Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/6b2a58-becc-49bc-8d84-a03892fc340b/1/nwAKfifXFIcphPrjeIda9lvkBWw.mft
File: nwAKfifXFIcphPrjeIda9lvkBWw.mft (raw, json)
Hash identifier: cyp+wgp0i6sY5IpCNaMiaIlkaIt8N+nHrFujXB+GvC8=
Subject key identifier: 28:FE:83:CB:52:6D:DB:BE:91:9A:58:13:40:9C:FF:2F:B0:DB:8F:F1
Authority key identifier: 9F:00:0A:7E:27:D7:14:87:29:84:FA:E3:78:87:5A:F6:5B:E4:05:6C
Certificate issuer: /CN=9f000a7e27d714872984fae378875af65be4056c
Certificate serial: 019891110527A3F963A1857FEB8EE17E8BB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwAKfifXFIcphPrjeIda9lvkBWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/6b2a58-becc-49bc-8d84-a03892fc340b/1/nwAKfifXFIcphPrjeIda9lvkBWw.mft
Manifest number: 7A
Signing time: Sat 09 Aug 2025 23:01:08 +0000
Manifest this update: Sat 09 Aug 2025 23:01:08 +0000
Manifest next update: Sun 10 Aug 2025 23:01:08 +0000
Files and hashes: 1: nwAKfifXFIcphPrjeIda9lvkBWw.crl (hash: TXcoXsDsjcWoCNV9UgrQlXCwILMHnNnvaAl+fwxtIxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/6b2a58-becc-49bc-8d84-a03892fc340b/1/nwAKfifXFIcphPrjeIda9lvkBWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/6b2a58-becc-49bc-8d84-a03892fc340b/1/nwAKfifXFIcphPrjeIda9lvkBWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwAKfifXFIcphPrjeIda9lvkBWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:11:05:27:a3:f9:63:a1:85:7f:eb:8e:e1:7e:8b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f000a7e27d714872984fae378875af65be4056c
Validity
Not Before: Aug 9 23:01:08 2025 GMT
Not After : Aug 10 23:01:08 2025 GMT
Subject: CN=28fe83cb526ddbbe919a5813409cff2fb0db8ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:82:61:e9:55:88:80:94:0a:18:4a:cf:e6:7a:
ff:ae:88:88:01:c9:e6:ab:28:6f:43:61:e2:77:e9:
4c:fc:65:58:53:b5:e8:f2:4e:80:15:66:f9:81:05:
7f:23:25:45:53:28:e6:14:ef:01:41:c7:3b:3f:9c:
9e:11:9a:6f:b3:24:0c:f4:1c:5a:cf:88:15:b9:d1:
d9:d9:86:27:1b:4d:2b:60:93:40:46:a9:0d:52:8e:
36:c5:b3:d7:c5:17:3c:ea:76:ec:43:be:5a:51:77:
39:4a:72:e2:0c:f5:dc:9d:0a:b5:08:b9:9c:89:d9:
3f:78:d7:a9:d8:68:98:be:80:d2:eb:fd:e0:50:95:
ae:5c:0d:8b:f8:fb:75:f9:76:5a:8d:bf:2b:3c:5b:
f9:a7:b8:8c:77:bd:f8:ce:40:95:b8:55:91:d6:52:
ba:cf:4d:17:50:d1:2b:96:2b:5e:4c:ea:05:7d:62:
b3:00:8b:af:35:18:ae:c3:83:af:02:49:ef:e6:a9:
da:1d:20:69:6a:31:ba:a7:ae:20:e9:3a:89:f5:a6:
70:75:ce:4c:17:a6:10:4b:25:35:05:16:d3:23:b1:
65:ed:4b:35:08:37:0e:09:3e:0b:e0:e2:79:8a:47:
36:c6:8c:8a:b1:36:e2:93:fd:ca:bc:26:0d:e4:c6:
3d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FE:83:CB:52:6D:DB:BE:91:9A:58:13:40:9C:FF:2F:B0:DB:8F:F1
X509v3 Authority Key Identifier:
keyid:9F:00:0A:7E:27:D7:14:87:29:84:FA:E3:78:87:5A:F6:5B:E4:05:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwAKfifXFIcphPrjeIda9lvkBWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6b2a58-becc-49bc-8d84-a03892fc340b/1/nwAKfifXFIcphPrjeIda9lvkBWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6b2a58-becc-49bc-8d84-a03892fc340b/1/nwAKfifXFIcphPrjeIda9lvkBWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:cc:48:21:70:b4:a3:78:62:23:6b:fa:7c:fa:8b:f0:00:11:
b9:ed:34:ed:4f:cf:1b:9d:db:fc:cc:df:08:2a:68:2a:c7:f6:
30:df:55:81:bf:04:cd:4d:08:bb:ee:a3:dc:90:d0:c4:17:59:
cd:0d:9d:ed:d3:ff:b3:53:02:a2:1e:16:79:c1:32:c9:c8:bc:
63:00:53:4b:58:eb:cd:f3:4d:d1:48:e4:1c:31:8c:07:69:92:
89:4d:1c:4e:74:e5:82:88:e6:c7:da:ba:3b:82:39:5b:bb:c3:
02:47:41:ca:8c:e8:22:c2:1d:5b:55:6b:6d:ca:aa:7e:4f:3d:
eb:37:2e:a3:2c:65:5a:09:b9:ba:9b:3c:f6:47:2d:e6:0f:89:
85:f5:b8:73:8e:99:d5:54:f3:a6:43:26:75:bc:17:dd:30:99:
89:1c:3d:0c:1e:11:7d:5f:b1:ac:c0:35:d7:58:25:c2:a0:89:
84:60:75:bf:ae:25:dd:ba:0b:52:58:85:d2:96:7c:d1:bd:2e:
f3:69:17:e7:c1:18:5a:e3:47:7f:b8:b7:10:b6:ee:a1:8b:f1:
01:4f:8b:0d:f0:2b:d4:7b:06:d5:66:00:13:57:3a:18:aa:b4:
5e:fa:1e:fe:37:76:95:46:bc:dd:d7:c2:b9:3e:0f:08:0f:f2:
c0:4d:1f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:38:01 2025 by rpki-client