Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft
File: nwM4t9tUQAKUEDl1Fckw60UtdbA.mft (raw, json)
Hash identifier: nsKY+Nqc5RGOX+Gh4qFNygwCEJagulsYACYsZDbAD6k=
Subject key identifier: CB:DF:75:D5:A1:96:DF:2A:97:34:62:41:09:54:6F:FA:D7:86:D0:C2
Authority key identifier: 9F:03:38:B7:DB:54:40:02:94:10:39:75:15:C9:30:EB:45:2D:75:B0
Certificate issuer: /CN=9f0338b7db5440029410397515c930eb452d75b0
Certificate serial: 019A503E5523F090E63FB327865C81C6D246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 19:00:53 +0000
Manifest this update: Tue 04 Nov 2025 19:00:53 +0000
Manifest next update: Wed 05 Nov 2025 19:00:53 +0000
Files and hashes: 1: HhSxQEAct_Hilmn4S8Eq6DvrLvI.roa (hash: crLyXY2X5OyUyjzwP0FotFChrfWXLKr+2gME4D4k2t8=)
2: nwM4t9tUQAKUEDl1Fckw60UtdbA.crl (hash: RXZVQgJktXJD23VAofWDiZvF9AXtHscRu3nlIl5qD+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:55:23:f0:90:e6:3f:b3:27:86:5c:81:c6:d2:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0338b7db5440029410397515c930eb452d75b0
Validity
Not Before: Nov 4 19:00:53 2025 GMT
Not After : Nov 5 19:00:53 2025 GMT
Subject: CN=cbdf75d5a196df2a9734624109546ffad786d0c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fd:d3:63:14:48:fe:b2:a1:46:88:48:69:57:
56:ff:3c:e5:7b:5e:fb:ad:9f:fa:f5:f9:63:70:bb:
4c:83:a7:7d:c8:0a:02:e0:fe:4a:75:cf:1c:93:ef:
76:43:61:d1:56:86:77:89:89:28:86:63:eb:6d:67:
e0:da:cd:51:55:54:1c:ca:c2:0b:b9:75:0a:8b:6b:
4e:dd:ed:a6:cf:ad:4e:0b:18:61:2d:90:bb:a7:55:
65:af:e3:6e:41:ee:6f:30:9e:3a:7e:c2:18:7e:84:
f1:1f:cb:37:2e:40:dc:7c:9a:a3:a4:8f:5e:33:43:
06:fc:f2:e9:3b:00:84:f8:8c:79:1a:9c:d2:ba:d2:
f3:a5:cf:47:f7:e0:16:2e:12:fb:e2:aa:0e:cf:34:
10:8e:7c:67:91:e9:50:46:10:64:2a:6f:aa:65:34:
b3:5a:67:4b:a2:f2:85:19:1e:cd:83:e5:d4:a8:07:
36:16:4d:29:58:8d:f5:71:02:bb:0b:a7:4a:c0:e9:
9e:e5:c7:1d:9e:b6:21:17:6d:2f:74:a8:7b:e1:d5:
be:5c:29:6f:1b:f7:fd:bb:6f:4b:3c:19:61:19:16:
e6:c8:2e:a9:b8:5f:f1:c9:fd:6a:2b:c8:cc:8c:01:
a3:38:c0:df:86:7d:45:d3:26:29:77:0a:ea:15:52:
89:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DF:75:D5:A1:96:DF:2A:97:34:62:41:09:54:6F:FA:D7:86:D0:C2
X509v3 Authority Key Identifier:
keyid:9F:03:38:B7:DB:54:40:02:94:10:39:75:15:C9:30:EB:45:2D:75:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:0a:a3:3a:e5:c8:17:18:44:0b:32:25:96:a0:6d:11:8f:7e:
33:98:60:2d:b1:9e:eb:66:4a:e9:af:95:d0:04:b2:df:07:3b:
36:ac:05:4f:d8:dc:40:72:5e:fe:c0:97:e6:50:22:dd:8e:ed:
74:01:9b:76:87:ed:76:d3:21:d9:0b:bd:e1:fe:c4:33:1f:13:
de:df:5b:f0:38:2d:9a:89:37:ad:e4:04:5f:6c:6b:e4:19:14:
b3:14:54:ca:7c:ae:6f:68:18:d2:49:7a:09:7a:2b:f2:6d:2a:
11:ba:0e:00:cc:c8:cd:5a:61:42:05:05:22:c1:8e:a5:c9:85:
fc:01:eb:ef:3c:38:12:d9:6b:88:df:83:38:94:7e:96:dc:11:
a3:b6:2b:71:9a:e2:32:7c:41:b1:be:c5:e4:ab:e6:57:2c:fd:
ad:99:ac:35:dd:f4:6b:a1:d1:41:1c:08:de:5e:0a:93:cf:77:
ac:15:3e:91:fc:c6:1e:ec:19:7f:89:86:8c:2e:07:93:e1:d5:
c2:c4:8c:ed:ab:e8:f8:2a:0d:85:95:41:43:3e:36:4d:91:83:
76:c8:52:3c:b0:38:80:90:17:aa:97:a3:64:15:fd:d7:66:7f:
cb:80:d7:db:5e:1c:84:ee:b5:83:25:b4:8f:f8:0c:12:71:a5:
22:b5:c7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:54:51 2025 by rpki-client