Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft
File: nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft (raw, json)
Hash identifier: T89wX4AooFLJ2grVe1vUxAKpfnbs9C/BUKEpTJZ0wNc=
Subject key identifier: AE:C7:75:75:91:24:CC:D9:47:42:75:20:46:29:9A:1A:6B:2C:F2:E5
Authority key identifier: 9D:66:A5:CF:A3:9C:FA:91:E3:13:44:3F:61:3E:73:CC:E7:3F:21:40
Certificate issuer: /CN=9d66a5cfa39cfa91e313443f613e73cce73f2140
Certificate serial: 019A0524112145FD4B13768DF46F1FED8E3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft
Manifest number: 1012
Signing time: Tue 21 Oct 2025 05:00:41 +0000
Manifest this update: Tue 21 Oct 2025 05:00:41 +0000
Manifest next update: Wed 22 Oct 2025 05:00:41 +0000
Files and hashes: 1: S97lFgLq26JbbTYFy87788PSLWo.roa (hash: is6nhjEc4wx03A1n5kSCHVis+Wuf1J/yxv2gFot2aXA=)
2: nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl (hash: YWwDrEfJWQPYtt6lCd0bPEb1SU2bSTWcE0eSh+HjG6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:24:11:21:45:fd:4b:13:76:8d:f4:6f:1f:ed:8e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d66a5cfa39cfa91e313443f613e73cce73f2140
Validity
Not Before: Oct 21 05:00:41 2025 GMT
Not After : Oct 22 05:00:41 2025 GMT
Subject: CN=aec775759124ccd94742752046299a1a6b2cf2e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:38:f9:b0:a6:2a:76:f5:13:06:e7:e7:59:09:
6e:00:e5:46:70:c5:ef:cf:6d:e1:92:45:5a:c4:d3:
20:2e:60:1e:95:22:f5:8b:c4:fc:99:44:67:aa:e4:
9b:19:88:67:59:3e:3d:52:f9:35:8a:03:d6:e1:a5:
ba:f4:2d:c3:2f:d9:8c:d1:52:12:c2:ab:4e:d3:dc:
ff:71:48:3b:8e:0b:af:2b:11:f9:a5:5c:fe:f4:ca:
87:72:76:5e:26:0e:69:b4:ba:b2:dc:b7:73:84:af:
84:a1:0e:91:b6:b9:63:04:c2:3c:35:b2:90:e3:5f:
be:06:0a:21:d8:0e:9d:bb:b3:ce:1b:b2:77:f4:06:
86:c6:1f:7a:c0:7e:f7:12:34:64:83:38:05:bb:fb:
18:7a:32:83:33:6a:4a:b9:d4:89:52:f9:e9:36:56:
eb:99:3e:cb:58:3f:04:d6:19:3c:fd:ea:3f:05:97:
74:bf:b4:d3:9f:fc:83:9c:90:a0:6c:dc:b9:7e:8b:
4b:41:a7:d1:d4:80:17:bf:98:8d:67:f6:fd:76:c7:
aa:c0:e7:77:c8:0a:56:04:8d:07:0b:1f:d5:b1:45:
d4:3e:55:2f:26:0c:d3:c2:63:d0:fd:a1:ca:9b:2e:
3f:53:73:61:b2:dd:12:94:21:49:82:bb:63:a3:2d:
0a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C7:75:75:91:24:CC:D9:47:42:75:20:46:29:9A:1A:6B:2C:F2:E5
X509v3 Authority Key Identifier:
keyid:9D:66:A5:CF:A3:9C:FA:91:E3:13:44:3F:61:3E:73:CC:E7:3F:21:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:67:60:84:ac:9a:95:c2:d3:74:50:2f:1b:d3:9e:26:6d:e0:
70:a2:fd:63:22:75:7b:be:52:75:a3:c8:7d:a9:a6:0b:12:3d:
e5:d7:fd:21:15:7d:3c:53:5f:e2:c1:53:6e:da:9f:08:f8:fc:
fb:05:59:28:8b:4c:2e:c2:7d:c1:3b:be:92:ba:9a:64:3d:4c:
f1:90:b4:bb:7a:ec:33:21:84:41:60:61:e1:9f:17:d1:1f:44:
85:0a:55:86:a5:ef:99:c6:ea:e9:24:12:41:46:4d:39:a5:e7:
8c:4a:2d:c1:27:1c:50:77:c6:a5:a3:05:f2:cc:ba:b0:30:f8:
96:eb:00:95:51:d4:b4:97:a1:51:42:ae:75:a8:7c:50:39:0b:
87:23:31:45:ba:f1:27:18:f2:a6:cf:58:d7:07:be:c0:58:d1:
3b:bb:a1:b3:c3:1c:96:19:1c:34:1d:41:3a:1a:48:a0:f6:89:
dc:08:fa:8b:71:6e:ae:fc:9e:95:d7:b8:ac:e2:00:33:d0:de:
fa:0d:8a:d6:76:24:0b:88:ec:76:d3:ed:03:53:89:f4:94:39:
02:42:a5:22:bb:0f:f5:c0:40:a9:d5:25:72:c4:a2:e7:63:26:
a5:c4:3d:19:c8:a1:f4:a8:68:65:2e:60:69:68:65:6f:92:48:
d0:a8:63:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:40:26 2025 by rpki-client