Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
File: nS2GwCi_w46HVFXPgmiaNiZTAsI.mft (raw, json)
Hash identifier: gDnSLg4gUDoywJdON8TcxUFyX9fSeIBWiu8BFJBLRU8=
Subject key identifier: C0:8B:78:CA:04:25:58:6D:4D:8E:73:56:C8:5B:96:89:AF:1A:49:C3
Authority key identifier: 9D:2D:86:C0:28:BF:C3:8E:87:54:55:CF:82:68:9A:36:26:53:02:C2
Certificate issuer: /CN=9d2d86c028bfc38e875455cf82689a36265302c2
Certificate serial: 019A4EF50C48FEB5670B4CBCBFE6D4571FC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:01:13 +0000
Manifest this update: Tue 04 Nov 2025 13:01:13 +0000
Manifest next update: Wed 05 Nov 2025 13:01:13 +0000
Files and hashes: 1: BCfHRxvaBlgRu7FF6R1aFrqf-D4.roa (hash: jY82l74QOduMSK8Hp/MMojju94Gfvr7fCtUmoiSODw8=)
2: nS2GwCi_w46HVFXPgmiaNiZTAsI.crl (hash: EG/bE83YUD4LEdcWK7WfNi07eHtuQNNoyvoVsMVtgow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:0c:48:fe:b5:67:0b:4c:bc:bf:e6:d4:57:1f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2d86c028bfc38e875455cf82689a36265302c2
Validity
Not Before: Nov 4 13:01:13 2025 GMT
Not After : Nov 5 13:01:13 2025 GMT
Subject: CN=c08b78ca0425586d4d8e7356c85b9689af1a49c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:87:86:ae:ef:e0:fb:9e:8c:8b:f5:5c:e4:14:
ea:dc:d4:23:1e:fc:97:2a:f9:3c:d1:33:16:ef:53:
f1:7a:55:b5:5d:c7:15:37:0b:81:ef:8d:48:ed:9d:
21:e9:4d:6f:8d:f2:be:1e:68:54:41:70:24:cb:7c:
6f:0d:5c:01:46:f5:70:69:cf:30:9b:80:e1:91:47:
38:21:6a:b4:71:7c:bc:0a:c3:b0:68:1f:3e:ca:bb:
04:b7:fc:83:91:3c:60:d3:b3:8e:37:8f:5e:3c:90:
7d:29:a1:c5:93:75:45:bd:65:a6:a2:40:35:cc:0e:
e3:2f:4e:39:5d:53:17:8f:76:e0:9a:0a:72:89:ed:
fc:62:e5:ec:06:3a:e6:7c:f6:35:1d:08:fa:e9:7c:
14:ef:e1:79:71:7e:8b:b6:7a:06:76:f3:56:42:67:
a4:09:86:4e:df:13:f9:64:6c:5e:0b:18:9f:a9:51:
1b:72:3c:5f:32:f9:98:93:31:b0:e2:78:b9:95:de:
40:bb:3c:03:5a:a5:2e:83:e0:e3:31:03:0e:44:04:
b3:6e:2a:d0:bb:1b:ee:87:ba:f7:59:c5:8b:d8:87:
78:0b:19:0d:b2:bf:59:ce:6d:5c:e6:58:04:86:44:
88:3c:49:fe:c4:87:e3:54:d2:7c:43:6f:5a:c0:f1:
b5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8B:78:CA:04:25:58:6D:4D:8E:73:56:C8:5B:96:89:AF:1A:49:C3
X509v3 Authority Key Identifier:
keyid:9D:2D:86:C0:28:BF:C3:8E:87:54:55:CF:82:68:9A:36:26:53:02:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ae:14:11:e4:b7:6d:88:45:27:a0:d0:1c:f4:a8:f4:cb:f2:
9d:7f:64:32:a9:c1:5f:05:07:cc:5a:f8:5c:b8:e5:84:fd:f7:
53:90:29:4c:26:6f:58:3e:99:a7:b0:9e:aa:66:ea:ba:d4:ef:
9b:9a:08:92:5a:c9:df:9f:e0:f4:ca:cb:9f:65:68:f9:31:6d:
3c:eb:e5:79:75:d3:96:4e:4f:d9:3e:b9:e8:10:92:5a:38:19:
47:11:a2:df:32:be:bb:7b:d7:58:d4:33:ae:fb:22:dc:16:b0:
6b:e8:80:4d:55:09:df:de:84:63:96:c6:92:77:cb:f5:5b:d9:
4f:74:04:bb:19:fc:1f:ca:14:cf:85:45:35:7f:41:98:ee:af:
76:72:de:a3:76:58:b5:45:fb:e0:b3:67:db:55:4a:4d:6a:9a:
96:cc:a8:84:69:7d:41:ce:5c:23:b6:fb:1d:59:35:fb:b8:30:
96:1b:aa:5f:46:83:6a:4b:bf:8d:2d:01:78:e1:c5:90:a9:1a:
57:54:21:b6:ee:04:8e:12:2e:5c:bc:60:2e:8c:70:5b:fe:d5:
43:c2:33:1e:f8:f0:4e:2b:a7:28:fb:f9:b9:f7:17:aa:21:11:
8b:c4:12:3f:cd:92:8c:ee:38:03:6e:e0:89:e4:3a:95:f3:1f:
7f:fa:e4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:41:56 2025 by rpki-client