Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
File: NwjgT9e_gbZ13L57KaomPJEgeLY.mft (raw, json)
Hash identifier: yjcYHMdiOmkoG875uUXfP7AapfTyXDwp2+9NKfZ7RLw=
Subject key identifier: 9D:03:05:66:81:CA:56:CB:83:6A:71:60:2B:DC:E7:EC:6A:F5:21:7D
Authority key identifier: 37:08:E0:4F:D7:BF:81:B6:75:DC:BE:7B:29:AA:26:3C:91:20:78:B6
Certificate issuer: /CN=3708e04fd7bf81b675dcbe7b29aa263c912078b6
Certificate serial: 0197B8FD68DA7393BDC02F7C5F3C85B13FB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
Manifest number: 09E4
Signing time: Sun 29 Jun 2025 00:01:44 +0000
Manifest this update: Sun 29 Jun 2025 00:01:44 +0000
Manifest next update: Mon 30 Jun 2025 00:01:44 +0000
Files and hashes: 1: NwjgT9e_gbZ13L57KaomPJEgeLY.crl (hash: EDOPbJD3+BM+VrOR2Ye1n7E1Vy578GsEd6RGyojLxTo=)
2: dQrN5l4ER8ioZrR3Ol61rF1mTIM.roa (hash: i6nZan7ltRkXD1mx1+9g2E7sNbpHefpKiqIOGyeWWGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:68:da:73:93:bd:c0:2f:7c:5f:3c:85:b1:3f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3708e04fd7bf81b675dcbe7b29aa263c912078b6
Validity
Not Before: Jun 29 00:01:44 2025 GMT
Not After : Jun 30 00:01:44 2025 GMT
Subject: CN=9d03056681ca56cb836a71602bdce7ec6af5217d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:27:47:10:0d:5a:d6:4a:ff:2f:26:14:3e:aa:
c8:f1:16:1d:39:a9:de:55:f7:aa:41:e1:89:9c:8c:
20:85:0f:ae:9e:08:17:96:73:87:ac:a8:ca:42:c8:
53:1b:f5:ff:d6:50:ec:c6:12:f5:94:dd:70:90:4c:
20:0d:94:1b:fe:0d:33:58:86:34:99:45:43:34:7e:
9a:9a:43:54:8e:13:64:e0:fc:79:80:57:cb:a5:ec:
e8:f6:34:15:68:6b:ca:93:dc:69:85:b3:25:f3:15:
4a:a8:10:e0:02:0a:26:06:51:29:7a:dc:c0:7b:45:
e1:61:3e:03:c6:b0:9c:be:d7:2d:c6:95:2f:ca:4a:
d1:77:2f:20:42:b4:8e:0f:14:6a:e5:46:a2:35:b3:
75:e8:0c:a0:ea:3c:4a:14:de:81:1d:0a:be:1b:f4:
97:3f:0d:1c:66:83:6a:b4:13:b7:c9:72:1c:26:38:
ff:25:34:3d:dd:a1:25:c3:3d:88:58:02:5a:63:5b:
e3:a0:59:1b:3c:6c:16:55:e9:58:57:8e:86:45:52:
70:ae:0c:df:87:06:a1:3b:45:cc:9a:14:6b:f7:2d:
ec:9a:03:20:ad:59:fb:87:be:61:79:bb:bd:25:d0:
a3:e5:b2:fe:14:26:39:d5:3b:f2:e7:95:1d:20:1e:
9c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:03:05:66:81:CA:56:CB:83:6A:71:60:2B:DC:E7:EC:6A:F5:21:7D
X509v3 Authority Key Identifier:
keyid:37:08:E0:4F:D7:BF:81:B6:75:DC:BE:7B:29:AA:26:3C:91:20:78:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:98:05:fa:8d:8a:e1:22:42:33:51:98:4d:19:fc:fa:26:c6:
6c:d7:4c:af:e1:2f:0f:35:0b:49:12:db:23:3b:35:0d:3b:fd:
f8:cb:29:33:09:25:e5:b0:8f:42:e0:c6:e4:3f:a6:6a:0e:34:
b6:43:3a:fd:e6:8a:96:ed:bc:22:98:93:91:b5:4b:2f:01:93:
8c:b8:60:55:26:07:4b:29:0f:9e:6a:aa:fa:92:f5:82:58:7d:
09:16:8b:fb:58:80:a0:56:02:2b:38:58:2c:1e:01:71:f2:91:
ed:fb:fc:59:62:20:0a:4d:cc:14:38:b7:e9:e9:b7:4b:53:64:
03:4b:77:52:56:7f:6c:f9:13:8a:b4:de:35:8c:43:b6:6a:3c:
42:07:3c:5e:ed:be:55:cc:f0:90:dd:dc:39:92:35:41:84:3a:
ca:1d:4c:a6:2c:26:16:bb:32:93:49:75:c4:ef:ca:01:55:a9:
75:2f:75:53:d7:46:0e:5d:e9:c6:c1:25:3d:c7:a5:22:57:e1:
e5:f1:ca:ac:6e:14:fc:86:b8:02:fa:59:ea:97:4e:85:27:f0:
8f:ce:aa:18:55:78:ef:fe:57:ae:24:12:74:7a:f5:5b:7c:47:
ee:85:68:e5:dd:b6:22:32:7a:7a:6b:e4:cb:6e:23:65:46:ad:
0d:83:6a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:37:08 2025 by rpki-client