Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft
File: nwM4t9tUQAKUEDl1Fckw60UtdbA.mft (raw, json)
Hash identifier: ThZ2viFhusI7JIDq8iDv/UD8aKku0STXS03xT4c2tgY=
Subject key identifier: DF:9F:DE:84:5C:59:26:CB:2A:49:89:19:D2:D2:9F:3D:84:EE:31:B5
Authority key identifier: 9F:03:38:B7:DB:54:40:02:94:10:39:75:15:C9:30:EB:45:2D:75:B0
Certificate issuer: /CN=9f0338b7db5440029410397515c930eb452d75b0
Certificate serial: 0198D5BBB90FFD9CE2CF6FACEAEBBE5329E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 07:01:46 +0000
Manifest this update: Sat 23 Aug 2025 07:01:46 +0000
Manifest next update: Sun 24 Aug 2025 07:01:46 +0000
Files and hashes: 1: HhSxQEAct_Hilmn4S8Eq6DvrLvI.roa (hash: crLyXY2X5OyUyjzwP0FotFChrfWXLKr+2gME4D4k2t8=)
2: nwM4t9tUQAKUEDl1Fckw60UtdbA.crl (hash: hzZ+lnefYPivq+zeRqTXVEG+G/lkNJL3B2YjIYPuuec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:b9:0f:fd:9c:e2:cf:6f:ac:ea:eb:be:53:29:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0338b7db5440029410397515c930eb452d75b0
Validity
Not Before: Aug 23 07:01:46 2025 GMT
Not After : Aug 24 07:01:46 2025 GMT
Subject: CN=df9fde845c5926cb2a498919d2d29f3d84ee31b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:69:7a:29:ae:0f:26:f2:3e:73:de:c7:29:b8:
92:eb:12:7c:39:b4:b6:ce:d7:35:d2:cd:54:cc:32:
3f:85:8b:b8:5f:df:34:cb:e6:ca:ee:8b:53:7c:d8:
54:51:32:48:dd:d8:18:13:0d:e1:8b:44:65:d4:93:
9b:49:fb:4a:98:40:eb:5d:13:ff:99:90:03:08:17:
1a:90:17:ba:7d:28:b8:88:53:1c:6c:0d:04:41:82:
23:61:9f:00:aa:9e:a7:13:99:4e:2e:bd:09:d9:5d:
9a:44:82:21:d6:19:d2:01:bd:c6:de:9f:81:24:b6:
e5:a2:09:a8:b2:a9:47:3b:07:76:e8:9a:26:3b:27:
8d:af:bd:38:24:d5:3f:50:66:b4:3b:3b:8d:7c:1a:
3f:e1:18:c0:64:39:07:49:09:2e:c3:7f:bf:01:c1:
58:2c:d0:57:8f:4a:0f:05:ff:41:ce:72:20:02:7f:
e5:7b:5a:6c:82:66:74:6e:d5:b5:0d:b0:f6:c1:a0:
b3:43:3e:33:4f:f8:23:2a:b8:82:18:82:4a:32:68:
d2:bf:88:34:33:76:a9:b3:7f:21:24:38:8d:c4:bd:
69:38:e6:2e:1d:13:15:f0:bb:72:0b:68:0e:6f:86:
91:6d:9a:eb:ab:e4:7d:f6:a2:58:38:ff:92:67:ae:
84:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9F:DE:84:5C:59:26:CB:2A:49:89:19:D2:D2:9F:3D:84:EE:31:B5
X509v3 Authority Key Identifier:
keyid:9F:03:38:B7:DB:54:40:02:94:10:39:75:15:C9:30:EB:45:2D:75:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:24:80:37:39:8a:6b:04:b2:87:6c:95:8f:e8:0d:ad:27:a3:
04:94:5b:e0:58:f1:43:e6:2b:9b:61:b4:bb:f8:d1:e5:93:ba:
5f:dc:d6:54:d5:f0:ae:35:01:17:fb:66:41:9f:0e:d3:0a:d7:
83:d3:fb:0f:cd:23:66:9e:db:8b:9e:ca:e0:e4:fa:10:71:e4:
12:07:3e:3b:86:a4:fd:eb:42:bd:76:d3:84:2d:7e:d7:77:22:
19:94:f6:23:c3:cf:d1:d1:f7:f6:8e:b6:af:1a:7c:fe:5c:43:
e4:a0:3d:b3:d6:35:df:17:f9:53:88:f3:79:4e:54:c4:57:e1:
c9:c5:9c:39:92:91:1f:34:e8:47:39:9a:24:3c:8b:ec:f6:3c:
5c:46:48:62:6a:4f:a7:e1:0c:4b:a8:9d:47:e7:da:b6:40:f2:
dc:fd:e7:36:fd:13:b7:07:46:0e:ed:5d:c5:b5:f0:ef:28:23:
ef:ac:d1:0e:f0:8d:56:1a:93:05:61:a3:4d:d4:4b:3e:4b:c4:
06:30:80:e0:05:d8:fb:8a:63:36:60:5d:9a:3c:dd:81:70:2e:
ea:b3:d6:c5:e3:1c:fc:fe:49:13:41:ed:e8:56:22:5d:d4:f3:
49:a9:23:86:85:40:3c:8d:88:a7:6d:68:a6:c3:47:5f:60:09:
77:85:28:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:57:51 2025 by rpki-client