Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft
File: NW4BARgaykJR6fJKj2NzXi9evc0.mft (raw, json)
Hash identifier: uMeUAqYyTijy6sKANtAAP3CIu8KtJKiott94MdE3WLc=
Subject key identifier: 56:97:6E:EF:CD:13:43:52:5D:80:F8:F7:C5:4E:6A:56:01:27:E6:D5
Authority key identifier: 35:6E:01:01:18:1A:CA:42:51:E9:F2:4A:8F:63:73:5E:2F:5E:BD:CD
Certificate issuer: /CN=356e0101181aca4251e9f24a8f63735e2f5ebdcd
Certificate serial: 0199FF9038ED363276AD974B7362F58AD15E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW4BARgaykJR6fJKj2NzXi9evc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft
Manifest number: 03F1
Signing time: Mon 20 Oct 2025 03:01:05 +0000
Manifest this update: Mon 20 Oct 2025 03:01:05 +0000
Manifest next update: Tue 21 Oct 2025 03:01:05 +0000
Files and hashes: 1: NW4BARgaykJR6fJKj2NzXi9evc0.crl (hash: MqzolPvwRpPYiKk+0qlOh1Azp42JaD1iGiC9tXsFGSY=)
2: dEoQSu71Ws9XnNjOfEdbibTdInI.roa (hash: sYA0jY+C8zad7z34ckQV3VzC0yGLwcHRH79SGfsU6zY=)
3: y-NIwscX11p02xnh21oGE_zmYCI.roa (hash: +Y0OYgxDa6WhuGqqRO+OXeS1WkoYTiwyapeS/DlTCTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NW4BARgaykJR6fJKj2NzXi9evc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:90:38:ed:36:32:76:ad:97:4b:73:62:f5:8a:d1:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356e0101181aca4251e9f24a8f63735e2f5ebdcd
Validity
Not Before: Oct 20 03:01:05 2025 GMT
Not After : Oct 21 03:01:05 2025 GMT
Subject: CN=56976eefcd1343525d80f8f7c54e6a560127e6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:78:40:86:48:9a:11:e4:f9:f7:97:07:b7:28:
35:1c:21:98:b1:1f:2f:47:1c:a0:2f:1f:b9:b5:63:
0a:21:42:4e:12:17:92:43:01:2d:dd:83:e1:9c:07:
e4:ab:01:63:e3:2f:1a:8d:3d:7b:e0:f9:c8:80:eb:
a3:82:60:3a:b3:31:0d:84:06:2a:b3:e1:a1:b3:f7:
b1:c9:3e:f2:15:73:c7:41:b1:1b:17:6e:2b:71:fd:
c9:15:a8:21:da:01:f4:f2:e3:ce:bd:ce:70:be:0d:
ac:8c:2d:a8:6c:e8:92:c0:5d:42:6f:3b:6f:60:63:
5b:b7:bb:26:e7:64:2e:4e:b1:59:7d:27:aa:92:1f:
aa:9d:18:db:db:eb:21:ba:70:91:58:9e:ac:ec:8a:
c8:87:96:d2:da:32:4f:52:e5:50:7b:c5:78:31:0f:
2e:1d:f4:81:dc:9b:a6:cc:a9:a2:cf:b3:a6:34:02:
34:8b:d8:55:1a:e4:11:65:fb:84:7e:17:0c:92:3d:
ad:f4:d7:7d:7c:c8:30:e2:9e:2c:c6:de:38:e1:b0:
d8:15:b5:d0:ea:0b:85:52:82:5c:71:a7:95:c8:c3:
db:db:b0:75:e8:0a:23:16:6e:14:40:14:3f:9b:1c:
1c:16:6e:8e:ea:64:eb:c8:ed:03:f7:1c:43:61:72:
55:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:97:6E:EF:CD:13:43:52:5D:80:F8:F7:C5:4E:6A:56:01:27:E6:D5
X509v3 Authority Key Identifier:
keyid:35:6E:01:01:18:1A:CA:42:51:E9:F2:4A:8F:63:73:5E:2F:5E:BD:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW4BARgaykJR6fJKj2NzXi9evc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a4:9f:25:c8:f7:c3:1f:b7:3e:69:92:1d:f3:39:70:b0:f6:
7f:22:1a:a6:20:23:42:09:f1:d2:f3:ab:39:4a:01:a2:7a:fa:
a9:62:6c:88:71:2c:51:d2:ee:2d:cf:93:58:65:93:35:38:1c:
89:24:fc:b5:b4:0c:a2:e2:6b:cd:7c:4d:c1:d4:0e:22:8e:b2:
ac:ff:e0:ca:ed:c1:e3:7d:31:97:7f:24:8e:c3:f8:b6:97:49:
13:d7:35:70:d4:dc:27:a6:08:41:7a:d4:69:6f:cc:8a:22:06:
a9:4e:34:8c:30:43:6f:c7:10:15:79:b6:38:e4:04:a7:c2:00:
c5:6a:81:6b:29:0d:cb:20:f6:a4:8c:fc:2a:f3:b7:3d:e6:b7:
5e:7d:6c:d3:3f:6e:6c:20:b3:1c:ac:58:94:47:f2:17:0a:6f:
1a:95:0e:33:52:cf:f8:3b:f2:1a:2b:42:26:c0:a9:17:8d:d4:
7d:15:3c:0f:92:da:38:c3:98:d8:a1:56:5b:6b:f7:13:50:ca:
23:b1:3d:02:d3:88:9b:6e:75:26:dd:10:d6:00:e5:bb:fe:c1:
11:c0:26:42:6f:b0:cf:a4:37:8d:3d:e1:69:80:0e:2d:76:7c:
38:ed:60:be:a9:72:72:21:69:57:ae:d4:b4:59:ad:b6:7a:d0:
72:ff:85:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:02:34 2025 by rpki-client