Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
File: nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft (raw, json)
Hash identifier: 5S3alwwM+UeI8yp0pgo3TA/5oF4MVQOUkAXcXomoh1s=
Subject key identifier: 5F:02:15:93:B4:6C:C6:56:9D:9B:AD:3B:94:50:C8:B5:2F:BA:18:D8
Authority key identifier: 9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
Certificate issuer: /CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Certificate serial: 0198D5BC3FB5919F1BB3E349C5BF2C07E6DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
Manifest number: 0133
Signing time: Sat 23 Aug 2025 07:02:20 +0000
Manifest this update: Sat 23 Aug 2025 07:02:20 +0000
Manifest next update: Sun 24 Aug 2025 07:02:20 +0000
Files and hashes: 1: 4hEwPlQV2R3wkknVQDbhfUdi-Hg.roa (hash: mjLFc+VoWHA5LJYiCj4OZP4v7wKlAoLVjBHa2WdTgLI=)
2: nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl (hash: IWcFFpJ4srSVXNQaaIC5RHe7p/iXO3J36YbBYn2zU/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:3f:b5:91:9f:1b:b3:e3:49:c5:bf:2c:07:e6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Validity
Not Before: Aug 23 07:02:20 2025 GMT
Not After : Aug 24 07:02:20 2025 GMT
Subject: CN=5f021593b46cc6569d9bad3b9450c8b52fba18d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f2:f3:71:a2:0e:98:23:42:bb:18:06:b1:42:
84:1d:82:c6:cd:97:1e:5c:8f:b4:07:10:f4:39:d1:
3a:72:e4:be:c1:b4:99:9c:6c:51:e9:bd:a7:dc:3b:
ba:ca:09:b7:d1:26:7a:74:fc:22:9f:14:30:83:41:
cc:ad:23:2a:6e:98:7a:31:ac:3e:05:dd:e5:0b:5e:
dc:a3:4f:f2:08:7f:da:0c:0d:ac:a7:4b:d2:c7:12:
bd:5b:48:a8:07:e0:89:34:8a:c2:ae:62:0e:72:21:
38:9e:29:3b:dd:78:98:8f:ad:7f:57:f9:cd:c3:19:
a2:97:ab:21:81:06:c7:6f:77:31:61:c3:5a:96:e9:
cc:e6:7d:51:6e:37:9d:21:b7:3b:9a:ea:fb:b5:a2:
ae:37:a6:b8:81:33:16:60:27:ce:e4:22:23:26:a5:
0d:a4:e2:85:85:3b:ac:5c:1f:41:63:e0:57:00:7f:
2a:e0:72:30:64:85:e0:c6:d7:ab:0e:33:cf:e9:6b:
a6:9c:99:de:6c:3b:9b:6d:6f:ba:90:c7:6a:d6:4c:
5b:ce:34:6f:82:ba:70:1c:34:69:df:b5:e8:6f:ca:
04:e2:3f:7b:4f:ce:1c:ce:0c:c0:89:d0:bf:16:52:
f5:68:30:36:3b:35:ca:3d:8a:0e:c0:f6:34:27:98:
bf:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:02:15:93:B4:6C:C6:56:9D:9B:AD:3B:94:50:C8:B5:2F:BA:18:D8
X509v3 Authority Key Identifier:
keyid:9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:04:18:4c:c7:f2:17:89:e0:48:46:38:8f:bd:5c:1d:17:7c:
92:bc:34:31:7d:03:20:12:2d:88:c6:d0:7f:f4:a4:81:c5:d9:
3d:54:ed:bf:2a:62:32:b9:35:90:cc:c7:ea:ab:63:22:e9:10:
a3:6d:b6:18:c8:2c:c7:7d:62:dd:cf:18:47:80:cc:8f:50:d9:
f1:e8:e8:6b:b3:47:72:7f:b9:43:5b:d2:4c:06:ee:7f:b0:72:
35:9c:35:a0:be:42:6a:05:8c:f8:b2:6d:99:b7:32:d8:6b:f5:
4f:0e:be:d9:d1:db:0d:ec:ac:7c:1b:29:98:0c:a5:86:49:1b:
26:8a:72:df:c4:25:cd:d7:a3:6d:05:77:76:c4:cd:3c:18:de:
74:eb:fc:42:2e:a6:76:84:61:40:cf:75:30:88:c1:f4:db:90:
2c:9e:dc:db:1e:fe:56:ce:00:ed:26:01:5d:75:4d:26:77:42:
4b:7d:4e:51:e1:f5:6d:d5:42:3c:d4:6b:cb:83:61:7d:e5:af:
9a:e3:6c:d5:ed:68:30:88:12:c4:98:a9:9d:6a:bd:0c:89:01:
d7:58:21:c4:cb:49:a1:a8:5c:a8:fc:0a:da:1d:75:b5:f9:18:
d3:30:87:34:c2:cd:81:17:9e:d9:07:f1:f2:1f:f3:95:c1:1b:
85:cc:53:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:57 2025 by rpki-client