Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
File: nS2GwCi_w46HVFXPgmiaNiZTAsI.mft (raw, json)
Hash identifier: 2v4GQ8lw9mm/pW9f+LVHoKFTMhxh252s195pXLeNVE4=
Subject key identifier: C4:A1:16:DF:DD:9B:B4:23:A5:63:CC:D7:D6:1E:8F:C6:57:27:C2:55
Authority key identifier: 9D:2D:86:C0:28:BF:C3:8E:87:54:55:CF:82:68:9A:36:26:53:02:C2
Certificate issuer: /CN=9d2d86c028bfc38e875455cf82689a36265302c2
Certificate serial: 0199239FB653F8A9DA34F544FAD2C7182567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 10:01:33 +0000
Manifest this update: Sun 07 Sep 2025 10:01:33 +0000
Manifest next update: Mon 08 Sep 2025 10:01:33 +0000
Files and hashes: 1: BCfHRxvaBlgRu7FF6R1aFrqf-D4.roa (hash: jY82l74QOduMSK8Hp/MMojju94Gfvr7fCtUmoiSODw8=)
2: nS2GwCi_w46HVFXPgmiaNiZTAsI.crl (hash: AKN5fKVEFfJh/frutyCCUph86Q9Ca5oX4oKf5qVbQ1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:b6:53:f8:a9:da:34:f5:44:fa:d2:c7:18:25:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2d86c028bfc38e875455cf82689a36265302c2
Validity
Not Before: Sep 7 10:01:33 2025 GMT
Not After : Sep 8 10:01:33 2025 GMT
Subject: CN=c4a116dfdd9bb423a563ccd7d61e8fc65727c255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d9:a6:47:46:98:45:d2:bd:7c:e6:a8:37:90:
f1:bb:a1:67:e3:06:66:ec:18:e6:b1:27:f6:0f:e3:
52:59:dc:c4:5e:93:29:97:78:52:2b:fb:73:26:81:
a6:c8:20:ba:6d:b8:6c:b2:b3:a7:c5:67:2e:ad:ec:
c3:ff:1e:f5:2f:44:6b:cd:2a:d3:3c:cc:f8:b5:76:
f2:70:bb:7c:cb:d2:da:56:dd:db:be:ac:23:02:5e:
d8:fe:12:35:70:4a:f9:72:52:32:52:f2:8a:9b:c9:
1d:08:28:bf:42:1a:e1:ba:c0:2b:80:7b:5f:9e:6e:
50:84:52:42:d1:17:5e:72:db:96:f1:4b:07:0e:ae:
70:ed:e8:1d:82:a2:97:d7:d4:56:4f:d1:e2:82:46:
6e:c3:91:d1:0a:4e:23:ab:2d:34:bf:a9:9e:10:e0:
95:66:6b:2d:66:fd:a4:97:1c:b5:41:22:16:ee:93:
0b:b6:cb:85:7b:0e:2a:d9:8e:5b:b4:f9:8c:e1:85:
39:eb:9a:b9:ae:22:9e:85:0c:d5:2c:e3:c1:9e:82:
b4:49:d6:66:f6:2a:74:ef:e9:5e:c5:9c:c1:0a:5d:
37:7c:69:ee:7d:32:68:95:23:06:44:b4:9d:a1:83:
0e:55:51:cf:13:8f:59:69:1d:89:29:c4:a5:cc:9d:
df:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A1:16:DF:DD:9B:B4:23:A5:63:CC:D7:D6:1E:8F:C6:57:27:C2:55
X509v3 Authority Key Identifier:
keyid:9D:2D:86:C0:28:BF:C3:8E:87:54:55:CF:82:68:9A:36:26:53:02:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:85:4a:4f:77:a8:16:ac:b9:85:30:53:e8:c2:84:32:a9:a1:
d5:01:57:b1:19:75:b7:7d:a8:dc:a5:e3:22:b3:16:e3:b3:1c:
