
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
File: nmw2D-XITxlWHHrpu89PnPpHi08.mft (raw, json)
Hash identifier: txusF3vqj8eQQYHSC/NQlhECHXy8u7NF2kr5PVRKOlg=
Subject key identifier: D5:11:B4:77:1E:91:99:6D:C1:8F:49:8A:A2:B5:37:02:D3:86:68:C6
Authority key identifier: 9E:6C:36:0F:E5:C8:4F:19:56:1C:7A:E9:BB:CF:4F:9C:FA:47:8B:4F
Certificate issuer: /CN=9e6c360fe5c84f19561c7ae9bbcf4f9cfa478b4f
Certificate serial: 0199FB45E537984CB836744EC690F24C6E4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmw2D-XITxlWHHrpu89PnPpHi08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
Manifest number: 0999
Signing time: Sun 19 Oct 2025 07:01:25 +0000
Manifest this update: Sun 19 Oct 2025 07:01:25 +0000
Manifest next update: Mon 20 Oct 2025 07:01:25 +0000
Files and hashes: 1: nmw2D-XITxlWHHrpu89PnPpHi08.crl (hash: MNrrG26q6SBE2mKlxe3G3HR0EShf3GmUaDRNWNehypI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmw2D-XITxlWHHrpu89PnPpHi08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:e5:37:98:4c:b8:36:74:4e:c6:90:f2:4c:6e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6c360fe5c84f19561c7ae9bbcf4f9cfa478b4f
Validity
Not Before: Oct 19 07:01:25 2025 GMT
Not After : Oct 20 07:01:25 2025 GMT
Subject: CN=d511b4771e91996dc18f498aa2b53702d38668c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:97:fe:84:6e:3a:a3:81:9a:ee:7e:bd:d8:6c:
f9:6d:66:51:db:f7:48:fd:0f:49:5f:38:bf:1e:c2:
c3:53:e7:34:1f:02:ea:da:61:ac:da:7f:bb:f5:75:
39:8e:4e:f0:07:b2:94:0d:5c:ca:d7:f9:ab:ed:a2:
57:ac:a3:08:50:cf:05:4d:c0:81:65:6e:75:d3:af:
58:84:3c:8e:17:52:91:2a:d9:32:4d:fb:e5:67:81:
ad:02:5c:e0:c0:46:fc:27:5f:07:70:07:b6:d6:50:
fb:06:28:2e:58:8c:34:1f:ce:47:df:9a:8f:71:73:
46:dc:15:17:83:a8:b2:05:7d:bb:61:66:49:4f:4d:
e4:cf:ad:c5:f3:91:22:70:20:39:91:88:a1:fd:7f:
5a:36:e3:cf:a5:80:e1:00:07:8d:5f:4f:fd:fa:c6:
ce:5f:57:3e:e8:8e:1c:33:be:c7:24:c1:96:dc:f6:
74:fd:3c:18:05:69:3c:06:4d:e5:01:9a:7c:90:27:
11:8e:99:a3:73:53:85:2b:7e:5c:0d:18:30:68:b6:
b8:46:17:7f:4d:43:45:71:58:36:5a:62:77:53:fb:
2a:7e:01:76:17:6a:93:ba:63:c2:58:13:90:6b:1d:
cf:79:ec:3f:85:56:9e:34:34:c6:a1:00:ca:5b:f2:
e4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:11:B4:77:1E:91:99:6D:C1:8F:49:8A:A2:B5:37:02:D3:86:68:C6
X509v3 Authority Key Identifier:
keyid:9E:6C:36:0F:E5:C8:4F:19:56:1C:7A:E9:BB:CF:4F:9C:FA:47:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmw2D-XITxlWHHrpu89PnPpHi08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:fc:0e:92:2b:fb:fb:ca:03:73:4f:d5:21:b3:99:d3:13:15:
