Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
File: nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft (raw, json)
Hash identifier: kT7NhY3uO79arMJtPEC6iK455hBJKg4jQXDW9uUlsqE=
Subject key identifier: BC:14:64:04:7D:35:FC:03:A2:AB:A0:37:A7:E7:20:AC:30:6B:29:D5
Authority key identifier: 9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
Certificate issuer: /CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Certificate serial: 019A3EDCF648B49D8FD2F37C361B07D39005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
Manifest number: 01EE
Signing time: Sat 01 Nov 2025 10:00:59 +0000
Manifest this update: Sat 01 Nov 2025 10:00:59 +0000
Manifest next update: Sun 02 Nov 2025 10:00:59 +0000
Files and hashes: 1: 4hEwPlQV2R3wkknVQDbhfUdi-Hg.roa (hash: mjLFc+VoWHA5LJYiCj4OZP4v7wKlAoLVjBHa2WdTgLI=)
2: nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl (hash: De7u/ED2i96a8qLx5iu0aauuI/TlTYgXuCDd9Jx5x3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3e:dc:f6:48:b4:9d:8f:d2:f3:7c:36:1b:07:d3:90:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Validity
Not Before: Nov 1 10:00:59 2025 GMT
Not After : Nov 2 10:00:59 2025 GMT
Subject: CN=bc1464047d35fc03a2aba037a7e720ac306b29d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0c:f0:22:fb:a1:f4:80:a1:5d:10:21:a0:fd:
f4:00:00:cc:13:e7:15:4b:5b:3b:5e:2a:a9:49:d2:
89:4c:1f:f7:1c:97:3a:19:a0:8e:14:d8:70:83:ce:
b2:4e:33:49:44:4a:1d:6d:34:36:c2:38:23:65:c3:
bc:43:61:1c:5c:37:4f:28:c0:bb:69:75:51:92:81:
5d:ea:89:7f:a6:c4:db:b0:ed:f4:97:94:4c:52:93:
ca:ba:0b:62:dc:1a:c6:02:2d:1d:e0:46:24:11:ca:
3a:08:0b:30:05:49:9f:67:7a:1a:71:15:17:b5:3d:
f9:28:3a:a4:9c:89:db:6e:91:5b:a0:fa:e4:8b:cd:
26:cd:a8:0a:49:69:34:f0:47:33:ed:ce:55:67:68:
bf:73:94:e4:0c:c8:7f:e4:2e:a7:ed:85:f9:65:ce:
88:80:83:a9:9a:e6:92:f1:1a:38:07:36:4b:a4:6a:
65:75:53:1e:94:71:03:fa:98:b8:bb:e2:b9:9a:9d:
f1:66:31:35:39:55:9a:a0:44:ce:0e:4f:24:1f:5f:
fc:ff:30:84:98:54:0b:3a:9f:d6:77:48:1a:db:48:
2f:a9:ab:8e:6d:97:0c:c2:71:96:51:c6:f1:18:f7:
7f:97:db:37:9d:0c:ae:bc:f5:9e:a3:21:98:cb:f5:
ba:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:14:64:04:7D:35:FC:03:A2:AB:A0:37:A7:E7:20:AC:30:6B:29:D5
X509v3 Authority Key Identifier:
keyid:9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ca:49:5b:f0:a2:6f:f1:0d:c0:63:b8:ad:00:51:84:ad:76:
27:ba:77:1c:1e:71:e2:28:67:85:44:3c:d8:d8:e9:ac:54:1c:
0e:f2:9e:9c:f8:9e:d7:11:32:fc:97:04:1c:fc:12:9d:cb:4a:
27:2a:4b:45:7c:c0:8e:29:28:be:7e:04:11:85:b1:9a:81:13:
e7:b7:6f:72:d1:25:5a:20:90:99:a2:ee:87:df:df:a6:79:46:
1a:4d:ec:f1:50:d5:9a:81:a9:9a:80:f0:1a:dc:6d:c2:6a:00:
ad:8d:34:b4:08:5d:4f:a5:dd:c5:30:a9:36:ec:2b:b7:8c:30:
23:50:05:82:0e:41:1e:49:2b:4a:dd:d2:7f:40:f1:3f:1f:c5:
ff:4b:d3:e6:17:54:a4:39:20:9e:02:61:9e:f8:7c:3d:5f:62:
9b:e5:04:1d:99:7d:0d:8c:e8:29:c9:33:fc:e9:75:4c:44:db:
e3:8c:56:bc:35:81:23:60:fb:af:ef:e7:7a:f2:b0:3c:29:8c:
62:2d:09:14:a1:19:a3:f5:27:3b:bb:65:ea:67:0d:26:42:b5:
37:30:6a:a4:97:63:cf:1e:c7:93:f2:4c:e8:c4:e5:4a:8b:5d:
50:f5:fd:6a:96:4b:a0:8a:a4:55:a9:39:b7:4b:d8:eb:ca:b5:
c5:7c:bf:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 15:54:07 2025 by rpki-client