Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
File: nwSzzyTPS4GyIhFGoA8id7w0h4A.mft (raw, json)
Hash identifier: RroRQw+tWLwP9P8MBFTjTF3ccbzXHrkLztnr+/UPiY0=
Subject key identifier: 72:70:CE:CA:2B:26:21:B6:29:27:27:08:2F:C9:79:F7:93:73:AB:E2
Authority key identifier: 9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
Certificate issuer: /CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Certificate serial: 019A71B8B4934AA7689498C2D38076355272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
Manifest number: 11C1
Signing time: Tue 11 Nov 2025 07:02:01 +0000
Manifest this update: Tue 11 Nov 2025 07:02:01 +0000
Manifest next update: Wed 12 Nov 2025 07:02:01 +0000
Files and hashes: 1: JkR72JNkfOOkf4Hdto9Hn61nIOM.roa (hash: GdSC1LJhK3esreP7fCY/nmDtbQZgfXPG6XPWXjCKZig=)
2: Q8bZioVPDoZ4xd-x42q6Z5HkkPQ.roa (hash: uBME2SsaTDhptgYkDGLlHO5wga4qvwY0K6f/+pZrE38=)
3: nwSzzyTPS4GyIhFGoA8id7w0h4A.crl (hash: Odysp4WUY5PpTk7SvOLhkpTxmhePce0YDAIo2C/zRug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:b4:93:4a:a7:68:94:98:c2:d3:80:76:35:52:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Validity
Not Before: Nov 11 07:02:01 2025 GMT
Not After : Nov 12 07:02:01 2025 GMT
Subject: CN=7270ceca2b2621b6292727082fc979f79373abe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5e:77:3c:e7:7e:47:fe:df:35:e5:ea:9a:23:
34:23:81:22:68:bd:4c:2a:7e:95:6c:e5:94:58:a9:
2a:c8:56:dd:84:4b:be:78:93:d3:d7:21:e5:ae:31:
9f:ee:95:0f:85:d8:e6:a6:9f:81:bc:46:1f:12:8d:
07:f8:e5:39:f1:4d:42:d3:82:bd:5c:e9:23:b3:1d:
51:a3:8f:25:df:5b:05:ef:bb:cb:42:15:f5:bf:4f:
8f:52:5b:28:12:03:42:f5:5e:12:94:63:b1:92:8c:
4b:3b:eb:53:0f:f6:01:17:75:a3:20:aa:02:f6:db:
fa:83:78:3c:d5:90:d8:c4:3d:65:51:f1:32:d4:70:
88:75:7e:cc:31:ec:16:7b:f9:03:96:dc:de:04:24:
1a:9a:b5:6b:9e:b1:94:90:24:c6:2f:75:9e:54:85:
96:f4:08:f5:01:a7:27:72:75:57:ce:7d:5f:96:7c:
05:98:14:6a:48:b2:02:27:16:07:e5:f7:b4:a8:f0:
96:b1:93:33:3b:ad:6f:65:d2:45:46:ba:b8:e2:08:
57:2c:bc:a5:af:cc:2a:6c:0a:f8:ad:3b:30:64:0d:
f7:49:8b:7d:e7:17:2b:af:e3:f6:85:5c:7e:3c:89:
ba:d7:2a:08:09:3e:94:3b:42:98:80:b8:82:ae:88:
88:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:70:CE:CA:2B:26:21:B6:29:27:27:08:2F:C9:79:F7:93:73:AB:E2
X509v3 Authority Key Identifier:
keyid:9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:63:bd:d4:c6:47:fe:cc:40:29:06:27:a7:c7:64:99:43:25:
c1:95:8a:ac:9d:f7:a3:10:46:44:6d:33:b9:2b:aa:5b:17:14:
bb:67:01:47:48:b9:eb:ea:02:f5:a2:43:bd:5a:3c:55:39:f5:
50:d8:77:e8:7f:91:66:79:30:83:56:3f:7a:86:2c:3b:ca:19:
a4:20:d7:4f:bd:d3:7a:ef:60:99:bd:b6:f9:3f:e3:7c:3a:9e:
9e:99:6c:b7:27:59:5f:f9:32:05:13:9b:fb:c8:62:9b:e2:a8:
ca:69:e7:1d:6e:e8:59:3b:15:24:b0:f2:39:cc:b1:25:ba:3a:
62:2b:ea:2c:c2:94:24:b0:39:8f:ce:53:5d:8a:a9:83:7e:f0:
0b:d5:9c:44:20:ef:51:a8:72:c4:2e:fa:09:af:98:a9:b9:34:
1c:96:69:6a:14:bd:23:c1:ab:cb:43:7d:3f:4c:a3:b8:22:65:
01:f7:08:63:36:0d:ba:fa:a0:7d:e0:fe:fe:3e:93:7e:de:c0:
b2:17:68:68:f6:2f:04:1c:df:57:ad:29:dd:98:d3:c5:92:bf:
e2:3b:43:62:03:ef:0a:65:df:41:48:63:a3:3f:ca:16:ee:74:
0b:8f:32:75:52:7d:36:b8:3a:cd:81:29:2d:eb:12:4e:86:0d:
0e:da:ba:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:41 2025 by rpki-client