Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
File: nwTDqGM44XBgXmZdNNilyGmUigU.mft (raw, json)
Hash identifier: LbeuX10R13uUVOl0gzKcBMijph0GfoM9305W3MkkW3Y=
Subject key identifier: BE:6B:02:C4:21:DE:13:5E:37:58:AC:ED:2B:FB:7B:19:69:C5:99:3A
Authority key identifier: 9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
Certificate issuer: /CN=9f04c3a86338e170605e665d34d8a5c869948a05
Certificate serial: 019A4E18F8C42A3DA43CA9796E0433E7A8D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
Manifest number: 072B
Signing time: Tue 04 Nov 2025 09:00:50 +0000
Manifest this update: Tue 04 Nov 2025 09:00:50 +0000
Manifest next update: Wed 05 Nov 2025 09:00:50 +0000
Files and hashes: 1: nwTDqGM44XBgXmZdNNilyGmUigU.crl (hash: g7h/GitdbCH6SOm8MsE4z8n9CNtry241bZg0K+EPThA=)
2: wa6e-L5g3p2SNEGIRb1a4oqT56I.roa (hash: iBFSre5PI6/cZlAuQmnNGFmFLfmyjvaYR/9ZuSUPyuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:f8:c4:2a:3d:a4:3c:a9:79:6e:04:33:e7:a8:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f04c3a86338e170605e665d34d8a5c869948a05
Validity
Not Before: Nov 4 09:00:50 2025 GMT
Not After : Nov 5 09:00:50 2025 GMT
Subject: CN=be6b02c421de135e3758aced2bfb7b1969c5993a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:69:21:da:2b:84:94:65:0e:93:e5:0c:43:65:
db:a3:51:34:1b:de:d3:32:77:63:49:be:5b:cb:8c:
79:65:74:94:55:42:91:66:00:dd:78:8d:b7:5b:c1:
e4:fe:ee:fa:3b:82:1d:8d:a9:af:6d:15:d5:d4:d4:
e3:e2:67:fc:3e:56:c0:6c:2c:e9:f5:59:6c:27:3e:
a6:35:08:5a:56:85:dd:51:6f:51:13:65:73:47:84:
eb:4c:94:5b:e6:aa:b0:3e:59:ab:b8:c7:ea:ca:a2:
33:a7:55:b2:4b:f5:1b:ea:87:96:7c:32:ed:a6:a4:
dc:e5:21:92:61:a9:86:13:89:e1:78:1a:54:62:5d:
4b:cc:2f:e3:f0:11:39:81:23:86:b3:69:5d:23:47:
dd:c7:51:21:b2:5f:6f:5c:bf:70:7c:d1:c4:bf:c3:
c7:12:bc:94:d7:6b:dc:15:3f:fe:49:a8:bc:d2:80:
e4:fc:46:f9:9d:85:93:d4:da:d8:be:71:6d:b8:b3:
48:a6:14:86:5e:a2:1f:81:86:36:02:cf:f2:8b:f8:
33:04:38:c6:00:8b:f0:aa:5b:86:a9:a8:24:59:05:
8b:e7:59:b8:6f:11:ca:21:ef:a9:11:e4:6f:e1:5b:
e9:52:f8:19:28:10:de:c1:a7:90:47:d4:cd:f4:2e:
0e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6B:02:C4:21:DE:13:5E:37:58:AC:ED:2B:FB:7B:19:69:C5:99:3A
X509v3 Authority Key Identifier:
keyid:9F:04:C3:A8:63:38:E1:70:60:5E:66:5D:34:D8:A5:C8:69:94:8A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwTDqGM44XBgXmZdNNilyGmUigU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/849e26-6472-4440-a038-7baa92a828ec/1/nwTDqGM44XBgXmZdNNilyGmUigU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:07:7e:31:e2:a4:0f:fc:02:e0:6c:08:9f:c1:26:e7:21:df:
dc:0c:f5:05:3f:68:7b:11:f4:d2:34:0b:8a:61:df:32:ca:d3:
1b:7d:e6:ad:f9:65:b4:cd:5f:0c:a4:9e:0b:ef:b3:05:5a:ca:
2c:3f:ac:ff:4f:10:4c:1a:ed:b2:11:71:43:22:5e:e4:d9:5f:
04:bc:ea:a2:fe:42:1b:b6:94:3c:e5:cb:c6:23:99:6c:72:d4:
2f:fd:b9:a1:9a:fa:df:48:6b:f7:d7:83:80:f6:20:b3:11:a6:
47:75:bd:cb:aa:50:ef:6a:91:91:cc:a9:a9:ec:3e:ca:28:2e:
75:56:ab:ce:4d:59:59:b5:e4:a8:1e:6a:b4:2e:67:82:e9:f4:
93:d4:78:97:c7:4e:f5:95:a3:6b:00:58:a9:b3:8d:59:43:d5:
22:88:17:8f:53:d1:4d:5b:a7:c2:ba:1f:c6:a3:ae:98:6e:ec:
66:11:73:a5:15:40:07:92:1e:d4:18:9d:e1:9f:70:57:da:a7:
91:3a:9a:6d:fe:6a:3d:10:34:05:41:99:7d:d4:1f:c1:7e:a4:
4e:23:aa:ca:b9:21:92:3a:f5:f3:66:3c:a7:9a:fd:dd:13:47:
15:62:5b:c7:75:87:23:d3:03:20:1d:41:3d:89:11:c0:16:92:
97:2d:05:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:35:05 2025 by rpki-client