Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
File: nmw2D-XITxlWHHrpu89PnPpHi08.mft (raw, json)
Hash identifier: a43yncY2o+oa3Hxy0qYHRB0iBScg945pMVWpOL0YHmM=
Subject key identifier: E1:08:D1:23:47:BC:5D:25:2F:E7:88:B7:9A:3B:0D:0D:72:19:AF:D2
Authority key identifier: 9E:6C:36:0F:E5:C8:4F:19:56:1C:7A:E9:BB:CF:4F:9C:FA:47:8B:4F
Certificate issuer: /CN=9e6c360fe5c84f19561c7ae9bbcf4f9cfa478b4f
Certificate serial: 0197B7EA549C017ABE5483119DD8E9161140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmw2D-XITxlWHHrpu89PnPpHi08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
Manifest number: 086D
Signing time: Sat 28 Jun 2025 19:01:16 +0000
Manifest this update: Sat 28 Jun 2025 19:01:16 +0000
Manifest next update: Sun 29 Jun 2025 19:01:16 +0000
Files and hashes: 1: nmw2D-XITxlWHHrpu89PnPpHi08.crl (hash: ldxg5Q+aUfh8RK2B8x0oR6f8x+d/pYex+/xViMHKRGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmw2D-XITxlWHHrpu89PnPpHi08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:54:9c:01:7a:be:54:83:11:9d:d8:e9:16:11:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6c360fe5c84f19561c7ae9bbcf4f9cfa478b4f
Validity
Not Before: Jun 28 19:01:16 2025 GMT
Not After : Jun 29 19:01:16 2025 GMT
Subject: CN=e108d12347bc5d252fe788b79a3b0d0d7219afd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c2:22:92:d4:b7:dd:0e:46:8b:38:ee:70:e2:
f6:8d:ec:e2:db:f0:49:e7:46:f5:d5:28:42:37:4e:
cb:ac:62:0a:aa:08:43:1b:c5:8c:b7:5a:04:f1:32:
b3:81:37:3f:cd:35:2d:82:72:51:0c:18:15:00:23:
11:e8:73:25:6d:ac:ef:4b:10:31:e7:c7:82:34:99:
9f:91:6b:c9:79:78:ab:34:43:7b:80:47:c0:3a:d2:
b5:96:36:78:ed:ba:61:a0:d3:08:98:87:d2:2b:ce:
ec:c3:75:f7:b0:d7:de:95:e0:8b:8c:db:2e:31:d7:
03:2c:f2:e7:3b:2d:55:2e:22:ec:4c:33:75:6c:b6:
15:13:0f:4f:b6:b0:a6:6e:dc:d0:97:52:e6:94:4e:
57:8d:cc:94:d3:32:a7:d2:06:55:69:74:7e:b1:dc:
6e:67:c1:59:55:34:6e:81:2e:17:af:63:ac:a2:c8:
69:e9:ca:1c:9d:b3:0a:ec:18:9b:0e:aa:2a:e4:e1:
6e:3b:39:74:a9:2b:ab:c9:78:ee:49:e9:50:ef:d7:
a4:29:e4:18:7e:8f:cc:fb:b2:20:6a:95:a2:d0:bd:
a1:19:b4:d8:4a:a8:9f:91:f8:41:cc:7b:9a:05:f8:
9c:b6:62:ed:1a:81:94:d6:5b:b5:9b:60:f3:03:09:
c0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:08:D1:23:47:BC:5D:25:2F:E7:88:B7:9A:3B:0D:0D:72:19:AF:D2
X509v3 Authority Key Identifier:
keyid:9E:6C:36:0F:E5:C8:4F:19:56:1C:7A:E9:BB:CF:4F:9C:FA:47:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmw2D-XITxlWHHrpu89PnPpHi08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:00:b0:13:c5:57:0b:ab:0c:f5:ed:80:5a:09:12:e9:15:e6:
4c:4c:67:76:25:08:36:3a:14:cf:95:e3:b0:af:49:85:4e:6c:
82:66:30:ce:0c:a1:22:19:e2:46:5b:dc:5b:7d:fa:8f:69:e0:
3c:87:d1:e9:94:4c:42:4a:25:93:cc:01:0a:f2:e5:0c:87:2f:
4a:ed:3b:d9:80:00:66:9c:83:2a:96:c6:39:ce:30:46:03:d1:
65:75:43:6a:ea:40:cb:76:51:6a:94:21:18:f2:26:4e:00:3c:
3a:5e:31:54:53:cf:ec:01:d6:00:a0:e0:60:c7:9f:87:73:9b:
a8:e3:a2:a9:a7:d2:0e:94:5e:53:3d:17:6f:71:8d:9c:4b:0e:
5c:e7:ac:a7:c1:84:5f:bc:2a:86:7e:b9:55:b8:46:67:30:ef:
bd:dc:67:78:e5:36:0a:f7:25:04:56:44:9e:ee:2f:98:c8:2b:
f5:59:9c:b9:47:39:2f:86:69:12:f9:12:3f:63:78:59:dc:99:
02:bd:60:2d:d1:a9:0c:a2:20:01:8c:d3:a1:a0:6f:7e:b6:fb:
7d:14:e9:d7:5c:bb:93:86:74:7f:04:a4:82:c5:a6:a7:e9:25:
43:75:36:71:2f:ff:f7:0b:71:fd:e4:bc:33:13:93:90:a5:f4:
28:5d:bb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:21:16 2025 by rpki-client