Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
File: nwSzzyTPS4GyIhFGoA8id7w0h4A.mft (raw, json)
Hash identifier: OnHDWhUpRiOiMmVoWZdxBtAYzrcPPXqD9efMklXOlRg=
Subject key identifier: BF:8B:F8:DE:B2:A5:23:A9:93:13:92:BE:A2:7D:B2:14:1A:5E:93:CA
Authority key identifier: 9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
Certificate issuer: /CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Certificate serial: 019879AE5E36BE7D22052DF435F77FC256B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
Manifest number: 10BC
Signing time: Tue 05 Aug 2025 10:02:07 +0000
Manifest this update: Tue 05 Aug 2025 10:02:07 +0000
Manifest next update: Wed 06 Aug 2025 10:02:07 +0000
Files and hashes: 1: JkR72JNkfOOkf4Hdto9Hn61nIOM.roa (hash: GdSC1LJhK3esreP7fCY/nmDtbQZgfXPG6XPWXjCKZig=)
2: Q8bZioVPDoZ4xd-x42q6Z5HkkPQ.roa (hash: uBME2SsaTDhptgYkDGLlHO5wga4qvwY0K6f/+pZrE38=)
3: nwSzzyTPS4GyIhFGoA8id7w0h4A.crl (hash: JgrRxQaOPaUJYMhpkH1UCkFqCiDsP2qZYzxjT1J4t/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ae:5e:36:be:7d:22:05:2d:f4:35:f7:7f:c2:56:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Validity
Not Before: Aug 5 10:02:07 2025 GMT
Not After : Aug 6 10:02:07 2025 GMT
Subject: CN=bf8bf8deb2a523a9931392bea27db2141a5e93ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a2:57:b6:65:a1:36:97:a5:b4:76:6b:1e:ee:
4e:ff:b2:4e:6a:13:61:e2:1e:9c:8e:9c:17:9e:97:
1a:14:6c:c9:17:d3:8c:63:9d:6b:dd:42:36:ad:34:
48:b6:82:ff:f2:df:04:31:56:6a:97:22:c4:f6:f5:
89:f1:22:ea:a0:3e:c8:f5:e8:c1:f5:d7:01:87:7e:
a8:9f:b5:03:72:4b:51:91:b9:87:62:f3:bb:2b:cf:
d3:6d:60:cb:a1:01:c5:fc:78:39:18:2c:2b:a4:31:
e7:d8:e0:8f:c4:82:10:e4:2e:18:ee:94:90:0e:c3:
79:d9:0c:10:0e:af:21:c4:84:61:bd:f0:e2:d0:d3:
d4:12:44:3a:47:9e:a5:c4:aa:30:e1:1b:98:bc:7f:
cc:5f:d3:1f:ac:cb:a1:62:a0:ec:d0:f8:8f:8e:5f:
c1:24:d8:43:04:ed:44:3e:6f:6b:e3:19:f2:e0:10:
43:12:8d:f0:43:b2:db:b2:33:d1:e4:43:fe:ca:bb:
67:93:89:ee:9d:21:35:1d:93:aa:2e:b2:d5:28:15:
50:2d:2f:96:3a:1b:79:dd:39:93:e8:43:bd:a6:44:
b7:62:2c:20:6c:de:7b:bc:88:09:32:4b:57:7c:74:
d0:6d:1c:da:2e:26:e9:65:d5:24:55:1e:57:b6:3f:
31:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8B:F8:DE:B2:A5:23:A9:93:13:92:BE:A2:7D:B2:14:1A:5E:93:CA
X509v3 Authority Key Identifier:
keyid:9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:7f:31:fc:77:f2:eb:32:dc:fb:b9:68:cf:3d:f1:95:d4:07:
59:9f:84:d3:29:31:4b:1f:0e:75:20:dc:98:24:1a:f1:43:90:
70:4a:e2:54:b7:52:04:d6:d6:c6:fd:d1:c1:54:2f:6d:53:f8:
a4:9a:08:0d:b0:ed:20:c7:71:2c:34:f7:c0:9b:a5:c2:39:3e:
30:82:13:9b:97:7a:9a:ef:ce:6d:3e:63:56:5a:ae:ca:24:7c:
e7:94:1a:e3:79:e0:21:1a:73:f6:05:0d:38:ba:0b:56:44:ee:
a1:d7:eb:72:bd:0e:3e:ef:d7:83:74:d7:0f:05:bb:5f:97:c3:
09:be:fc:ad:f2:8b:02:30:5c:4d:40:de:1f:d3:de:af:8c:be:
ab:d0:3b:69:d3:5d:08:a3:90:af:aa:84:f6:d5:ad:77:0e:c6:
f8:13:b2:73:00:5a:ad:dd:b7:ac:d7:80:68:c9:5d:1a:53:44:
00:f2:11:3a:b5:12:5f:b7:2a:67:f7:de:d7:27:c6:46:75:ea:
58:88:34:30:01:ff:57:47:40:62:c4:8b:d5:75:95:59:8c:8f:
bd:50:7e:27:e5:91:f6:ff:b1:75:76:0d:6f:53:e0:d6:fa:6d:
b6:64:90:cb:59:70:bd:d1:27:46:99:05:ee:55:ca:35:13:6d:
3d:5e:8f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:20:27 2025 by rpki-client