Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
File: nwSzzyTPS4GyIhFGoA8id7w0h4A.mft (raw, json)
Hash identifier: 1hdtLtG3NvYCF6XF4HoPTMWam+iPwMOq9GRGzXOXJZY=
Subject key identifier: 75:56:2C:40:02:7B:D1:EB:3B:B3:70:3B:B7:78:98:F8:30:DE:19:ED
Authority key identifier: 9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
Certificate issuer: /CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Certificate serial: 01992F35ED3B99595B8757E5D5141897AB2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
Manifest number: 111A
Signing time: Tue 09 Sep 2025 16:01:27 +0000
Manifest this update: Tue 09 Sep 2025 16:01:27 +0000
Manifest next update: Wed 10 Sep 2025 16:01:27 +0000
Files and hashes: 1: JkR72JNkfOOkf4Hdto9Hn61nIOM.roa (hash: GdSC1LJhK3esreP7fCY/nmDtbQZgfXPG6XPWXjCKZig=)
2: Q8bZioVPDoZ4xd-x42q6Z5HkkPQ.roa (hash: uBME2SsaTDhptgYkDGLlHO5wga4qvwY0K6f/+pZrE38=)
3: nwSzzyTPS4GyIhFGoA8id7w0h4A.crl (hash: OnWghQszCSquJGZTcO0Rn4Xris/L6lZJvo1ACbL5IRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 15:12:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:35:ed:3b:99:59:5b:87:57:e5:d5:14:18:97:ab:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Validity
Not Before: Sep 9 16:01:27 2025 GMT
Not After : Sep 10 16:01:27 2025 GMT
Subject: CN=75562c40027bd1eb3bb3703bb77898f830de19ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:df:82:36:6c:b9:8c:b7:42:a7:86:5b:d4:91:
c4:95:65:11:f3:03:3d:48:17:c7:7a:e8:e3:a7:20:
6f:03:b4:3c:55:26:c3:43:7a:bf:d4:85:29:a8:79:
e2:75:df:ef:31:fa:57:a1:a0:9f:5d:c6:d8:a2:ff:
ff:24:84:f0:98:61:b9:bc:f4:54:6c:1f:30:8f:15:
11:48:b8:9b:6f:8c:f2:86:3f:37:63:22:c7:2e:53:
db:90:7e:07:8b:76:89:22:ca:e4:72:72:02:d8:5f:
b3:b3:34:a8:b7:c2:92:3f:a3:c8:d5:46:29:dd:78:
e4:e0:83:5a:90:e9:cc:21:00:ab:39:34:13:08:30:
d3:a7:52:56:d6:98:92:32:d9:24:f9:7b:a7:aa:54:
b0:fb:cb:67:4d:35:9e:9a:d6:71:ea:c9:2c:5a:0a:
30:e9:bf:57:ec:d5:14:3c:ef:9c:83:8b:e2:c8:de:
b7:f7:e7:a4:04:23:57:d0:a0:ae:31:e6:55:10:b7:
cc:24:a5:8e:6b:4d:c8:a3:d9:b0:a4:a7:f1:a1:a3:
e5:66:80:26:e8:00:39:eb:fd:b9:6e:dc:03:75:b1:
3b:09:78:a7:f4:c7:67:37:bc:81:c9:f9:f5:d4:09:
4f:c3:df:76:5b:f2:ec:ce:a0:26:99:00:0b:57:9b:
92:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:56:2C:40:02:7B:D1:EB:3B:B3:70:3B:B7:78:98:F8:30:DE:19:ED
X509v3 Authority Key Identifier:
keyid:9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:7b:5f:08:8b:a2:bf:79:97:2a:3d:cd:db:53:1f:c1:67:c8:
40:f5:11:cf:b8:55:cf:be:90:34:9d:38:d8:8c:f9:33:b7:a8:
6e:92:2c:05:ed:2e:76:06:28:52:36:d4:ef:95:1e:a9:8d:a2:
81:e9:1d:16:d7:1e:d7:2d:a7:e7:51:0d:a8:02:40:5b:60:a7:
ba:1c:ac:49:14:2c:57:77:b1:ae:78:ea:6d:79:fc:08:b7:90:
7a:c3:df:f3:63:5c:08:34:29:10:44:b2:f0:67:df:d8:60:2d:
3a:93:b6:bc:60:26:31:a1:29:f1:56:79:ff:c7:e5:e6:60:ab:
de:59:b0:11:31:d2:8a:6e:e2:70:a1:70:ce:a9:01:d7:80:23:
91:09:94:a0:00:4e:26:0a:94:d1:ba:c9:ab:ef:c0:ec:da:d0:
5b:2a:93:92:3f:52:75:3e:29:7b:c4:78:a3:20:87:e5:33:e4:
0e:90:ed:c7:18:7a:af:91:a8:e5:a9:43:9d:d4:f6:1a:0c:8d:
0c:c4:1e:f2:77:55:aa:16:c6:41:20:f2:b0:87:27:1c:4f:e1:
9f:3f:08:7c:29:41:bc:ad:2f:ab:3c:a1:d0:6c:c0:a0:88:6a:
55:91:9f:0e:98:37:57:60:39:13:08:ac:c0:cc:5d:be:ec:2b:
11:b4:6a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:42:31 2025 by rpki-client