Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
File: nwSzzyTPS4GyIhFGoA8id7w0h4A.mft (raw, json)
Hash identifier: 5zajNui/5LViZ+t29TV2MluvEANGC4vwFjXPLBZG5Yc=
Subject key identifier: 7A:34:94:47:C1:EA:47:A0:1C:D6:62:11:04:CC:20:22:7A:FE:69:39
Authority key identifier: 9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
Certificate issuer: /CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Certificate serial: 0197488C4160D41607840B58825B041C3E32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
Manifest number: 101E
Signing time: Sat 07 Jun 2025 04:00:40 +0000
Manifest this update: Sat 07 Jun 2025 04:00:40 +0000
Manifest next update: Sun 08 Jun 2025 04:00:40 +0000
Files and hashes: 1: JkR72JNkfOOkf4Hdto9Hn61nIOM.roa (hash: GdSC1LJhK3esreP7fCY/nmDtbQZgfXPG6XPWXjCKZig=)
2: Q8bZioVPDoZ4xd-x42q6Z5HkkPQ.roa (hash: uBME2SsaTDhptgYkDGLlHO5wga4qvwY0K6f/+pZrE38=)
3: nwSzzyTPS4GyIhFGoA8id7w0h4A.crl (hash: nDAnHh67Z4D9eSe/b+u1WAyXL1kt76kTWW0hUOgRBIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:41:60:d4:16:07:84:0b:58:82:5b:04:1c:3e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Validity
Not Before: Jun 7 04:00:40 2025 GMT
Not After : Jun 8 04:00:40 2025 GMT
Subject: CN=7a349447c1ea47a01cd6621104cc20227afe6939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:79:cc:40:14:7c:fb:92:b0:b4:de:0e:a3:96:
a9:40:ef:71:c6:1a:fd:0a:33:37:8d:4e:04:f9:de:
6e:08:d0:46:d9:41:5e:94:69:f2:0b:de:20:2a:d2:
a7:6f:54:6f:b0:fc:82:71:3e:d0:e2:75:1a:f6:1b:
c6:3b:77:9c:a2:52:a2:b7:45:78:5c:b9:76:d5:f6:
ad:31:18:70:f4:29:21:be:70:1a:85:95:76:76:af:
c0:2b:94:5d:19:f6:5a:41:d0:fc:dc:00:48:95:76:
a3:2b:62:2f:ea:b8:da:69:08:0a:1d:f8:e1:39:4a:
61:3b:2a:26:2e:b7:6c:81:ba:94:40:52:da:91:97:
6d:06:02:e4:9a:e5:36:7f:95:ce:23:20:98:07:97:
65:d4:41:a7:60:18:9a:c7:e8:0a:d1:9c:8b:f0:e4:
da:ac:82:b5:d2:f6:5a:51:d6:54:b1:4e:de:ec:61:
27:bc:ed:02:15:0d:d9:7d:fd:6c:84:ce:dc:79:a0:
7c:cd:78:96:af:a6:2e:4a:36:80:67:d2:94:23:6b:
27:62:cd:0d:a1:89:41:ea:25:76:95:d4:6e:58:fb:
49:5d:8f:db:7a:f3:10:9a:94:62:d5:4d:28:35:df:
64:a9:44:71:76:1d:bf:a8:09:30:b8:ad:8d:4c:48:
5e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:34:94:47:C1:EA:47:A0:1C:D6:62:11:04:CC:20:22:7A:FE:69:39
X509v3 Authority Key Identifier:
keyid:9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:e5:4d:f0:6c:56:30:7d:a8:12:86:e6:a3:fe:3d:35:f1:d0:
27:1b:52:b2:47:d7:bd:a1:bf:cd:ac:fb:b2:71:d5:75:28:4a:
17:8b:4a:a1:62:07:17:e9:ed:ca:88:fb:be:c4:ed:4b:e4:53:
32:91:25:c5:7b:e1:c0:16:91:0b:a1:46:fc:e1:32:b6:8a:b9:
31:dd:6c:55:b8:20:af:f2:1c:0b:8d:e4:d8:b7:82:e9:8c:0d:
16:77:a8:ac:e6:f7:d4:00:a1:b2:b8:43:97:d5:15:36:ca:e5:
b3:fe:99:30:90:d3:8c:a5:94:ed:91:2b:7e:86:5c:6b:bb:7f:
5e:bd:15:3c:2f:ce:51:50:95:2e:00:ae:53:33:9d:10:f9:2a:
9a:a2:ab:d3:4c:44:8b:31:c0:a6:7e:53:46:e6:cf:ef:24:b2:
8c:49:15:bd:e2:ce:29:2f:60:6f:99:c9:45:7f:cf:d1:a5:c4:
29:91:7f:e4:61:fa:2c:70:80:3f:72:ee:9c:fb:79:af:53:28:
a6:63:7a:f8:e3:96:fd:ee:11:e1:8b:9a:df:d4:f7:c3:d4:20:
3a:02:27:3d:7c:17:39:5a:2f:2c:b9:87:6b:f3:ff:14:16:86:
96:d4:2d:5f:fa:f9:04:06:9c:9f:a6:34:84:be:ff:4b:44:4f:
9c:7f:e6:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjEFg1BYHhAtYglsEHD4yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMDRiM2NmMjRjZjRiODFiMjIyMTE0NmEwMGYyMjc3YmMz
NDg3ODAwHhcNMjUwNjA3MDQwMDQwWhcNMjUwNjA4MDQwMDQwWjAzMTEwLwYDVQQD
Eyg3YTM0OTQ0N2MxZWE0N2EwMWNkNjYyMTEwNGNjMjAyMjdhZmU2OTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7nnMQBR8+5KwtN4Oo5apQO9xxhr9
CjM3jU4E+d5uCNBG2UFelGnyC94gKtKnb1RvsPyCcT7Q4nUa9hvGO3ecolKit0V4
XLl21fatMRhw9CkhvnAahZV2dq/AK5RdGfZaQdD83ABIlXajK2Iv6rjaaQgKHfjh
OUphOyomLrdsgbqUQFLakZdtBgLkmuU2f5XOIyCYB5dl1EGnYBiax+gK0ZyL8OTa
rIK10vZaUdZUsU7e7GEnvO0CFQ3Zff1shM7ceaB8zXiWr6YuSjaAZ9KUI2snYs0N
oYlB6iV2ldRuWPtJXY/bevMQmpRi1U0oNd9kqURxdh2/qAkwuK2NTEhezQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHo0lEfB6kegHNZiEQTMICJ6/mk5MB8GA1UdIwQY
MBaAFJ8Es88kz0uBsiIRRqAPIne8NIeAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbndTenp5VFBTNEd5SWhGR29BOGlkN3cwaDRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9kYTM1OGMtMmU0Ny00NGVjLWIwYzUt
MmFkOTY4YjM2MmRlLzEvbndTenp5VFBTNEd5SWhGR29BOGlkN3cwaDRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9kYTM1OGMtMmU0Ny00NGVjLWIwYzUtMmFkOTY4YjM2MmRl
LzEvbndTenp5VFBTNEd5SWhGR29BOGlkN3cwaDRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE+VN8GxW
MH2oEobmo/49NfHQJxtSskfXvaG/zaz7snHVdShKF4tKoWIHF+ntyoj7vsTtS+RT
MpElxXvhwBaRC6FG/OEytoq5Md1sVbggr/IcC43k2LeC6YwNFneorOb31AChsrhD
l9UVNsrls/6ZMJDTjKWU7ZErfoZca7t/Xr0VPC/OUVCVLgCuUzOdEPkqmqKr00xE
izHApn5TRubP7ySyjEkVveLOKS9gb5nJRX/P0aXEKZF/5GH6LHCAP3LunPt5r1Mo
pmN6+OOW/e4R4Yua39T3w9QgOgInPXwXOVovLLmHa/P/FBaGltQtX/r5BAacn6Y0
hL7/S0RPnH/m4g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:40:56 2025 by rpki-client