Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
File: nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft (raw, json)
Hash identifier: Pg/vF43Z1p+GsRxanzAgfoKjlbk9iQIdNJdpZSplNTY=
Subject key identifier: 43:40:AB:54:21:DA:64:CF:5C:41:0E:A9:25:38:D2:17:54:F2:AE:E7
Authority key identifier: 9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
Certificate issuer: /CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Certificate serial: 0199FD33F12B718682B49E031FD8AE89A4FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
Manifest number: 01CC
Signing time: Sun 19 Oct 2025 16:01:03 +0000
Manifest this update: Sun 19 Oct 2025 16:01:03 +0000
Manifest next update: Mon 20 Oct 2025 16:01:03 +0000
Files and hashes: 1: 4hEwPlQV2R3wkknVQDbhfUdi-Hg.roa (hash: mjLFc+VoWHA5LJYiCj4OZP4v7wKlAoLVjBHa2WdTgLI=)
2: nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl (hash: iBgj8NWlMlJqbDTznV86O+Sn860TNXzBN6CgTbuJOwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:f1:2b:71:86:82:b4:9e:03:1f:d8:ae:89:a4:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Validity
Not Before: Oct 19 16:01:03 2025 GMT
Not After : Oct 20 16:01:03 2025 GMT
Subject: CN=4340ab5421da64cf5c410ea92538d21754f2aee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4d:77:03:1c:4f:88:6a:1c:d4:b5:e6:be:93:
b2:6a:59:a3:89:8a:87:f4:dc:8a:7e:55:76:85:75:
53:5b:15:c2:25:1d:94:cc:4e:39:49:70:a5:f1:3b:
c8:f0:3f:c4:dd:a4:ed:89:fb:09:37:6c:16:fc:af:
a1:c5:ed:0b:ce:a5:66:87:f7:36:3e:9a:b2:62:3b:
19:70:d5:15:57:5c:37:78:dc:9e:47:b2:74:3c:aa:
a1:f8:26:9d:30:7c:15:81:cc:48:69:a9:05:36:3e:
de:82:70:c7:f9:02:3d:b7:14:9a:0e:2a:ac:02:c1:
16:e3:d8:3a:f8:22:dc:b3:13:4f:57:7e:0b:3f:99:
7c:c5:05:9c:77:0b:bb:f7:e5:83:99:da:9f:70:c7:
99:e4:82:8d:56:13:9b:2b:8b:79:93:4f:88:72:de:
e0:5d:13:20:ea:a6:5f:b0:1d:cd:57:0c:c9:c9:6c:
45:fa:2b:84:6a:85:4f:89:55:4b:4e:de:2a:7c:88:
2b:9d:22:7f:79:04:cf:dd:fd:d2:f7:61:28:c8:e7:
52:b0:44:b6:b3:2f:5e:fa:b5:45:cf:35:11:28:16:
9d:47:32:6b:74:b0:b5:61:05:82:b4:10:1f:e1:4d:
5c:c5:ce:75:7a:78:84:53:09:43:20:90:e0:45:07:
eb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:40:AB:54:21:DA:64:CF:5C:41:0E:A9:25:38:D2:17:54:F2:AE:E7
X509v3 Authority Key Identifier:
keyid:9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:36:16:ac:ed:bc:38:0a:38:e5:12:eb:8e:03:50:99:8d:56:
6f:49:83:c7:3d:d7:78:15:71:b4:7a:f6:fe:f6:91:ba:82:bf:
34:37:3a:cb:65:11:36:a4:16:4b:e4:60:59:0b:7e:dd:66:d9:
0a:5f:21:07:ea:29:db:86:d7:41:d5:43:62:b8:a1:a8:8e:25:
53:56:7b:1f:9c:e8:db:09:d1:d0:f7:50:2e:0f:1c:00:36:45:
ce:dd:57:db:eb:48:8e:60:94:79:4c:fb:18:37:c1:e8:4b:90:
fe:01:e9:25:d4:b4:e2:b4:92:f5:a4:87:78:ac:88:50:bc:19:
61:f4:6d:a6:4d:41:5e:b3:97:37:95:6a:3e:ac:ef:4f:7e:c4:
ed:7e:76:f8:0b:87:45:67:17:24:5d:90:e4:ba:c6:a0:fa:7b:
7f:06:9b:1e:f7:ec:33:de:50:26:e0:31:22:0f:44:b3:a7:4b:
4b:7c:73:c1:c4:7d:72:32:64:d6:74:1b:7f:1f:cb:78:66:e4:
70:e7:c2:63:d8:d8:e7:c5:1c:64:b9:7b:91:8d:f0:11:49:5c:
8e:db:65:c1:59:3f:32:70:ff:8e:14:ee:bf:38:8a:37:e3:8b:
18:c6:7f:d9:db:fb:20:cb:e3:06:25:f7:a8:5d:03:3d:5d:38:
71:51:77:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:50:08 2025 by rpki-client