3b:75:c8:38:48:38:6c:49:50:78:03:76:56:5d:90:10:be:6b:
41:a1:b8:a8:cf:4f:e1:5d:5a:15:2b:21:48:04:ae:9e:28:01:
35:ec:7d:6c:69:2c:24:0e:45:22:9d:c8:77:73:8e:09:56:70:
c2:9f:33:d7:bf:b3:a9:d7:62:37:d5:64:0d:24:ba:04:19:d4:
27:f5:23:a6:de:a0:3a:c1:6e:a7:94:34:b3:a3:0a:01:97:ae:
9d:6a:d4:3a:31:69:40:5d:02:dc:01:86:e4:75:0f:2e:74:13:
80:4c:86:20:5d:1c:a3:28:c1:82:a4:7d:75:98:00:8b:c8:e7:
25:ed:65:ba:f8:1e:f4:b5:fd:e7:30:3c:40:f2:2c:47:33:5b:
58:cb:04:80:13:b5:19:db:71:6a:90:ec:ee:fd:39:88:f1:a5:
30:46:76:15:32:6d:ea:38:05:b7:c2:a6:fb:de:e5:99:e3:10:
ed:ab:11:1d:79:d4:bb:cd:c7:56:ff:61:4c:0f:44:ca:9a:b4:
fe:1e:eb:43:75:06:e0:19:89:ea:86:35:2e:31:8f:14:b3:e4:
ae:12:b4:20:7a:f3:b3:83:9e:d1:d4:79:9b:46:cd:d3:be:50:
b9:78:2f:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7ReU3mEy4NnROxpDyTG5LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNmMzNjBmZTVjODRmMTk1NjFjN2FlOWJiY2Y0ZjljZmE0
NzhiNGYwHhcNMjUxMDE5MDcwMTI1WhcNMjUxMDIwMDcwMTI1WjAzMTEwLwYDVQQD
EyhkNTExYjQ3NzFlOTE5OTZkYzE4ZjQ5OGFhMmI1MzcwMmQzODY2OGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5f+hG46o4Ga7n692Gz5bWZR2/dI
/Q9JXzi/HsLDU+c0HwLq2mGs2n+79XU5jk7wB7KUDVzK1/mr7aJXrKMIUM8FTcCB
ZW51069YhDyOF1KRKtkyTfvlZ4GtAlzgwEb8J18HcAe21lD7BiguWIw0H85H35qP
cXNG3BUXg6iyBX27YWZJT03kz63F85EicCA5kYih/X9aNuPPpYDhAAeNX0/9+sbO
X1c+6I4cM77HJMGW3PZ0/TwYBWk8Bk3lAZp8kCcRjpmjc1OFK35cDRgwaLa4Rhd/
TUNFcVg2WmJ3U/sqfgF2F2qTumPCWBOQax3Peew/hVaeNDTGoQDKW/LkGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNURtHcekZltwY9JiqK1NwLThmjGMB8GA1UdIwQY
MBaAFJ5sNg/lyE8ZVhx66bvPT5z6R4tPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm13MkQtWElUeGxXSEhycHU4OVBuUHBIaTA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9kMjIzM2MtYTc0MS00YmQ5LWI2ZGIt
N2VkOTk4ZGRiODVhLzEvbm13MkQtWElUeGxXSEhycHU4OVBuUHBIaTA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9kMjIzM2MtYTc0MS00YmQ5LWI2ZGItN2VkOTk4ZGRiODVh
LzEvbm13MkQtWElUeGxXSEhycHU4OVBuUHBIaTA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE/wOkiv7
+8oDc0/VIbOZ0xMVO3XIOEg4bElQeAN2Vl2QEL5rQaG4qM9P4V1aFSshSASunigB
Nex9bGksJA5FIp3Id3OOCVZwwp8z17+zqddiN9VkDSS6BBnUJ/Ujpt6gOsFup5Q0
s6MKAZeunWrUOjFpQF0C3AGG5HUPLnQTgEyGIF0coyjBgqR9dZgAi8jnJe1luvge
9LX95zA8QPIsRzNbWMsEgBO1GdtxapDs7v05iPGlMEZ2FTJt6jgFt8Km+97lmeMQ
7asRHXnUu83HVv9hTA9Eypq0/h7rQ3UG4BmJ6oY1LjGPFLPkrhK0IHrzs4Oe0dR5
m0bN075QuXgv2g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:46 2025 by rpki-client