Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
File: nwSzzyTPS4GyIhFGoA8id7w0h4A.mft (raw, json)
Hash identifier: NfmfZZzKqDX3PT08BME6ePwnJltxQsudgzdOBVNXwns=
Subject key identifier: C3:07:02:BA:E1:E5:B0:2E:1E:03:0E:00:AC:AD:3D:C6:CB:71:9B:6A
Authority key identifier: 9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
Certificate issuer: /CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Certificate serial: 019A4EF54F98CCDF6B5A505E11CF0B9201CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
Manifest number: 11AF
Signing time: Tue 04 Nov 2025 13:01:30 +0000
Manifest this update: Tue 04 Nov 2025 13:01:30 +0000
Manifest next update: Wed 05 Nov 2025 13:01:30 +0000
Files and hashes: 1: JkR72JNkfOOkf4Hdto9Hn61nIOM.roa (hash: GdSC1LJhK3esreP7fCY/nmDtbQZgfXPG6XPWXjCKZig=)
2: Q8bZioVPDoZ4xd-x42q6Z5HkkPQ.roa (hash: uBME2SsaTDhptgYkDGLlHO5wga4qvwY0K6f/+pZrE38=)
3: nwSzzyTPS4GyIhFGoA8id7w0h4A.crl (hash: FQsTp2v4EaLyXCPXKuRpRw/4lL9RVOQiV2r6F/Hx/uE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:4f:98:cc:df:6b:5a:50:5e:11:cf:0b:92:01:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Validity
Not Before: Nov 4 13:01:30 2025 GMT
Not After : Nov 5 13:01:30 2025 GMT
Subject: CN=c30702bae1e5b02e1e030e00acad3dc6cb719b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5c:61:56:58:06:ac:42:11:e9:7e:c6:14:86:
77:93:20:01:98:08:bb:15:c4:a4:76:a7:3b:2c:5f:
aa:ca:60:de:a2:35:b4:7a:58:45:0d:db:f2:4e:69:
d0:5d:d1:15:7e:7f:69:2a:14:d0:97:1c:2f:a7:a1:
c2:94:bc:82:ee:b1:64:04:dd:0b:c5:6a:de:40:0d:
e2:7d:e9:a2:e0:25:92:cb:6c:3f:a2:0f:96:9b:a8:
d1:77:e2:d1:b5:b6:d7:fb:51:69:41:08:76:21:33:
58:27:14:a5:2d:92:54:2b:00:9c:96:1c:04:fd:8e:
79:b0:40:21:e5:11:37:d1:47:a2:ef:70:89:d1:be:
98:24:0f:ba:f7:34:f6:c1:95:84:b8:d1:d6:09:ae:
4b:1d:0e:e3:f6:f3:ab:3e:87:e8:20:8b:66:8a:c4:
99:00:8f:80:99:b0:80:da:2c:c7:f8:70:60:22:ef:
a1:9a:21:62:0c:a8:e5:21:97:7a:26:85:7e:8a:f7:
4c:03:c1:2e:98:42:50:13:66:d5:4b:2b:21:a8:39:
be:20:a3:ea:9b:a4:63:7e:94:06:17:ec:5e:ac:03:
57:ad:6a:12:36:35:1e:ef:bf:23:f0:4f:5d:17:48:
cf:08:c3:66:f6:1e:7a:95:2d:7c:71:28:52:ca:0f:
10:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:07:02:BA:E1:E5:B0:2E:1E:03:0E:00:AC:AD:3D:C6:CB:71:9B:6A
X509v3 Authority Key Identifier:
keyid:9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e9:a2:c5:0d:b9:45:37:d5:c9:ba:7d:90:0e:6f:d9:60:e5:
68:c3:0c:4c:b3:a9:6c:8f:2c:3d:9b:43:da:4b:7d:b5:a6:e1:
96:29:68:d5:8e:98:6e:ac:2f:6d:57:aa:dd:40:26:ca:4a:2c:
e2:ac:f9:9e:dd:03:1b:00:e8:50:0b:5b:38:e9:86:4a:0f:73:
56:97:97:72:15:fd:32:d8:24:bd:42:60:be:f9:49:ba:2c:8e:
85:0d:21:63:3c:6f:a8:24:99:f3:3e:2a:9f:ab:e1:13:21:2a:
dc:b4:f3:60:7d:c2:7a:79:56:99:38:3e:4a:f4:b6:30:9f:9c:
71:f0:ba:02:76:f4:78:f9:6b:b9:ae:52:e2:dd:47:db:e1:2e:
3d:f5:b8:df:f8:40:68:8e:51:e0:5c:17:32:1c:bb:79:31:3e:
7b:0c:35:25:90:e5:03:49:63:ef:3c:3c:64:b7:c3:02:55:9b:
db:e9:db:54:88:5a:ef:ea:65:d0:b9:18:a0:d3:ef:42:77:17:
1a:c6:95:94:c3:63:d3:85:c7:68:55:65:12:51:e0:2c:8c:6d:
a9:d7:66:4b:0f:f9:53:ac:cc:65:d7:62:de:5f:c4:d4:b0:ba:
8f:45:58:f3:c2:ec:ed:0a:c1:4b:a9:46:f1:22:0a:b6:e2:be:
60:3f:50:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:59:30 2025 by rpki-client