Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
File: nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft (raw, json)
Hash identifier: Ldlnd1qA9bar/08KL/OamFWNi8tz8CKpHr9ggkfccvI=
Subject key identifier: 9A:2A:B2:CF:69:46:E4:C6:61:3E:E0:A4:C9:0F:0A:B5:C6:0F:69:E1
Authority key identifier: 9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
Certificate issuer: /CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Certificate serial: 019A522C12F361016A3161E19D6FEE0E3993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
Manifest number: 01F8
Signing time: Wed 05 Nov 2025 04:00:11 +0000
Manifest this update: Wed 05 Nov 2025 04:00:11 +0000
Manifest next update: Thu 06 Nov 2025 04:00:11 +0000
Files and hashes: 1: 4hEwPlQV2R3wkknVQDbhfUdi-Hg.roa (hash: mjLFc+VoWHA5LJYiCj4OZP4v7wKlAoLVjBHa2WdTgLI=)
2: nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl (hash: Njy6WGXvuSnJxF/kf8kos6GRUg1oiD0grQ4PMBHK6JE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:12:f3:61:01:6a:31:61:e1:9d:6f:ee:0e:39:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Validity
Not Before: Nov 5 04:00:11 2025 GMT
Not After : Nov 6 04:00:11 2025 GMT
Subject: CN=9a2ab2cf6946e4c6613ee0a4c90f0ab5c60f69e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:49:4c:c9:60:cf:95:3b:fa:f7:9a:3f:29:05:
52:45:9f:b5:e6:b9:df:76:e4:58:9c:bf:d2:a8:47:
a9:eb:71:1f:9a:4a:40:cd:9f:af:78:79:16:38:e3:
e9:99:b4:75:f3:3c:d7:52:b7:89:67:56:d5:e1:49:
7f:eb:31:6a:d4:8b:5e:ae:1b:75:ac:e6:29:58:07:
29:92:be:68:9f:9d:d6:62:9b:fd:b6:2f:3a:86:ca:
9f:f7:50:55:2d:3f:b9:cf:1e:e9:4e:90:e0:af:4a:
f6:7f:7c:d0:96:de:80:e3:37:13:9f:2f:9d:1c:07:
a1:c9:26:7a:e8:91:b0:f7:d5:0d:de:f0:54:df:79:
92:ff:65:cd:2d:06:fc:54:9b:14:63:5a:59:a0:46:
ff:49:24:32:fb:98:e0:2b:18:4f:9f:98:c8:6c:91:
61:1a:cb:40:18:4e:e2:07:a1:54:bb:bb:59:a5:be:
61:93:6c:0f:53:1d:d3:4d:9a:64:4f:56:43:31:7d:
5e:d8:99:dc:4a:d4:a9:36:b9:bf:96:3d:c1:96:7e:
1e:bb:d3:1d:31:ef:07:29:14:ed:2c:e1:b3:6d:41:
84:e3:3f:e4:98:8a:eb:a1:41:c3:ba:b8:91:08:d5:
81:62:17:44:64:8f:05:38:ad:e2:f8:9e:00:0a:78:
a3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2A:B2:CF:69:46:E4:C6:61:3E:E0:A4:C9:0F:0A:B5:C6:0F:69:E1
X509v3 Authority Key Identifier:
keyid:9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:27:be:f3:b7:19:36:6a:53:26:c2:b7:03:72:ae:e7:6f:9e:
66:b2:bf:f3:50:f5:4b:0e:71:51:4b:35:d2:7c:eb:7e:8d:f0:
2b:7d:59:32:e5:24:9d:cd:ae:8e:be:ba:a9:2d:47:26:c4:c1:
fc:6a:3c:07:10:93:f8:e2:e0:2b:fa:0a:bc:a6:00:64:3f:50:
ca:16:77:31:01:27:3f:c4:33:42:1c:69:17:83:54:c3:6a:ea:
16:d0:57:a6:2a:4a:36:68:7b:1e:07:88:c2:91:49:c0:76:17:
92:c3:06:27:e9:fc:ab:a0:40:9f:a7:2d:8d:d0:51:49:dc:6d:
6c:0e:67:dc:10:fe:b6:df:f8:29:0a:7b:de:1f:af:2f:5f:05:
d9:ac:ce:c9:f9:83:b4:61:81:b1:4c:e8:84:52:83:c5:9a:eb:
0b:22:c7:0f:79:98:9d:a9:de:18:45:a0:11:a2:8f:27:a0:59:
63:41:07:eb:69:ef:3e:19:cd:5a:3d:42:36:92:47:ec:83:0e:
d4:96:57:b7:88:aa:35:bc:cc:3e:11:ad:0c:16:ec:db:d9:09:
d8:79:92:01:e1:5e:53:64:f4:e5:4a:f0:5f:9e:f4:a7:e2:14:
09:1a:81:6c:8d:4a:40:e3:71:47:11:4a:29:cf:2b:ec:51:6d:
df:f0:97:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:18:49 2025 by rpki-client