Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
File: nS2GwCi_w46HVFXPgmiaNiZTAsI.mft (raw, json)
Hash identifier: Hq7i+sG2KCWzEZHuRtfw5qTO9YHGPyOU6nCjjO9W8uk=
Subject key identifier: BD:31:E1:32:B3:AF:E6:BE:10:DF:B9:BA:C2:EE:AB:95:12:E4:76:C8
Authority key identifier: 9D:2D:86:C0:28:BF:C3:8E:87:54:55:CF:82:68:9A:36:26:53:02:C2
Certificate issuer: /CN=9d2d86c028bfc38e875455cf82689a36265302c2
Certificate serial: 0199FBEBC095B380357C42AE1E3B1EF80139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:02:35 +0000
Manifest this update: Sun 19 Oct 2025 10:02:35 +0000
Manifest next update: Mon 20 Oct 2025 10:02:35 +0000
Files and hashes: 1: BCfHRxvaBlgRu7FF6R1aFrqf-D4.roa (hash: jY82l74QOduMSK8Hp/MMojju94Gfvr7fCtUmoiSODw8=)
2: nS2GwCi_w46HVFXPgmiaNiZTAsI.crl (hash: 3vklTK7XgyS5vQupRKtBcgVoOll0pMwqyWYnlTlhGZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:c0:95:b3:80:35:7c:42:ae:1e:3b:1e:f8:01:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2d86c028bfc38e875455cf82689a36265302c2
Validity
Not Before: Oct 19 10:02:35 2025 GMT
Not After : Oct 20 10:02:35 2025 GMT
Subject: CN=bd31e132b3afe6be10dfb9bac2eeab9512e476c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ed:8a:e3:a0:ee:9c:0a:37:db:d2:41:77:61:
a4:1f:d7:5b:cc:e8:48:d3:6c:a9:17:34:32:01:53:
59:c4:82:ed:f9:76:53:fb:60:0a:6c:0b:6c:b9:ec:
e2:be:bd:fc:bf:29:20:0c:57:e5:39:bf:ce:ad:75:
c6:19:86:5d:ba:69:40:0f:a6:0a:e5:c3:e3:b6:d8:
93:ce:2e:a3:56:69:8b:4c:31:1d:cd:74:41:53:d0:
b5:10:d3:95:4e:2b:a5:5f:92:3a:db:3f:12:11:4f:
b2:aa:a5:ac:9c:a1:dc:54:0e:d6:ed:21:5e:57:03:
7e:62:bd:32:01:6d:90:0e:75:3f:28:fd:7c:25:f2:
84:eb:26:0f:88:26:0e:f9:4f:d7:ad:fa:22:9c:96:
b6:cb:56:b5:96:d2:67:55:49:67:e7:f0:af:6f:30:
41:7d:64:58:35:38:dc:fe:73:18:a5:ef:b8:1f:75:
4b:b2:b3:4f:bc:46:9a:e8:4b:94:5f:b3:c9:d0:3a:
84:e8:cf:b1:57:c4:e1:93:c3:c0:cf:c8:2c:c3:e3:
32:be:1a:a3:ca:93:4f:bf:e8:3f:09:8d:00:8d:cf:
70:c2:36:06:9a:29:97:6a:12:20:d1:d3:e6:6b:8c:
00:4e:8e:2a:a0:0d:42:55:82:16:b1:eb:c1:64:9e:
f3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:31:E1:32:B3:AF:E6:BE:10:DF:B9:BA:C2:EE:AB:95:12:E4:76:C8
X509v3 Authority Key Identifier:
keyid:9D:2D:86:C0:28:BF:C3:8E:87:54:55:CF:82:68:9A:36:26:53:02:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nS2GwCi_w46HVFXPgmiaNiZTAsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c078fd-d2b6-46ba-a6ba-44c3b75d3f33/1/nS2GwCi_w46HVFXPgmiaNiZTAsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:37:06:e5:54:a9:62:ea:fd:64:75:f0:7b:c1:c5:4d:5e:32:
77:a2:e4:47:ae:5c:f9:11:c8:c9:ba:6a:9a:61:cf:b6:39:cc:
ee:65:d9:62:a4:15:f8:37:0a:39:82:da:a3:2e:8e:a3:26:0e:
17:55:25:f2:67:6b:b5:b3:7b:d4:17:d4:03:18:a5:19:b4:c1:
b5:2f:2c:95:40:20:67:b3:04:72:7d:7e:a8:dc:31:d8:9b:e1:
68:b2:f9:67:12:f4:cd:ac:c4:ba:47:de:cf:3d:4b:4b:5f:50:
b7:05:46:73:30:f0:82:7d:83:b8:9a:b0:e0:d8:f0:73:cb:98:
48:7a:d0:4c:97:58:e1:b6:69:1e:52:d9:44:e9:ac:1e:6f:00:
7a:a3:2a:48:2c:8d:b0:3d:16:5a:31:56:70:f3:19:84:ba:de:
02:f2:6a:4f:3c:a0:34:0c:1b:80:6c:69:ab:c3:8d:a8:46:89:
e9:df:97:67:fe:10:a6:2b:ac:ec:92:db:47:d7:77:4d:87:5f:
ec:ea:7f:cd:9f:f5:02:ac:a6:a9:57:1b:07:0f:45:b6:a4:8e:
e0:b0:05:f4:d2:f9:0f:04:3a:45:a4:62:1b:f3:dd:25:f4:6b:
a3:fb:a0:a6:a9:ae:ab:68:14:8e:7e:51:02:53:3a:77:cb:61:
c5:3e:63:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:19 2025 by rpki-client