Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
File: nwTDqGM44XBgXmZdNNilyGmUigU.mft (raw, json)
Hash identifier: LY+xjeND4gWpBsgOdXiFNUmVkQtkMdeVb2q7OMtpXz8=
Subject key identifier: 21:8B:E1:A3:13:66:BC:FD:EE:61:C4:74:0D:54:61:D8:78:10:CB:B7
Authority key identifier: 9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
Certificate issuer: /CN=9f04c3a86338e170605e665d34d8a5c869948a05
Certificate serial: 019922C35B48F4CBF52C88E44583D3603F06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
Manifest number: 0690
Signing time: Sun 07 Sep 2025 06:00:52 +0000
Manifest this update: Sun 07 Sep 2025 06:00:52 +0000
Manifest next update: Mon 08 Sep 2025 06:00:52 +0000
Files and hashes: 1: nwTDqGM44XBgXmZdNNilyGmUigU.crl (hash: rDC16vtZzB07glhiccFLyYqyC6R95z3Xn3a8hZ1vsUs=)
2: wa6e-L5g3p2SNEGIRb1a4oqT56I.roa (hash: iBFSre5PI6/cZlAuQmnNGFmFLfmyjvaYR/9ZuSUPyuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:5b:48:f4:cb:f5:2c:88:e4:45:83:d3:60:3f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f04c3a86338e170605e665d34d8a5c869948a05
Validity
Not Before: Sep 7 06:00:52 2025 GMT
Not After : Sep 8 06:00:52 2025 GMT
Subject: CN=218be1a31366bcfdee61c4740d5461d87810cbb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fe:0c:4a:ac:86:e1:38:0e:7a:16:89:f6:7c:
0c:1e:43:8c:ff:c5:0e:a7:26:66:87:11:f9:2c:b5:
41:38:3c:6f:3b:d7:64:7a:49:db:43:93:a1:dd:7d:
6c:96:36:bd:81:a8:06:f9:6e:fa:bd:1c:e6:3a:3b:
71:bb:ab:5d:10:b8:a3:28:bb:a3:8b:e2:40:0a:49:
d0:b5:a4:cc:f7:f5:29:44:53:4a:7a:b5:b8:10:48:
3a:4d:75:23:5a:04:6e:f2:bc:e6:d8:ef:d8:26:ce:
ab:ed:ad:8d:ad:a3:2d:5d:85:be:58:6c:36:bd:99:
67:b9:81:93:fb:2b:65:ae:98:22:38:69:54:d0:69:
7b:e1:56:30:7e:fd:6a:b1:36:3b:cb:72:ec:cf:2e:
a2:7e:d1:7f:3f:af:31:29:95:aa:36:a8:8a:a0:c5:
42:65:b3:d1:0c:59:bc:15:84:48:d1:c2:e0:79:c7:
fe:73:e4:53:20:9c:bc:37:d5:4d:e6:ca:33:94:ac:
df:fe:a1:0e:13:56:fe:27:71:5a:48:68:4a:2b:1e:
26:30:ad:74:d9:34:a2:af:1d:d2:7f:77:5f:75:61:
49:cc:83:7b:94:c6:55:e9:30:34:d2:a5:29:51:7f:
1e:fd:8e:7d:2e:2c:c2:7e:ff:f0:58:23:e7:6f:8d:
ce:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8B:E1:A3:13:66:BC:FD:EE:61:C4:74:0D:54:61:D8:78:10:CB:B7
X509v3 Authority Key Identifier:
keyid:9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:94:7d:82:1b:98:ef:a9:8e:3d:c7:72:00:2c:38:c3:1c:22:
fc:12:e0:f0:68:b8:fe:7d:25:71:2c:0b:d5:71:54:c1:af:74:
