Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
File: NwjgT9e_gbZ13L57KaomPJEgeLY.mft (raw, json)
Hash identifier: cQs3D1T8LzJlKlCYchmE/2Ldk4y+gLdA0F/yqYtDBvQ=
Subject key identifier: 57:1A:11:D3:E2:17:78:91:E7:93:2D:4F:62:02:C0:B4:1B:D3:9A:15
Authority key identifier: 37:08:E0:4F:D7:BF:81:B6:75:DC:BE:7B:29:AA:26:3C:91:20:78:B6
Certificate issuer: /CN=3708e04fd7bf81b675dcbe7b29aa263c912078b6
Certificate serial: 0198D4DFCFECB636BF696A40C6423AEB9266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
Manifest number: 0A77
Signing time: Sat 23 Aug 2025 03:01:34 +0000
Manifest this update: Sat 23 Aug 2025 03:01:34 +0000
Manifest next update: Sun 24 Aug 2025 03:01:34 +0000
Files and hashes: 1: NwjgT9e_gbZ13L57KaomPJEgeLY.crl (hash: mEfUCTC2wxLAyWBCBp3+M4pcIIX6r8sC2s6+iqTo1J8=)
2: dQrN5l4ER8ioZrR3Ol61rF1mTIM.roa (hash: i6nZan7ltRkXD1mx1+9g2E7sNbpHefpKiqIOGyeWWGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:cf:ec:b6:36:bf:69:6a:40:c6:42:3a:eb:92:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3708e04fd7bf81b675dcbe7b29aa263c912078b6
Validity
Not Before: Aug 23 03:01:34 2025 GMT
Not After : Aug 24 03:01:34 2025 GMT
Subject: CN=571a11d3e2177891e7932d4f6202c0b41bd39a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:91:7b:0c:1d:f8:6f:45:7e:6b:a5:6a:8d:4f:
2e:30:ac:c4:a9:0d:62:e9:ec:a9:dc:46:5b:dc:fa:
54:60:73:f6:0b:b6:cd:9c:5d:e3:ab:0d:ba:f5:eb:
fc:ed:56:4f:f1:29:7c:26:af:5f:8e:7a:98:29:b5:
ce:96:c9:e7:1a:a0:6c:6f:69:78:3b:5d:8e:4c:24:
8d:b9:a5:6c:a6:f5:06:9b:14:6c:d3:89:fa:c2:fc:
b6:b4:d7:5a:57:f4:c9:08:6d:f7:5b:50:bf:f7:3e:
0d:96:bd:97:37:bd:a6:c4:0d:15:58:ce:37:4e:d7:
56:34:2a:1c:5e:0c:fd:63:1a:e4:fd:66:37:e8:6b:
02:1b:b2:ed:f6:4f:2f:ff:a2:6c:f8:11:0d:85:17:
bb:0c:d3:27:26:49:19:26:4f:be:a7:9c:0b:44:c5:
e1:4a:c5:82:01:31:0b:b3:28:cc:89:9a:1d:02:c3:
85:b7:1e:62:1a:f2:b9:71:c0:91:2d:53:aa:1f:28:
b6:24:80:fe:4d:f9:a3:e0:8f:6a:68:46:95:a8:ce:
57:23:98:69:74:db:53:4b:b2:18:53:6f:58:7e:2a:
0e:ce:d3:45:08:70:b5:56:f4:a1:c5:9a:7c:2c:8c:
c7:8a:29:9e:f9:85:c1:aa:ef:b6:44:23:08:2c:44:
78:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:1A:11:D3:E2:17:78:91:E7:93:2D:4F:62:02:C0:B4:1B:D3:9A:15
X509v3 Authority Key Identifier:
keyid:37:08:E0:4F:D7:BF:81:B6:75:DC:BE:7B:29:AA:26:3C:91:20:78:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:88:33:8c:ff:94:20:61:b6:04:42:1e:db:11:ad:8b:f5:e8:
a0:54:7e:8a:05:ea:76:25:94:8e:69:30:f3:6c:a1:49:0f:a3:
fa:fc:d6:c1:fe:f3:15:7e:dd:37:e5:2b:33:73:81:33:c7:d7:
0f:75:5a:d0:18:4b:4f:49:f6:f8:5a:e8:d8:ae:e3:32:1a:61:
77:a7:6b:d1:c6:24:0b:64:4c:13:df:8c:73:68:64:1f:8e:3e:
16:fb:6f:ce:d2:75:fe:81:8a:90:19:e7:d1:d3:7e:5c:6a:48:
f1:9f:b3:21:af:aa:66:3f:42:a0:b0:9e:89:66:69:b8:2a:e6:
3b:25:aa:de:5a:9b:fa:0e:19:f3:81:78:de:d9:e7:4b:d4:c6:
06:37:4d:39:71:05:a8:ed:eb:52:e9:45:d5:ef:4d:bf:84:09:
ed:9b:67:d4:87:ee:ca:3d:40:61:d6:26:48:f4:6a:f4:83:da:
f8:21:94:d7:f0:30:6f:06:1a:30:ce:51:0a:97:c8:44:77:ff:
98:ba:b4:ab:6c:26:d0:60:ce:ce:05:f1:f9:c4:fa:a4:0c:a1:
1e:f9:31:e8:4c:56:47:31:f5:f9:7a:01:8c:8e:bc:e6:a3:3e:
e4:8d:fd:de:21:72:5d:73:3c:4e:fd:cb:08:f6:9e:ed:dc:e9:
ab:06:3c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:16:37 2025 by rpki-client