Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
File: nwTDqGM44XBgXmZdNNilyGmUigU.mft (raw, json)
Hash identifier: X8bBhsC5XYwiACtxtMn4mljkAOmisGuDloPSkfTnuSk=
Subject key identifier: AF:E4:0E:F0:45:E9:D7:B2:3B:9C:7A:B1:87:44:0A:D3:74:E0:98:57
Authority key identifier: 9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
Certificate issuer: /CN=9f04c3a86338e170605e665d34d8a5c869948a05
Certificate serial: 019895C929583F6FCD866703DECFD69508AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
Manifest number: 0647
Signing time: Sun 10 Aug 2025 21:00:45 +0000
Manifest this update: Sun 10 Aug 2025 21:00:45 +0000
Manifest next update: Mon 11 Aug 2025 21:00:45 +0000
Files and hashes: 1: nwTDqGM44XBgXmZdNNilyGmUigU.crl (hash: SYyOqSe9dmEqHLwgDfWX/+IZFKcuAHpjpzbTXnni6yU=)
2: wa6e-L5g3p2SNEGIRb1a4oqT56I.roa (hash: iBFSre5PI6/cZlAuQmnNGFmFLfmyjvaYR/9ZuSUPyuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:c9:29:58:3f:6f:cd:86:67:03:de:cf:d6:95:08:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f04c3a86338e170605e665d34d8a5c869948a05
Validity
Not Before: Aug 10 21:00:45 2025 GMT
Not After : Aug 11 21:00:45 2025 GMT
Subject: CN=afe40ef045e9d7b23b9c7ab187440ad374e09857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:34:e3:ab:57:06:86:ff:22:dc:82:f5:74:f0:
ee:58:8d:80:e5:f2:7b:bb:69:05:5a:93:f0:46:22:
11:1d:8a:f4:8f:86:94:8d:50:d2:b7:e2:c2:32:0b:
9a:c8:a5:c7:02:b8:92:67:ac:90:5a:fc:64:b9:58:
b5:4d:50:7f:f4:ef:eb:6f:b8:63:dc:30:6a:97:8b:
22:c5:e7:58:d8:46:c7:8b:e5:95:06:6a:21:52:55:
fd:01:81:c2:b1:26:35:8a:37:4b:3f:71:af:aa:d7:
41:45:3c:8d:16:6f:85:5b:ba:6f:b7:82:d5:f8:6a:
a6:c2:31:e6:70:4d:e6:ab:6c:16:db:1d:d6:02:61:
56:9c:6f:9c:7a:b4:ce:c5:b7:16:82:38:70:9e:1e:
b8:4f:5c:7d:3e:bd:a8:e3:5f:37:8b:2e:f7:d3:64:
13:75:29:65:52:d0:ab:d7:82:db:7d:d5:9e:63:a6:
7d:24:0d:64:a8:1c:fc:45:97:1b:e9:c4:95:a1:26:
13:04:d3:e1:71:02:17:27:9d:22:f9:58:24:2a:a3:
47:d9:17:ca:e9:e3:8a:22:ed:b5:cc:5e:5c:b3:f3:
46:fa:d8:30:ef:af:e6:e2:3f:5b:34:14:5b:78:d2:
9a:bc:45:b5:8e:db:57:c7:e4:c1:97:93:41:41:4a:
20:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E4:0E:F0:45:E9:D7:B2:3B:9C:7A:B1:87:44:0A:D3:74:E0:98:57
X509v3 Authority Key Identifier:
keyid:9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:5f:73:9b:99:89:34:80:ca:4c:53:79:13:e3:af:2c:34:5d:
e0:51:4f:ba:cc:25:4c:74:5f:a9:55:8a:7a:a4:a5:64:d4:b1:
78:7a:9e:41:fc:88:30:98:ef:eb:82:d3:2f:0a:00:a1:cf:07:
50:bf:fb:e6:00:c8:81:66:39:1c:53:fc:5b:60:b2:f8:02:71:
b1:70:5e:90:75:92:6f:8e:10:ac:e4:1b:f1:da:72:48:8d:2b:
54:99:2a:60:0a:ab:1f:89:1f:90:c7:94:ba:0b:4c:00:37:c0:
a3:ae:fd:90:00:08:c2:5e:85:e4:1f:01:04:40:00:d0:d2:26:
c7:7e:b4:ce:89:e5:ad:f0:3d:07:27:0a:f8:37:63:32:4e:14:
98:b1:f3:0f:6e:fa:e3:26:d2:a2:75:a1:3e:3e:9d:89:2e:67:
4f:68:58:b2:6a:ba:20:3e:bf:ba:62:8a:9f:23:d6:d7:59:4f:
33:21:35:7d:0f:b4:8b:93:7d:b2:5c:66:35:63:45:4b:22:8e:
c4:0e:9a:74:e0:38:0c:0b:ad:8d:dd:ca:e2:1a:12:80:0a:15:
58:1e:54:a8:19:05:4e:a1:6e:b7:83:af:06:9f:b3:e3:c5:a1:
a7:29:a2:ce:7a:e7:f8:92:96:aa:33:ad:77:e3:7a:b7:c0:29:
5b:42:98:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:12:54 2025 by rpki-client