Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
File: nS2GwCi_w46HVFXPgmiaNiZTAsI.mft (raw, json)
Hash identifier: 3vyJB+o9tU8pECHR7fybjr5c5Cpje4SUq4iYURFl1GM=
Subject key identifier: 18:D0:CA:19:9D:17:64:52:DD:73:BA:B3:94:24:C1:29:0E:64:CC:92
Authority key identifier: 9D:2D:86:C0:28:BF:C3:8E:87:54:55:CF:82:68:9A:36:26:53:02:C2
Certificate issuer: /CN=9d2d86c028bfc38e875455cf82689a36265302c2
Certificate serial: 01989E5FC4A5EAE6580AEFA67002D73EE782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
Manifest number: 162D
Signing time: Tue 12 Aug 2025 13:02:13 +0000
Manifest this update: Tue 12 Aug 2025 13:02:13 +0000
Manifest next update: Wed 13 Aug 2025 13:02:13 +0000
Files and hashes: 1: BCfHRxvaBlgRu7FF6R1aFrqf-D4.roa (hash: jY82l74QOduMSK8Hp/MMojju94Gfvr7fCtUmoiSODw8=)
2: nS2GwCi_w46HVFXPgmiaNiZTAsI.crl (hash: p8SuITRm+Qz5BQb03BDTUOTNQo3Xi0ApPp+LRXEwxho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:5f:c4:a5:ea:e6:58:0a:ef:a6:70:02:d7:3e:e7:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2d86c028bfc38e875455cf82689a36265302c2
Validity
Not Before: Aug 12 13:02:13 2025 GMT
Not After : Aug 13 13:02:13 2025 GMT
Subject: CN=18d0ca199d176452dd73bab39424c1290e64cc92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8c:85:f6:3a:58:e8:e8:d7:6e:23:95:15:f7:
30:08:98:39:27:cf:33:43:63:2d:ed:12:0c:d3:36:
ed:97:06:b4:69:7b:9e:e8:c0:86:4c:4b:b1:b7:31:
f9:16:fa:d2:1f:af:c6:a7:9a:ad:43:47:22:0e:e7:
30:a5:de:4e:5b:7b:0e:ca:be:87:1e:7d:9e:b5:be:
1c:e4:db:df:c2:62:c6:45:0a:67:5e:b1:da:e1:a8:
8a:26:e6:82:f8:aa:62:2d:18:16:41:69:1e:74:ad:
b7:77:9c:af:6e:58:a6:41:b8:d0:57:5f:70:55:64:
76:e9:0f:3c:3d:9a:07:89:2d:c3:2f:be:f8:b1:c4:
59:5b:23:4b:04:82:ed:74:67:c8:fe:35:9e:e7:40:
48:56:88:a5:97:94:df:eb:e2:10:fd:07:18:53:d1:
84:bd:ec:7f:7e:64:89:c9:bd:2a:c1:08:f1:6a:74:
b0:05:30:c8:c1:1c:20:9e:28:2a:bb:c2:50:91:71:
42:4a:f9:ba:96:3f:46:d6:24:2b:e5:9a:7c:66:c3:
a6:dc:f0:52:2e:cb:ed:45:eb:b2:4c:ab:fe:dc:ab:
67:a5:55:fb:12:fd:fa:49:a8:f6:50:7f:50:3e:87:
12:ba:1b:a3:65:25:68:9a:0e:40:c1:ac:a5:2b:89:
f8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D0:CA:19:9D:17:64:52:DD:73:BA:B3:94:24:C1:29:0E:64:CC:92
X509v3 Authority Key Identifier:
keyid:9D:2D:86:C0:28:BF:C3:8E:87:54:55:CF:82:68:9A:36:26:53:02:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d5:be:66:34:fd:73:4f:c9:53:89:10:ef:09:09:17:01:9b:
