Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
File: nmw2D-XITxlWHHrpu89PnPpHi08.mft (raw, json)
Hash identifier: L1VZS+jYENWBEiPTQ9EqSUtD2cYfhjOuEe9bjQRYkOc=
Subject key identifier: 97:61:B3:3D:BF:E8:17:2A:AB:AE:E6:BA:9B:FA:F1:6E:45:E3:AD:3F
Authority key identifier: 9E:6C:36:0F:E5:C8:4F:19:56:1C:7A:E9:BB:CF:4F:9C:FA:47:8B:4F
Certificate issuer: /CN=9e6c360fe5c84f19561c7ae9bbcf4f9cfa478b4f
Certificate serial: 0198D5BC308A9E19690855AB4E23713B08AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nmw2D-XITxlWHHrpu89PnPpHi08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
Manifest number: 0901
Signing time: Sat 23 Aug 2025 07:02:16 +0000
Manifest this update: Sat 23 Aug 2025 07:02:16 +0000
Manifest next update: Sun 24 Aug 2025 07:02:16 +0000
Files and hashes: 1: nmw2D-XITxlWHHrpu89PnPpHi08.crl (hash: sGuPpthYbnYKkSCqCmQSqXZO2UZBxFZCdTPQWz0lHcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
rsync://rpki.ripe.net/repository/DEFAULT/nmw2D-XITxlWHHrpu89PnPpHi08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:30:8a:9e:19:69:08:55:ab:4e:23:71:3b:08:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6c360fe5c84f19561c7ae9bbcf4f9cfa478b4f
Validity
Not Before: Aug 23 07:02:16 2025 GMT
Not After : Aug 24 07:02:16 2025 GMT
Subject: CN=9761b33dbfe8172aabaee6ba9bfaf16e45e3ad3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7b:6c:a7:fe:93:23:c0:70:ef:69:36:db:ce:
a5:a6:b4:92:18:c5:c6:91:c5:90:eb:e4:37:56:ac:
8b:d6:53:e8:2f:9b:ee:8e:14:50:9a:1a:9b:41:d0:
eb:81:98:3b:f8:aa:ea:80:bc:07:81:46:fc:f5:1f:
e8:9e:bd:b8:78:c5:5f:3b:94:08:1c:59:6e:23:07:
ed:58:7d:5c:68:ac:88:fd:82:59:2e:08:6d:c2:c6:
bb:64:ec:2d:0d:92:68:b9:f3:e2:87:59:e4:f8:b6:
ac:b6:84:f7:4a:14:c3:a4:b3:9b:1a:3b:35:0e:a4:
be:ec:a3:d2:bb:d7:22:77:52:3b:43:ee:4f:52:86:
bd:b0:3d:eb:31:91:da:e2:ac:9d:3c:cc:18:93:a6:
d6:8f:cb:27:4f:bb:16:73:9f:06:2e:b5:86:f3:e1:
d3:b8:62:8c:12:33:0f:37:b4:b7:23:41:40:af:b3:
1b:39:4a:62:3b:72:7e:fe:0d:fa:bb:d9:fa:f8:30:
45:78:9d:a1:b1:25:0d:d7:18:d8:d0:a9:53:95:27:
61:82:eb:f1:54:89:f1:ce:f7:94:d6:4c:b3:23:3d:
bf:ff:96:4a:0a:6e:d3:37:68:10:c5:48:cc:44:00:
6c:06:7f:68:fb:41:74:2e:19:7c:be:ba:a9:9a:9f:
27:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:61:B3:3D:BF:E8:17:2A:AB:AE:E6:BA:9B:FA:F1:6E:45:E3:AD:3F
X509v3 Authority Key Identifier:
keyid:9E:6C:36:0F:E5:C8:4F:19:56:1C:7A:E9:BB:CF:4F:9C:FA:47:8B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmw2D-XITxlWHHrpu89PnPpHi08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:65:6f:5c:01:ff:08:9b:11:7d:c1:04:3c:29:04:f1:07:f2:
76:f0:bd:83:c6:30:50:47:57:41:42:12:53:21:11:be:1e:63:
73:a9:88:dc:79:a3:74:4b:a7:26:f4:06:8f:a8:2a:1b:5b:a6:
9e:90:5f:a8:69:4b:92:c2:cd:83:cc:55:cb:5b:39:e8:86:8a:
5a:0d:27:d7:8e:c4:a3:a6:75:95:80:d0:67:63:56:8b:60:50:
e7:9b:3b:71:da:ae:ed:0c:6e:31:70:b7:77:1a:47:63:ca:8c:
c6:0d:dc:83:86:c0:59:23:9e:57:9c:f8:48:b3:72:60:fb:16:
de:8f:6c:a1:47:be:41:51:b2:00:00:fc:0d:6e:4a:71:b4:60:
1e:1c:96:6e:b5:b0:6f:62:5b:75:44:7a:b3:93:c8:64:0e:19:
2b:73:c0:98:97:3d:15:a0:71:78:60:d9:e9:db:26:2e:0b:be:
79:61:8e:b8:f9:8c:c6:73:11:3b:07:6a:f9:71:de:51:09:5c:
67:86:6e:9b:3b:3f:c0:1c:6c:ed:55:51:b2:78:3f:b6:a1:7e:
f8:10:0e:22:7c:cc:35:14:3c:01:98:1d:ab:1a:e9:93:bb:61:
e5:8f:7c:21:7a:0c:4e:d4:95:e7:91:a1:57:55:70:99:dc:fc:
27:f5:c5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:58:45 2025 by rpki-client