Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
File: NwjgT9e_gbZ13L57KaomPJEgeLY.mft (raw, json)
Hash identifier: QNtyeUX6lyTtiH+jvOLlc3pREPJZr37EtfL8p+IOzHw=
Subject key identifier: CD:04:E9:E0:4E:77:28:21:04:9E:52:47:B4:E6:F0:91:9D:18:0F:B7
Authority key identifier: 37:08:E0:4F:D7:BF:81:B6:75:DC:BE:7B:29:AA:26:3C:91:20:78:B6
Certificate issuer: /CN=3708e04fd7bf81b675dcbe7b29aa263c912078b6
Certificate serial: 019A7225B5C6435A20774A7EA6057A35D228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
Manifest number: 0B4D
Signing time: Tue 11 Nov 2025 09:01:05 +0000
Manifest this update: Tue 11 Nov 2025 09:01:05 +0000
Manifest next update: Wed 12 Nov 2025 09:01:05 +0000
Files and hashes: 1: NwjgT9e_gbZ13L57KaomPJEgeLY.crl (hash: R1pRqLZJbUfWbsHuP+ofhEToUhocgk5fSH4fXDqYCFA=)
2: dQrN5l4ER8ioZrR3Ol61rF1mTIM.roa (hash: i6nZan7ltRkXD1mx1+9g2E7sNbpHefpKiqIOGyeWWGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:b5:c6:43:5a:20:77:4a:7e:a6:05:7a:35:d2:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3708e04fd7bf81b675dcbe7b29aa263c912078b6
Validity
Not Before: Nov 11 09:01:05 2025 GMT
Not After : Nov 12 09:01:05 2025 GMT
Subject: CN=cd04e9e04e772821049e5247b4e6f0919d180fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:09:5a:e8:f1:87:1e:ba:72:ed:99:78:85:3f:
57:e4:bb:26:80:d0:23:11:05:83:39:a1:c5:cf:cf:
12:ad:6c:83:47:9b:60:85:1c:75:92:e1:e3:56:be:
0a:af:f9:8c:e4:65:ae:41:ee:ed:2c:8b:83:22:2b:
86:d9:45:30:f9:05:a8:c5:2f:e6:a8:4e:2d:ec:f4:
e5:cf:df:c0:93:10:24:c8:a1:9a:9b:e9:65:b5:7f:
8f:b1:4d:7b:9b:e1:0d:9e:f5:c5:a9:48:06:7e:dd:
23:69:d9:12:08:13:91:e2:36:52:34:93:f1:d3:d0:
8e:4b:ab:83:1c:cb:15:37:40:1d:5d:81:30:e3:d8:
c4:e7:77:66:a0:9a:c6:04:33:ca:c1:a7:46:7b:45:
a4:d1:4e:ed:79:19:de:fb:49:69:06:0f:5e:d5:87:
c9:9a:57:9c:e4:e9:33:98:54:93:6b:21:28:03:22:
0e:97:17:90:a2:9a:66:09:5b:5e:ef:69:e4:90:a9:
db:61:44:37:2c:40:ff:e5:fd:10:a1:cc:66:67:35:
21:d5:e2:f6:43:81:e8:35:76:af:78:97:49:0f:88:
ca:6b:7b:cb:4e:5d:b6:9e:e6:b8:93:3e:9a:f6:e0:
0a:a8:a0:3c:15:7e:0b:42:c9:86:45:62:cc:37:87:
6d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:04:E9:E0:4E:77:28:21:04:9E:52:47:B4:E6:F0:91:9D:18:0F:B7
X509v3 Authority Key Identifier:
keyid:37:08:E0:4F:D7:BF:81:B6:75:DC:BE:7B:29:AA:26:3C:91:20:78:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:23:26:b7:cb:71:ad:43:ab:22:6f:cb:2e:9f:78:0c:48:1c:
ee:b7:ed:b2:e5:d2:06:13:62:f1:94:02:51:47:cd:e8:d8:d9:
8c:d6:bc:d1:00:aa:d1:ff:4a:60:ea:7e:7b:51:08:aa:e4:fa:
08:12:c1:85:de:57:5d:52:c0:ff:6f:35:56:6d:54:81:79:f9:
a2:28:b0:83:97:be:40:2a:cf:a9:4c:ab:41:55:be:3f:b1:46:
18:92:44:53:a0:9b:5f:ab:92:e5:7a:18:c3:29:5e:a4:0b:78:
79:7f:e6:f7:a8:dc:8f:bb:e7:7c:cf:b9:b9:4f:5e:b7:9c:f1:
b4:bc:bb:28:4f:c9:41:f9:31:b8:cc:22:e5:01:f3:09:11:db:
a2:bd:f1:30:2e:42:94:be:f6:26:4b:cc:29:19:f6:e0:44:a5:
3a:ee:bc:05:80:98:89:cb:0a:5a:bc:e9:7f:dc:5a:7f:24:26:
33:c5:6a:68:d3:8d:01:97:eb:60:44:b0:e7:53:5e:7a:60:2b:
b3:be:74:8f:7a:c5:b8:8d:75:04:3a:3e:16:8c:30:3a:8c:a7:
19:a9:bc:6b:19:c2:2d:d9:30:47:9b:bb:36:c6:54:93:a2:e4:
88:29:35:40:57:89:49:c5:0b:45:de:39:65:c7:57:79:a5:d2:
1c:aa:9b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:47 2025 by rpki-client