
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
File: NwjgT9e_gbZ13L57KaomPJEgeLY.mft (raw, json)
Hash identifier: g4AlLa8G3MPHiDPt21eBeDGZRBoVxByZJPkgAlPlg68=
Subject key identifier: 19:D3:7F:D1:20:F3:64:8F:8A:4B:B1:7B:94:3A:F0:24:12:58:86:72
Authority key identifier: 37:08:E0:4F:D7:BF:81:B6:75:DC:BE:7B:29:AA:26:3C:91:20:78:B6
Certificate issuer: /CN=3708e04fd7bf81b675dcbe7b29aa263c912078b6
Certificate serial: 0199FE4783614CB65DDAD644DDE889F313FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
Manifest number: 0B11
Signing time: Sun 19 Oct 2025 21:02:03 +0000
Manifest this update: Sun 19 Oct 2025 21:02:03 +0000
Manifest next update: Mon 20 Oct 2025 21:02:03 +0000
Files and hashes: 1: NwjgT9e_gbZ13L57KaomPJEgeLY.crl (hash: 9MXPYNX6Pcd09Ya4zEd1PkOZHAf42Lpex8HUCmXirbc=)
2: dQrN5l4ER8ioZrR3Ol61rF1mTIM.roa (hash: i6nZan7ltRkXD1mx1+9g2E7sNbpHefpKiqIOGyeWWGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:83:61:4c:b6:5d:da:d6:44:dd:e8:89:f3:13:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3708e04fd7bf81b675dcbe7b29aa263c912078b6
Validity
Not Before: Oct 19 21:02:03 2025 GMT
Not After : Oct 20 21:02:03 2025 GMT
Subject: CN=19d37fd120f3648f8a4bb17b943af02412588672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7a:9f:cc:13:ca:79:47:6d:62:63:84:41:29:
1f:d4:ae:23:0c:5f:50:f2:55:67:30:3f:c1:35:c9:
23:42:95:bb:b4:1a:90:d0:c4:0d:2f:3e:7e:64:54:
e1:4d:bd:a9:c8:9c:73:65:15:42:e3:34:96:35:90:
d9:75:e5:75:0a:dc:f4:e0:97:4f:46:94:e7:2b:d0:
d3:98:38:38:30:cc:3f:30:77:26:8d:ea:97:75:56:
70:35:6c:f9:c1:75:c5:87:3c:a4:eb:d6:8d:00:ea:
34:8c:f8:3c:cc:cf:e5:e9:d6:4e:8a:e2:9e:a4:f5:
bc:25:3f:19:f8:f4:fd:b7:9b:df:d8:42:13:b5:56:
63:21:c0:7b:fd:5b:f2:8b:e0:a1:1f:8c:6c:83:ff:
ea:5b:4c:27:30:90:6a:c2:1a:a1:c7:6b:a3:19:7f:
8b:a5:c2:fb:0a:b7:73:4f:35:70:16:94:3e:79:9a:
e5:fd:94:df:bc:7f:cb:19:aa:35:3d:e9:03:df:b6:
9f:55:a0:94:38:33:a2:51:d1:58:9e:1b:e8:83:a0:
6f:61:04:a7:e0:f2:c3:80:0f:b8:26:2c:0d:b1:89:
08:d5:cf:2d:30:54:f0:98:7f:71:d2:77:ce:27:03:
b2:48:4d:7d:ff:57:8a:84:8a:f9:12:3f:94:37:bf:
af:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D3:7F:D1:20:F3:64:8F:8A:4B:B1:7B:94:3A:F0:24:12:58:86:72
X509v3 Authority Key Identifier:
keyid:37:08:E0:4F:D7:BF:81:B6:75:DC:BE:7B:29:AA:26:3C:91:20:78:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NwjgT9e_gbZ13L57KaomPJEgeLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c2fcfa-7dc1-4200-899e-bc493d5cbb5c/1/NwjgT9e_gbZ13L57KaomPJEgeLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:6b:8f:5a:47:45:90:97:41:06:9c:25:16:44:da:cb:24:a6:
9f:07:06:3d:2c:4b:56:d0:39:65:eb:f9:73:1f:9c:d4:a5:db:
09:cc:e4:ec:b6:3d:52:b0:2c:9e:9f:81:34:94:df:54:a8:45:
c5:05:74:45:14:69:93:90:cc:69:36:f8:d4:76:2e:32:32:30:
61:9a:aa:b9:6a:09:c7:90:30:cb:4e:75:20:56:82:15:6f:53:
f6:97:c7:b1:eb:c5:e2:90:f1:01:71:6a:08:79:9d:50:c8:59:
ea:88:2a:57:f7:d9:05:a6:ff:cd:a4:06:ea:79:7f:27:9e:f9:
af:58:b5:80:5f:9f:2d:e7:cc:25:33:32:f6:36:3e:84:86:56:
3e:10:29:4e:6c:d4:14:5e:98:84:2c:f6:2f:ca:b3:87:d7:c1:
f3:96:fb:2d:f2:5f:2f:ab:8e:fa:f5:fd:8c:f6:75:99:59:49:
3c:22:27:2a:d0:c0:78:c0:38:31:3b:64:50:e0:aa:85:8c:84:
02:d3:43:18:50:8d:72:d1:59:da:db:29:09:b3:00:05:03:2d:
54:6c:59:d4:71:a5:d5:6f:12:52:dc:64:0c:fe:fc:3c:26:ae:
08:5a:04:8b:d8:81:13:76:2d:b7:f2:b6:20:43:35:2a:1d:88:
d8:25:73:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:43:33 2025 by rpki-client