ff:65:6e:af:13:f7:cc:26:8c:e1:e1:59:0d:6a:71:ef:d6:18:
bc:32:5f:a2:7a:78:d5:68:52:06:fb:fd:cd:cd:c8:94:25:ac:
82:09:60:2c:31:15:27:c9:0e:4a:6d:ec:e4:4e:94:de:18:25:
f9:4b:24:33:91:0a:35:a1:a5:18:5f:91:bc:77:4f:5f:ba:d2:
97:d6:4c:87:f8:1c:4b:a3:d7:dd:98:75:b8:1a:b8:86:42:d4:
13:b6:46:b4:24:3a:33:4c:81:8a:f3:4b:0b:70:3e:e9:56:40:
9f:b3:cf:1f:9d:da:77:e8:ad:05:9b:be:ed:c6:a2:d2:44:c4:
ab:dc:81:df:a8:7f:11:7f:46:5f:58:e9:f1:aa:01:30:19:88:
cf:5b:15:20:32:a5:2b:27:44:cf:50:79:84:89:d7:38:bb:83:
9d:40:74:98:85:b5:df:92:18:eb:69:bf:57:cb:21:d1:ca:c2:
1e:c1:c8:70:ba:19:5f:73:9b:0c:6b:f2:aa:9d:12:28:fe:a4:
4c:5b:33:7a:fe:33:41:13:ad:1d:f7:5f:95:63:42:e9:47:d6:
5b:8a:f2:b6:d6:c7:7b:03:2f:1b:16:19:d5:0d:a8:50:6e:e1:
08:b6:ac:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZieX8Sl6uZYCu+mcALXPueCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmQ4NmMwMjhiZmMzOGU4NzU0NTVjZjgyNjg5YTM2MjY1
MzAyYzIwHhcNMjUwODEyMTMwMjEzWhcNMjUwODEzMTMwMjEzWjAzMTEwLwYDVQQD
EygxOGQwY2ExOTlkMTc2NDUyZGQ3M2JhYjM5NDI0YzEyOTBlNjRjYzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoyF9jpY6OjXbiOVFfcwCJg5J88z
Q2Mt7RIM0zbtlwa0aXue6MCGTEuxtzH5FvrSH6/Gp5qtQ0ciDucwpd5OW3sOyr6H
Hn2etb4c5NvfwmLGRQpnXrHa4aiKJuaC+KpiLRgWQWkedK23d5yvblimQbjQV19w
VWR26Q88PZoHiS3DL774scRZWyNLBILtdGfI/jWe50BIVoill5Tf6+IQ/QcYU9GE
vex/fmSJyb0qwQjxanSwBTDIwRwgnigqu8JQkXFCSvm6lj9G1iQr5Zp8ZsOm3PBS
LsvtReuyTKv+3KtnpVX7Ev36Saj2UH9QPocSuhujZSVomg5AwaylK4n4gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBjQyhmdF2RS3XO6s5QkwSkOZMySMB8GA1UdIwQY
MBaAFJ0thsAov8OOh1RVz4JomjYmUwLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblMyR3dDaV93NDZIVkZYUGdtaWFOaVpUQXNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9jMDc4ZmQtZDJiNi00NmJhLWE2YmEt
NDRjM2I3NWQzZjMzLzEvblMyR3dDaV93NDZIVkZYUGdtaWFOaVpUQXNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9jMDc4ZmQtZDJiNi00NmJhLWE2YmEtNDRjM2I3NWQzZjMz
LzEvblMyR3dDaV93NDZIVkZYUGdtaWFOaVpUQXNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXNW+ZjT9
c0/JU4kQ7wkJFwGb/2VurxP3zCaM4eFZDWpx79YYvDJfonp41WhSBvv9zc3IlCWs
gglgLDEVJ8kOSm3s5E6U3hgl+UskM5EKNaGlGF+RvHdPX7rSl9ZMh/gcS6PX3Zh1
uBq4hkLUE7ZGtCQ6M0yBivNLC3A+6VZAn7PPH53ad+itBZu+7cai0kTEq9yB36h/
EX9GX1jp8aoBMBmIz1sVIDKlKydEz1B5hInXOLuDnUB0mIW135IY62m/V8sh0crC
HsHIcLoZX3ObDGvyqp0SKP6kTFszev4zQROtHfdflWNC6UfWW4ryttbHewMvGxYZ
1Q2oUG7hCLasoQ==
-----END CERTIFICATE-----
Generated at Tue Aug 12 22:57:38 2025 by rpki-client