Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
File: nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft (raw, json)
Hash identifier: 7tq8DohzTzderUsW+IXEfarxsqo6VHK8TDcHvpO6r9w=
Subject key identifier: C7:55:B5:AD:A6:C1:4B:4B:F1:E5:EE:40:8A:45:DA:4D:D4:98:BC:90
Authority key identifier: 9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
Certificate issuer: /CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Certificate serial: 01993981F7267C8156EFD4A056B38445494A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
Manifest number: 0F3D
Signing time: Thu 11 Sep 2025 16:00:42 +0000
Manifest this update: Thu 11 Sep 2025 16:00:42 +0000
Manifest next update: Fri 12 Sep 2025 16:00:42 +0000
Files and hashes: 1: nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl (hash: M1jQhs8SJiTwgEBtaezUmc2MOKLboU7yTH3srfo6od0=)
2: wTe6nqB8fZi5LCCWrszMuZB2Wbc.roa (hash: J68IWCsFvDV9cShA3lK5AicjeJ9rPLGBf/VEjmcr5l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 14:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:81:f7:26:7c:81:56:ef:d4:a0:56:b3:84:45:49:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Validity
Not Before: Sep 11 16:00:42 2025 GMT
Not After : Sep 12 16:00:42 2025 GMT
Subject: CN=c755b5ada6c14b4bf1e5ee408a45da4dd498bc90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e5:01:7c:bc:2e:15:39:30:59:66:bd:c4:6c:
de:d7:c4:2f:fa:74:be:ca:4f:1a:bc:33:f2:c5:2f:
97:48:17:51:fb:78:5b:0f:97:99:e4:06:f1:6e:c6:
ca:8b:2b:ed:b0:fe:18:48:d2:3b:5e:de:25:12:c1:
9f:61:5e:d4:fa:e1:6f:70:1c:bb:f7:47:1a:95:c0:
77:44:f3:e1:d1:16:e5:05:e5:f0:98:b0:9d:30:7d:
98:b8:9c:06:f5:31:94:3a:37:bd:ef:e1:f3:9e:3b:
ca:01:be:c3:4f:e2:d3:b1:24:43:1f:6a:18:df:b1:
97:4a:44:e4:53:39:9d:ee:23:b6:e3:fd:59:2e:12:
c6:b6:90:40:75:01:40:c8:e8:45:3e:83:30:8f:91:
7c:a5:71:0d:db:a0:57:d1:b2:47:c0:43:c8:a0:cd:
25:02:3b:4c:34:00:5e:6c:d4:00:c0:24:c6:d5:37:
a2:f1:8f:e5:f9:83:2f:17:7a:9f:f2:32:03:aa:a0:
0f:90:7d:84:74:08:ef:3b:70:af:e9:d2:66:c7:8d:
f9:6c:2a:87:13:c1:0a:69:70:62:34:9a:78:f6:b6:
2c:e1:f1:27:8c:58:c5:fb:85:cb:4e:34:e1:41:72:
55:40:1d:1f:75:a0:eb:ff:bd:ab:a2:20:32:ab:cc:
0c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:55:B5:AD:A6:C1:4B:4B:F1:E5:EE:40:8A:45:DA:4D:D4:98:BC:90
X509v3 Authority Key Identifier:
keyid:9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b4:1d:f9:ad:ce:f2:e5:27:c9:65:84:27:6c:c3:18:0e:80:
53:e2:b0:f1:ed:30:85:a3:cc:f5:51:e8:a0:b8:e9:93:25:93:
de:f0:cf:ca:90:ff:32:a8:8f:20:25:1b:0a:53:80:71:3a:69:
c2:1f:2a:c8:b1:3c:25:73:8c:38:ab:3e:20:79:5b:16:25:b5:
26:45:16:da:37:71:ef:89:32:e4:c9:3e:1b:50:66:96:31:60:
ac:7e:e4:1c:a4:a5:22:7a:14:1c:0a:df:16:42:ca:0a:b5:b5:
03:de:65:5d:a8:a7:58:e9:c2:0c:42:40:f8:4a:78:e5:a6:d6:
98:d1:ff:6a:42:ac:e8:32:c9:de:e7:2b:82:87:22:44:ac:d6:
17:c0:e9:e5:5a:02:a6:e7:5c:d7:8c:70:c6:03:fc:fa:4c:b4:
4b:f5:5e:47:f7:d6:68:33:9b:0d:ef:9e:23:36:ab:42:be:e1:
f8:7f:1a:04:6f:24:6b:c2:b3:94:55:54:e9:70:7c:83:4e:0b:
3a:27:6b:c1:ae:05:2b:18:24:be:73:5c:a5:fd:e3:1b:f7:46:
22:68:5c:59:a6:e5:ea:3e:3d:77:f5:b1:93:68:72:ab:f2:b9:
13:2c:56:86:0f:78:76:63:5f:fe:d7:9e:3b:7c:82:21:97:6a:
74:e7:6d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 20:51:45 2025 by rpki-client