Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft
File: Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft (raw, json)
Hash identifier: LjLcBbTNgkdpFCbQfY7KosXXMFwt2ppQ2mnH075plSs=
Subject key identifier: B4:58:DA:42:4C:BE:46:F4:2F:D9:F3:8D:45:7C:96:23:C3:29:69:CE
Authority key identifier: 37:0E:A1:B0:5C:BD:4E:5C:09:26:78:7C:79:53:3E:E2:9D:94:BE:96
Certificate issuer: /CN=370ea1b05cbd4e5c0926787c79533ee29d94be96
Certificate serial: 0199FB7CA5AFF6D25138D70E01B796DC281D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft
Manifest number: 0E93
Signing time: Sun 19 Oct 2025 08:01:14 +0000
Manifest this update: Sun 19 Oct 2025 08:01:14 +0000
Manifest next update: Mon 20 Oct 2025 08:01:14 +0000
Files and hashes: 1: Nw6hsFy9TlwJJnh8eVM-4p2UvpY.crl (hash: B9M98hLP/xE40bl7eYMEx5u5Oz3f6qMdVDNqBj2bjZc=)
2: agomHzSEGLU5uAKAS4YLGwlj-Q4.roa (hash: 7ISU2WJyj8nXTFjL/d0M7asR7w4tkrVLJaIrTwedHgs=)
3: vkfZgYornLyFRcsSczSPVSrUfQk.roa (hash: KEormr1cuV7WUv9lxgaJIBb9fC8nujOGpBV6adXBfrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:a5:af:f6:d2:51:38:d7:0e:01:b7:96:dc:28:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370ea1b05cbd4e5c0926787c79533ee29d94be96
Validity
Not Before: Oct 19 08:01:14 2025 GMT
Not After : Oct 20 08:01:14 2025 GMT
Subject: CN=b458da424cbe46f42fd9f38d457c9623c32969ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ae:15:0f:93:38:4c:19:39:f9:7a:26:d9:52:
38:75:59:9d:65:a4:07:b9:4e:ac:4b:6e:8e:4f:f7:
79:40:9f:67:42:9a:4e:cf:f4:81:d2:41:bd:e7:47:
f9:35:6d:04:f4:c8:e7:0a:23:c6:1d:e6:67:b7:53:
c2:52:60:9b:13:dd:dd:a0:14:69:ef:d6:64:fe:7b:
19:85:b9:0b:7f:13:c5:06:1b:12:6f:34:a5:d2:cb:
4b:4b:29:62:25:fb:49:ab:62:14:1a:8b:14:cd:5e:
26:03:8b:da:b7:8a:d7:52:ab:52:38:f6:a0:5e:38:
7b:ca:17:bf:60:0a:6e:18:d8:17:cd:6c:da:bf:c6:
01:2e:ea:c9:a5:8d:16:f9:6a:30:cf:4d:cd:a4:7d:
fb:02:d6:9c:b9:12:c2:53:b9:73:22:2a:90:aa:19:
a5:dc:02:85:8c:e3:84:f3:64:23:23:10:a6:ff:83:
38:61:5c:4b:6b:7b:ed:f0:86:bb:ba:94:4c:0a:df:
0a:39:f5:f2:fc:e7:40:86:cc:53:12:d0:a4:5b:0d:
1e:be:22:63:5c:7d:8b:69:e5:b4:bd:d3:f4:bb:97:
e9:20:64:6d:fd:97:e8:3c:ee:30:e5:4a:83:b5:77:
16:70:e1:df:8a:03:a8:56:32:7b:9e:72:bc:7b:57:
b8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:58:DA:42:4C:BE:46:F4:2F:D9:F3:8D:45:7C:96:23:C3:29:69:CE
X509v3 Authority Key Identifier:
keyid:37:0E:A1:B0:5C:BD:4E:5C:09:26:78:7C:79:53:3E:E2:9D:94:BE:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5b2d16-087f-488c-9ebb-e8a322846641/1/Nw6hsFy9TlwJJnh8eVM-4p2UvpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:97:95:0f:c9:93:15:d0:b4:6f:ea:84:8c:b9:93:a6:ba:60:
c8:2a:4f:32:70:44:a1:49:77:ea:3d:2b:af:53:f0:57:f6:9f:
fd:88:1c:11:46:e7:c9:03:96:7b:c8:27:2e:54:bc:d8:1c:86:
d0:45:c1:f2:7f:79:b0:55:ee:f1:dd:62:83:5f:9e:df:9e:78:
ab:e3:55:a2:2e:dd:ba:fd:3c:75:0d:7d:21:6c:2f:6d:6f:09:
51:6d:e3:ec:a3:56:ee:fc:b2:dd:ea:d0:76:96:97:1c:ec:81:
26:39:33:da:31:00:5f:a4:92:24:26:ec:4b:f0:85:61:02:a7:
0a:f4:92:1d:5a:d5:03:05:11:4c:ca:a2:52:56:54:85:85:23:
6d:a1:67:96:c7:86:d1:db:8a:30:28:c0:83:35:9d:31:1c:26:
25:f6:8f:b1:4b:08:6b:69:8b:c8:89:4c:75:db:52:02:29:cc:
eb:7f:6d:19:d1:a8:8e:ed:95:70:01:ec:7a:4f:a5:32:47:72:
6f:bd:ea:59:bf:e5:f6:7e:fc:44:d5:b4:7a:a2:02:a7:7c:5d:
c2:30:3d:5a:dd:a4:ce:c1:ac:e8:1a:29:0b:63:19:92:19:92:
55:42:5a:44:d2:bd:c7:3e:70:ed:a7:d8:f1:44:0e:75:b4:cd:
86:69:5b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:19 2025 by rpki-client