Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
File: NwjgT9e_gbZ13L57KaomPJEgeLY.mft (raw, json)
Hash identifier: 949ytKKjOiUk1Vu9gpuiDljZxjc8CHNF491UaP6enB8=
Subject key identifier: F4:CE:7B:82:40:88:2A:9E:54:4E:17:03:95:08:BA:94:2B:9E:57:6E
Authority key identifier: 37:08:E0:4F:D7:BF:81:B6:75:DC:BE:7B:29:AA:26:3C:91:20:78:B6
Certificate issuer: /CN=3708e04fd7bf81b675dcbe7b29aa263c912078b6
Certificate serial: 019A4F6240560F872AF1E47043F63CEA904F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
Manifest number: 0B3B
Signing time: Tue 04 Nov 2025 15:00:30 +0000
Manifest this update: Tue 04 Nov 2025 15:00:30 +0000
Manifest next update: Wed 05 Nov 2025 15:00:30 +0000
Files and hashes: 1: NwjgT9e_gbZ13L57KaomPJEgeLY.crl (hash: gddc+2HQ5OMMwZK1jI0SYsBlZwnzKRZNIcDKa1zmdjc=)
2: dQrN5l4ER8ioZrR3Ol61rF1mTIM.roa (hash: i6nZan7ltRkXD1mx1+9g2E7sNbpHefpKiqIOGyeWWGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:40:56:0f:87:2a:f1:e4:70:43:f6:3c:ea:90:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3708e04fd7bf81b675dcbe7b29aa263c912078b6
Validity
Not Before: Nov 4 15:00:30 2025 GMT
Not After : Nov 5 15:00:30 2025 GMT
Subject: CN=f4ce7b8240882a9e544e17039508ba942b9e576e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7a:e6:df:ec:e7:1c:18:6d:eb:c2:9a:24:13:
32:bf:89:64:0a:77:f4:54:1a:a9:04:07:cb:e6:53:
40:1e:69:9a:23:d7:30:31:d1:46:12:de:66:ed:7d:
21:7b:a5:8c:91:ba:e1:4b:fc:c5:93:95:34:78:fe:
75:70:3a:45:0d:7c:1e:d6:22:aa:2a:71:88:5c:15:
9c:b4:c6:b9:2e:99:91:7c:ea:d2:03:44:ef:24:24:
ab:a4:5b:41:8d:35:09:b7:89:fd:41:cb:cd:33:24:
c9:61:4b:2a:21:5d:8a:ad:be:df:8b:1b:90:55:4b:
67:a8:df:f4:c6:23:97:57:3f:e3:a5:c2:21:40:20:
96:27:e2:59:d9:07:8d:e3:9f:bf:bf:25:45:c5:34:
fc:ba:3d:d2:55:ae:1a:d5:5e:66:dd:f1:a4:12:24:
f9:86:70:83:51:73:c4:26:5e:74:1c:4f:32:3d:46:
33:f3:05:c8:5a:7f:82:69:ad:3e:aa:b2:a3:68:5a:
07:c9:aa:a4:02:23:ff:8a:6d:bf:89:13:74:72:24:
50:16:a0:4e:64:01:b9:67:5d:2f:f7:4a:53:95:34:
76:a9:f9:11:53:7f:e5:8d:57:db:d1:17:1b:e5:06:
61:a4:af:ba:3e:bb:b4:77:3e:42:5f:62:3d:c3:e4:
d9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CE:7B:82:40:88:2A:9E:54:4E:17:03:95:08:BA:94:2B:9E:57:6E
X509v3 Authority Key Identifier:
keyid:37:08:E0:4F:D7:BF:81:B6:75:DC:BE:7B:29:AA:26:3C:91:20:78:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:7c:f7:16:39:a0:86:37:bb:23:0c:f3:71:43:5e:3c:8a:6f:
9d:22:fa:52:e5:a4:41:82:1b:99:6d:7e:98:5e:2c:1a:6c:98:
6a:77:8f:4d:b4:25:32:12:07:42:1c:24:eb:ba:ba:1b:77:f7:
ba:9b:96:39:3e:42:38:8d:59:fe:35:c4:2f:da:72:6a:e8:61:
6e:80:a7:6c:7e:8b:b3:90:1c:5e:17:27:cd:63:02:6b:b1:e7:
74:c8:f3:ca:93:2e:b2:7d:40:80:40:7e:ce:aa:f8:96:14:7f:
1b:0a:7f:f5:ab:81:6d:60:a5:94:19:87:52:18:29:63:4b:c3:
5b:fb:46:7f:b5:81:f9:a4:ac:d8:0a:93:8e:d0:6a:8b:12:da:
21:8b:5d:4c:50:a0:6c:79:d2:16:ee:25:37:48:09:06:e4:09:
1f:fd:44:86:17:75:09:23:97:42:48:2b:83:f3:a5:cf:8f:8f:
54:c8:27:4a:db:48:29:d6:e8:d8:37:a4:6e:9c:bd:5d:1c:b4:
72:33:d3:83:7b:6d:4c:63:6c:35:a2:e8:bc:75:9d:13:ec:cb:
12:bf:aa:ab:29:89:fa:13:37:82:7c:18:e1:36:ff:f0:7d:9b:
68:c2:17:33:28:38:c0:fc:5e:70:64:62:f5:78:be:20:2b:28:
32:da:b7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:25 2025 by rpki-client