9b:61:99:7c:5d:ec:31:cc:92:8c:fd:e4:d9:c8:ea:ff:ff:35:
d8:50:aa:cf:29:fc:97:9d:3d:14:79:fa:b6:cd:54:37:e7:8a:
28:92:89:4c:4c:21:44:0e:2b:b0:11:8a:95:d5:e0:dc:9c:d5:
b0:9f:40:45:2d:11:4c:15:48:3d:02:2e:27:d1:41:52:36:14:
2f:48:2a:f2:93:ae:89:2e:62:eb:68:c4:b7:df:28:32:eb:4a:
47:45:c1:53:a6:bd:59:f7:58:f4:e3:95:cf:9b:f7:01:41:93:
62:3e:45:44:04:22:99:72:89:14:83:5f:96:bc:2c:ae:96:84:
96:0e:9d:13:3b:31:b4:32:81:37:2d:4f:b7:dc:91:c5:90:44:
3b:4f:5b:bc:27:4e:d6:86:04:7f:a7:39:b9:34:30:44:8e:e2:
70:d5:bf:8c:12:0d:b2:14:68:c9:2e:7a:72:71:6f:91:3f:1a:
4e:35:3d:44:a7:ea:96:96:46:97:45:35:c4:88:53:b8:59:f1:
7e:c5:2f:14:d6:1f:7d:97:7c:49:25:b5:41:9a:a7:e8:b4:85:
4d:7d:a8:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjn7ZT+KnaNPVE+tLHGCVnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmQ4NmMwMjhiZmMzOGU4NzU0NTVjZjgyNjg5YTM2MjY1
MzAyYzIwHhcNMjUwOTA3MTAwMTMzWhcNMjUwOTA4MTAwMTMzWjAzMTEwLwYDVQQD
EyhjNGExMTZkZmRkOWJiNDIzYTU2M2NjZDdkNjFlOGZjNjU3MjdjMjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39mmR0aYRdK9fOaoN5Dxu6Fn4wZm
7BjmsSf2D+NSWdzEXpMpl3hSK/tzJoGmyCC6bbhssrOnxWcurezD/x71L0RrzSrT
PMz4tXbycLt8y9LaVt3bvqwjAl7Y/hI1cEr5clIyUvKKm8kdCCi/QhrhusArgHtf
nm5QhFJC0RdectuW8UsHDq5w7egdgqKX19RWT9HigkZuw5HRCk4jqy00v6meEOCV
ZmstZv2klxy1QSIW7pMLtsuFew4q2Y5btPmM4YU565q5riKehQzVLOPBnoK0SdZm
9ip07+lexZzBCl03fGnufTJolSMGRLSdoYMOVVHPE49ZaR2JKcSlzJ3fVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMShFt/dm7QjpWPM19Yej8ZXJ8JVMB8GA1UdIwQY
MBaAFJ0thsAov8OOh1RVz4JomjYmUwLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblMyR3dDaV93NDZIVkZYUGdtaWFOaVpUQXNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9jMDc4ZmQtZDJiNi00NmJhLWE2YmEt
NDRjM2I3NWQzZjMzLzEvblMyR3dDaV93NDZIVkZYUGdtaWFOaVpUQXNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9jMDc4ZmQtZDJiNi00NmJhLWE2YmEtNDRjM2I3NWQzZjMz
LzEvblMyR3dDaV93NDZIVkZYUGdtaWFOaVpUQXNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS4VKT3eo
Fqy5hTBT6MKEMqmh1QFXsRl1t32o3KXjIrMW47Mcm2GZfF3sMcySjP3k2cjq//81
2FCqzyn8l509FHn6ts1UN+eKKJKJTEwhRA4rsBGKldXg3JzVsJ9ARS0RTBVIPQIu
J9FBUjYUL0gq8pOuiS5i62jEt98oMutKR0XBU6a9WfdY9OOVz5v3AUGTYj5FRAQi
mXKJFINflrwsrpaElg6dEzsxtDKBNy1Pt9yRxZBEO09bvCdO1oYEf6c5uTQwRI7i
cNW/jBINshRoyS56cnFvkT8aTjU9RKfqlpZGl0U1xIhTuFnxfsUvFNYffZd8SSW1
QZqn6LSFTX2oUw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:27:27 2025 by rpki-client