ae:a5:f5:27:ad:61:a1:75:80:5b:98:d8:44:a7:54:df:7b:fc:
58:c4:d7:2f:52:25:0b:06:d5:ee:48:c8:ce:ab:5c:ac:c2:e1:
46:6a:55:34:d3:e0:17:f0:e1:48:2e:24:2c:83:46:6f:d9:4d:
62:55:5d:f6:ff:7a:ee:3d:c0:62:ad:d0:55:cc:3c:ae:6f:95:
fc:8e:0f:64:ed:ec:3b:fb:f6:a1:10:ad:96:c0:53:f6:d5:23:
31:11:6f:08:cb:aa:6d:ef:b3:30:ee:3a:b6:b5:0f:5d:f5:69:
26:4d:ab:b1:0e:40:8d:98:75:39:fe:17:4a:e9:a5:7e:b1:3b:
75:42:be:a4:56:60:11:4e:38:05:a2:d6:85:a6:f9:4b:62:dc:
ef:36:40:75:f0:35:05:4f:fa:05:bf:f5:ed:ff:9a:e5:5e:26:
b8:85:c6:03:33:bd:a5:e0:ee:8e:e3:47:44:39:01:91:ef:2a:
6b:97:c0:1c:fb:35:c0:24:bc:5b:4b:70:83:3c:fa:0f:00:40:
80:78:34:2f:ab:80:5f:fd:b5:ed:c9:5b:32:2c:48:bd:9a:76:
b2:5f:62:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiw1tI9Mv1LIjkRYPTYD8GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMDRjM2E4NjMzOGUxNzA2MDVlNjY1ZDM0ZDhhNWM4Njk5
NDhhMDUwHhcNMjUwOTA3MDYwMDUyWhcNMjUwOTA4MDYwMDUyWjAzMTEwLwYDVQQD
EygyMThiZTFhMzEzNjZiY2ZkZWU2MWM0NzQwZDU0NjFkODc4MTBjYmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyv4MSqyG4TgOehaJ9nwMHkOM/8UO
pyZmhxH5LLVBODxvO9dkeknbQ5Oh3X1slja9gagG+W76vRzmOjtxu6tdELijKLuj
i+JACknQtaTM9/UpRFNKerW4EEg6TXUjWgRu8rzm2O/YJs6r7a2NraMtXYW+WGw2
vZlnuYGT+ytlrpgiOGlU0Gl74VYwfv1qsTY7y3Lszy6iftF/P68xKZWqNqiKoMVC
ZbPRDFm8FYRI0cLgecf+c+RTIJy8N9VN5sozlKzf/qEOE1b+J3FaSGhKKx4mMK10
2TSirx3Sf3dfdWFJzIN7lMZV6TA00qUpUX8e/Y59LizCfv/wWCPnb43OmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCGL4aMTZrz97mHEdA1UYdh4EMu3MB8GA1UdIwQY
MBaAFJ8Ew6hjOOFwYF5mXTTYpchplIoFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbndURHFHTTQ0WEJnWG1aZE5OaWx5R21VaWdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84NDllMjYtNjQ3Mi00NDQwLWEwMzgt
N2JhYTkyYTgyOGVjLzEvbndURHFHTTQ0WEJnWG1aZE5OaWx5R21VaWdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS84NDllMjYtNjQ3Mi00NDQwLWEwMzgtN2JhYTkyYTgyOGVj
LzEvbndURHFHTTQ0WEJnWG1aZE5OaWx5R21VaWdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK5R9ghuY
76mOPcdyACw4wxwi/BLg8Gi4/n0lcSwL1XFUwa90rqX1J61hoXWAW5jYRKdU33v8
WMTXL1IlCwbV7kjIzqtcrMLhRmpVNNPgF/DhSC4kLINGb9lNYlVd9v967j3AYq3Q
Vcw8rm+V/I4PZO3sO/v2oRCtlsBT9tUjMRFvCMuqbe+zMO46trUPXfVpJk2rsQ5A
jZh1Of4XSumlfrE7dUK+pFZgEU44BaLWhab5S2Lc7zZAdfA1BU/6Bb/17f+a5V4m
uIXGAzO9peDujuNHRDkBke8qa5fAHPs1wCS8W0twgzz6DwBAgHg0L6uAX/217clb
MixIvZp2sl9iEw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:49:49 2025 by rpki-client