Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
File: NW2albrOGXhcQGR2Y_MdkFYmHC8.mft (raw, json)
Hash identifier: s2VYdxm6ClW24INvNxIrPKS/splOer51/AFKRsLcBEY=
Subject key identifier: 07:82:80:B5:60:F4:1C:82:2A:61:13:F6:C7:4A:23:D7:3A:52:95:DC
Authority key identifier: 35:6D:9A:95:BA:CE:19:78:5C:40:64:76:63:F3:1D:90:56:26:1C:2F
Certificate issuer: /CN=356d9a95bace19785c40647663f31d9056261c2f
Certificate serial: 019921B10EE7D1D62B3446F73206BB646361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 01:01:15 +0000
Manifest this update: Sun 07 Sep 2025 01:01:15 +0000
Manifest next update: Mon 08 Sep 2025 01:01:15 +0000
Files and hashes: 1: NW2albrOGXhcQGR2Y_MdkFYmHC8.crl (hash: cZUJn1oGdcrBOgdeXY4r9R0V+CcMg8S7+C0iYi3gLzs=)
2: VMysSyLNDVGWd0vcTeYPwlMA5rc.roa (hash: 6+DEgCnpiKyTQCIOlcuNMISjTH2qj/1LJFyn3yXus8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:0e:e7:d1:d6:2b:34:46:f7:32:06:bb:64:63:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356d9a95bace19785c40647663f31d9056261c2f
Validity
Not Before: Sep 7 01:01:15 2025 GMT
Not After : Sep 8 01:01:15 2025 GMT
Subject: CN=078280b560f41c822a6113f6c74a23d73a5295dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:31:72:d2:2a:60:a6:69:2d:ad:88:95:6e:65:
14:26:d0:1b:d4:23:27:1d:82:65:2e:fe:74:27:25:
64:ba:ac:fb:3c:d0:7c:d7:1a:f4:d6:66:b8:a6:b2:
7a:09:9c:73:bf:da:9d:05:86:0a:22:ae:9a:75:5e:
4d:6c:65:6b:ee:7a:72:79:7a:c4:46:1c:f2:00:ce:
46:72:b1:54:68:d1:19:32:6c:ff:26:03:4c:43:24:
c3:b5:e0:41:cf:ed:53:56:be:43:0d:9a:7a:9d:36:
fb:35:ce:6c:95:d1:99:8a:d2:9d:18:49:85:f7:b8:
39:9f:25:4d:23:8e:c1:76:4e:d6:ab:bc:5f:e2:af:
3e:2d:c3:df:7d:ce:3d:54:58:6f:24:93:16:31:40:
3d:31:25:b0:a4:cc:ff:1d:ab:05:38:42:40:dd:b2:
7c:84:d9:55:01:06:79:78:d3:1b:b4:f8:07:6a:8b:
ba:aa:61:66:da:92:54:80:fb:ce:fd:14:35:3a:3f:
c0:94:39:4f:a6:c9:3e:92:0a:79:03:8a:59:6b:26:
f0:40:23:95:d4:ee:46:6f:fd:f6:a9:0c:fa:c0:e9:
18:69:4c:08:1e:69:10:27:17:6d:98:2c:ea:85:79:
c4:58:57:55:f6:76:8a:38:ea:e8:c4:a2:b1:91:b1:
b1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:82:80:B5:60:F4:1C:82:2A:61:13:F6:C7:4A:23:D7:3A:52:95:DC
X509v3 Authority Key Identifier:
keyid:35:6D:9A:95:BA:CE:19:78:5C:40:64:76:63:F3:1D:90:56:26:1C:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:67:2d:3c:7d:28:6b:bb:88:5d:df:dc:fd:d5:23:a1:e5:fc:
92:ce:5f:00:02:a5:a1:76:96:4e:3f:a4:17:60:04:f6:08:5a:
b4:e1:b6:99:d9:4c:6b:9a:c6:75:33:db:4f:a2:8c:1f:dd:e6:
44:c2:6c:f1:41:79:70:0d:d4:b0:02:c7:b6:46:8a:79:c6:f4:
61:29:fd:bc:bd:68:e5:f4:44:f6:22:69:9a:ab:4d:48:73:c1:
cb:35:05:25:8d:dc:81:26:ab:3f:1c:fd:77:a6:eb:f6:e0:73:
e5:d0:93:5c:2a:99:d1:cf:8c:19:d3:db:e8:d7:b3:e5:91:ce:
86:76:1e:31:dc:ac:75:ca:27:e7:08:c9:44:64:17:7d:66:a2:
c4:e9:11:bc:03:12:84:ce:72:c1:37:ca:50:ac:2a:d5:0b:45:
4a:1d:1a:29:13:5b:a0:76:dd:cb:8f:99:16:b9:18:8a:ba:81:
88:eb:05:6f:c6:18:3f:fc:dd:65:08:08:12:66:5f:c5:a3:02:
2e:7a:6d:98:02:2a:0d:75:e0:ed:0f:ec:e6:26:61:50:75:53:
30:3c:ac:56:78:6f:00:ac:eb:2b:d7:18:7f:5d:93:c3:c9:25:
20:41:64:f9:5b:7a:07:e5:6a:e3:14:2b:ee:c2:50:b7:c5:12:
df:a9:59:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:13 2025 by rpki-client