f0:2e:7b:
4e:14:7d:fa:cc:b4:0f:5b:fd:bf:77:f4:ac:49:6e:
19:cb:58:ad:a7:59:58:09:dc:c7:19:fd:52:ff:7b:
ec:3b:18:57:60:d6:96:00:30:09:7e:91:ee:95:20:
74:95:aa:f5:01:1a:17:ec:d6:78:ed:8f:4e:b5:01:
ae:30:7a:46:02:13:2a:c1:c5:8b:14:4f:c1:89:a6:
b3:9c:8e:7c:65:ff:5b:1e:fa:94:e7:a7:9f:2d:cc:
19:90:13:45:b9:18:8d:d9:32:6f:99:f6:ba:c4:2f:
0f:ab:5e:db:be:e5:cf:0f:38:b8:68:c1:38:20:7e:
f8:bf:f3:17:9f:77:d7:48:59:78:d6:b5:da:d3:33:
10:fa:34:20:35:70:b3:79:ee:f2:6c:63:c9:ed:87:
2b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:94:7E:A2:43:F5:50:6B:BC:BD:BE:7E:31:FA:9A:CA:64:52:1B:25
X509v3 Authority Key Identifier:
keyid:9E:6C:36:0F:E5:C8:4F:19:56:1C:7A:E9:BB:CF:4F:9C:FA:47:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmw2D-XITxlWHHrpu89PnPpHi08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:c3:ef:3e:d9:f1:55:bc:04:e1:0f:7b:dc:91:6a:2c:e3:ff:
5f:f3:53:95:e1:3d:55:47:0a:35:b3:a6:8f:38:08:34:19:69:
61:ce:62:7d:aa:31:a4:7c:b4:8d:5b:e5:e3:51:3f:c6:6d:32:
77:23:c9:55:9e:dc:50:9f:49:e6:20:20:39:8e:8e:a5:a6:6a:
5b:78:57:d4:ff:35:30:e1:3c:df:53:c8:6d:98:eb:89:5f:db:
3b:f4:5e:2c:03:f5:59:03:78:7b:f4:4d:bc:6f:50:46:a6:5c:
09:b2:4e:b4:cf:8c:aa:e2:1b:31:f3:73:7a:c6:ec:1f:7c:0f:
c8:ff:bc:be:2f:49:f4:c7:78:1a:fe:35:40:0f:22:b0:89:79:
99:44:8d:0c:51:88:45:a4:6c:4b:53:56:8e:0b:26:41:1a:72:
b5:e6:2f:89:24:a7:3d:1d:a6:4d:19:82:33:63:d2:16:7a:e4:
1d:25:49:cb:19:2e:82:f1:3f:0c:db:81:6c:59:78:32:19:64:
e9:35:08:28:a9:f0:e9:5f:06:aa:d5:78:be:86:66:07:29:13:
ed:84:3f:aa:47:9f:5b:88:cc:03:85:5d:75:e9:dd:1d:71:ef:
eb:79:83:2f:de:9d:27:a0:cc:e1:94:8e:7a:21:51:45:0e:cd:
b9:d5:ae:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:03 2025 by rpki-client