Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
File: nmw2D-XITxlWHHrpu89PnPpHi08.mft (raw, json)
Hash identifier: Ue1y4yPttCd9Y6gZdWA9nPun/jRdCNTOwI9+Y9RFVXI=
Subject key identifier: 0D:01:A2:7A:B4:CC:33:C3:33:28:2D:3F:4D:19:C3:30:B8:05:4B:98
Authority key identifier: 9E:6C:36:0F:E5:C8:4F:19:56:1C:7A:E9:BB:CF:4F:9C:FA:47:8B:4F
Certificate issuer: /CN=9e6c360fe5c84f19561c7ae9bbcf4f9cfa478b4f
Certificate serial: 01987AF6FA350AF14276513C0381B1298800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmw2D-XITxlWHHrpu89PnPpHi08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
Manifest number: 08D2
Signing time: Tue 05 Aug 2025 16:01:02 +0000
Manifest this update: Tue 05 Aug 2025 16:01:02 +0000
Manifest next update: Wed 06 Aug 2025 16:01:02 +0000
Files and hashes: 1: nmw2D-XITxlWHHrpu89PnPpHi08.crl (hash: P3Gh5VHNLtyFWTpz+uH0UnY1Aoio6A1s6XX8lTkKJZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmw2D-XITxlWHHrpu89PnPpHi08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:f6:fa:35:0a:f1:42:76:51:3c:03:81:b1:29:88:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6c360fe5c84f19561c7ae9bbcf4f9cfa478b4f
Validity
Not Before: Aug 5 16:01:02 2025 GMT
Not After : Aug 6 16:01:02 2025 GMT
Subject: CN=0d01a27ab4cc33c333282d3f4d19c330b8054b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d7:1d:21:96:16:5c:d7:94:b6:49:96:45:3e:
ed:af:94:a0:6f:2b:49:c6:f5:03:a1:8f:8b:d5:9d:
6a:ac:b7:9b:36:f7:51:ff:f5:88:b4:4f:22:d0:19:
c4:fa:0f:f1:e0:57:2c:d0:05:f8:2b:bf:36:45:70:
dd:fb:e6:55:73:64:d4:6a:dd:aa:8e:45:5b:d3:d3:
ca:11:f0:d9:97:ff:93:6f:4e:1d:c3:7b:ef:15:d7:
fa:fb:3b:db:c7:31:83:d5:52:7d:fb:1d:d9:60:29:
15:25:ac:64:4d:a6:5a:55:f8:88:81:89:de:5c:bb:
df:4d:a2:3c:c0:8f:f4:d3:96:a8:fb:91:a8:a8:cd:
8e:1b:86:70:a4:f2:a7:e9:fe:10:aa:98:c1:7f:c0:
ba:2f:ab:75:81:d5:a7:9f:1a:cf:df:ad:c9:43:74:
ba:1d:00:77:ee:38:5d:1a:59:06:8a:a6:1a:f2:f7:
cc:12:c9:ee:7d:5f:ef:7b:1c:62:97:e1:e3:ce:b7:
ac:a3:33:5e:b3:e6:fd:62:00:18:85:95:d4:7a:a9:
7e:40:68:86:44:81:a1:7d:fc:ac:e3:a9:c1:8c:fc:
85:c1:1e:76:ce:0f:0c:8c:de:db:d9:09:09:af:ae:
bd:68:cf:b2:8f:9b:a2:e0:7d:0f:d1:9f:bd:03:8a:
cb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:01:A2:7A:B4:CC:33:C3:33:28:2D:3F:4D:19:C3:30:B8:05:4B:98
X509v3 Authority Key Identifier:
keyid:9E:6C:36:0F:E5:C8:4F:19:56:1C:7A:E9:BB:CF:4F:9C:FA:47:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmw2D-XITxlWHHrpu89PnPpHi08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:70:64:c4:05:59:28:27:a7:03:30:3e:4a:e1:61:0a:ae:62:
4b:da:3a:e5:59:bc:23:e4:da:eb:2d:a1:30:08:2d:dc:38:21:
e2:21:a8:b7:94:e1:0d:05:ae:42:b5:a5:6c:7c:0e:be:6b:ad:
bb:34:f8:1c:53:86:a8:9e:53:24:86:67:7c:cc:cd:1e:5b:4f:
09:de:0b:2e:6e:aa:94:8d:09:c6:c7:d8:8a:54:89:19:72:9e:
98:29:ff:39:52:d2:b1:a5:66:1f:50:f3:29:aa:23:20:53:91:
6e:d5:c3:77:81:63:3d:33:74:e3:7d:12:a2:18:ea:7c:fc:f0:
41:31:b8:59:22:eb:ba:67:34:aa:f3:73:8b:02:f3:ab:18:46:
cb:02:9a:d5:51:5b:18:5a:65:fb:4b:11:ab:85:00:b4:da:79:
26:c9:95:2c:12:d8:5f:ca:30:94:d8:f7:e4:34:0d:8d:80:3e:
fd:8a:b4:92:ce:63:0b:29:08:c5:fa:74:c4:ef:50:5f:cf:e7:
03:5e:5a:b7:17:81:e0:11:d5:46:b9:b3:cf:1c:dd:1d:9c:a8:
b6:da:2a:57:e8:53:e7:f0:fe:ba:2c:78:05:3d:52:1d:a6:2e:
fd:68:55:64:19:2c:3c:5e:40:29:d8:ba:a3:e8:57:28:65:69:
8b:61:35:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 19:53:27 2025 by rpki-client