Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
File: NwjgT9e_gbZ13L57KaomPJEgeLY.mft (raw, json)
Hash identifier: moUG+EIXVDNXcAwofNfTc9lL63HLEHoYtBEA8XledeM=
Subject key identifier: 04:A6:D5:0C:75:90:32:BD:44:74:A2:26:D0:B1:B7:D0:06:97:B4:A7
Authority key identifier: 37:08:E0:4F:D7:BF:81:B6:75:DC:BE:7B:29:AA:26:3C:91:20:78:B6
Certificate issuer: /CN=3708e04fd7bf81b675dcbe7b29aa263c912078b6
Certificate serial: 01988D6AB91E28AB365BE2ADA01112971C66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
Manifest number: 0A52
Signing time: Sat 09 Aug 2025 06:00:38 +0000
Manifest this update: Sat 09 Aug 2025 06:00:38 +0000
Manifest next update: Sun 10 Aug 2025 06:00:38 +0000
Files and hashes: 1: NwjgT9e_gbZ13L57KaomPJEgeLY.crl (hash: zYQWL4lxngRtD/art3svOEsGm4+Y/v92RyvJUvdcUhs=)
2: dQrN5l4ER8ioZrR3Ol61rF1mTIM.roa (hash: i6nZan7ltRkXD1mx1+9g2E7sNbpHefpKiqIOGyeWWGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6a:b9:1e:28:ab:36:5b:e2:ad:a0:11:12:97:1c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3708e04fd7bf81b675dcbe7b29aa263c912078b6
Validity
Not Before: Aug 9 06:00:38 2025 GMT
Not After : Aug 10 06:00:38 2025 GMT
Subject: CN=04a6d50c759032bd4474a226d0b1b7d00697b4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b3:88:da:c9:c9:e3:4c:31:d1:cd:7a:02:58:
d0:47:6e:0a:a0:81:96:02:93:53:c7:3f:3e:d5:eb:
ac:9d:13:0b:65:fb:40:2f:2a:7e:3d:f7:a5:6f:0a:
20:b6:c4:39:38:4a:f5:65:45:f7:3a:27:0a:8e:b7:
4d:16:c2:35:58:1f:57:1b:9a:6f:14:76:6c:01:12:
0d:d8:91:16:5a:af:53:a2:7b:7b:4c:b7:31:93:eb:
b0:a0:73:3f:4f:b8:38:f0:cd:0b:ad:b5:e8:11:87:
11:8c:b8:c7:c7:39:a9:8f:e0:16:95:a9:9e:df:2a:
6a:fb:6f:ef:6a:c2:69:62:72:79:9b:28:df:3e:1a:
98:e2:1c:39:21:ad:32:e8:fb:97:54:f5:5e:db:67:
7a:d4:63:e8:d7:86:4e:13:ff:2a:9d:9f:18:7c:0a:
e4:0b:31:2b:e1:f6:c9:03:3a:74:bf:ca:7f:2d:39:
5f:dd:11:bc:af:6d:7e:0f:03:ac:8d:fa:56:13:cd:
db:2c:24:c1:6c:7f:4e:eb:6c:b2:f0:fc:4a:02:17:
77:f0:34:f4:45:82:ca:62:3f:71:de:44:a8:0b:db:
34:39:73:7c:f5:85:71:0a:54:97:c6:62:cb:06:e7:
3b:dc:50:da:ab:82:7f:0e:59:3d:3d:b8:73:cb:a3:
74:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A6:D5:0C:75:90:32:BD:44:74:A2:26:D0:B1:B7:D0:06:97:B4:A7
X509v3 Authority Key Identifier:
keyid:37:08:E0:4F:D7:BF:81:B6:75:DC:BE:7B:29:AA:26:3C:91:20:78:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:34:63:29:fb:bc:f1:70:c8:bd:1c:bf:95:0f:29:b5:82:ba:
20:a8:5f:08:6a:72:95:e5:b1:0a:66:7b:cf:27:39:3f:6b:52:
95:2c:b0:f4:73:84:a1:0e:cf:3f:64:e3:79:8a:11:9a:e8:d5:
a7:b4:78:33:00:c7:e2:c5:aa:9b:90:ae:96:2d:0e:98:b0:ff:
b2:08:b0:bb:ad:da:91:a4:54:a5:75:5f:e0:ad:c6:89:fc:81:
72:e0:0e:97:2d:81:fd:08:7c:2c:3f:60:01:03:fe:d8:2c:90:
e1:e4:cd:37:36:53:01:51:ab:a4:a2:65:48:f7:29:cd:18:a0:
70:ae:ee:26:09:67:6c:48:10:d4:18:51:a6:ba:6f:dd:d3:9a:
f5:00:a0:ed:a4:0f:c3:68:47:ac:36:b4:86:a1:e6:ad:5f:5d:
4e:a0:e4:a4:b6:ac:2c:0f:98:0d:ca:60:e4:19:e1:f8:b4:94:
c9:c0:b9:f8:98:0f:ab:61:9d:29:30:2e:44:f3:9e:00:b9:1a:
44:e6:33:d8:ec:d3:da:f1:50:61:6e:1d:5c:47:63:4c:a2:0b:
62:c5:59:d1:5f:cc:8c:96:b5:8d:c9:3f:6e:f4:7a:92:ac:64:
9a:22:a9:93:f0:c8:54:eb:00:90:af:4e:48:2a:30:bf:65:17:
db:5f:2b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:33:02 2025 by rpki-client