Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
File: nwSzzyTPS4GyIhFGoA8id7w0h4A.mft (raw, json)
Hash identifier: ZS9TQqL58xPU0PEalDu8dOrnbDXh71XkBFFYOTwFPeA=
Subject key identifier: 27:54:6E:79:48:F4:35:9F:77:45:A9:62:71:45:2A:45:EC:A7:6E:5F
Authority key identifier: 9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
Certificate issuer: /CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Certificate serial: 019A01B680663BD34E4AE26F66E50D55BC91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
Manifest number: 1187
Signing time: Mon 20 Oct 2025 13:02:08 +0000
Manifest this update: Mon 20 Oct 2025 13:02:08 +0000
Manifest next update: Tue 21 Oct 2025 13:02:08 +0000
Files and hashes: 1: JkR72JNkfOOkf4Hdto9Hn61nIOM.roa (hash: GdSC1LJhK3esreP7fCY/nmDtbQZgfXPG6XPWXjCKZig=)
2: Q8bZioVPDoZ4xd-x42q6Z5HkkPQ.roa (hash: uBME2SsaTDhptgYkDGLlHO5wga4qvwY0K6f/+pZrE38=)
3: nwSzzyTPS4GyIhFGoA8id7w0h4A.crl (hash: voxUDo53uDD23jmqhxXLNmbC7uf1eo1LzMZAsWTtWT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b6:80:66:3b:d3:4e:4a:e2:6f:66:e5:0d:55:bc:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Validity
Not Before: Oct 20 13:02:08 2025 GMT
Not After : Oct 21 13:02:08 2025 GMT
Subject: CN=27546e7948f4359f7745a96271452a45eca76e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9d:26:d9:98:85:2b:42:a4:91:9d:ab:4a:47:
b9:e8:e0:72:27:c0:3a:d4:59:38:b3:d5:af:49:d3:
19:d1:35:97:70:37:ea:ca:de:fa:2e:97:9d:ed:22:
bf:1c:bd:3f:e5:ff:a6:04:1e:c8:19:26:06:9b:da:
1e:08:4a:c4:fc:c7:d1:46:b6:86:b5:59:ad:3b:57:
7d:c8:7b:16:b3:2e:a8:4c:1d:b6:2c:36:a3:77:9f:
de:01:24:1c:50:69:18:47:9f:e8:26:ed:f3:8d:9e:
a1:53:a1:5f:5d:4a:4b:fe:f8:13:a1:d2:3a:2f:e7:
b7:4d:5a:51:96:e2:d5:36:f7:67:2e:5e:86:f7:0d:
f6:17:a4:c4:e7:68:44:af:9a:19:0e:1c:27:19:98:
8e:f2:41:05:32:15:82:fe:72:49:3a:41:19:e7:57:
bd:c8:02:4e:7b:65:8c:28:04:56:bf:d7:48:1c:89:
cf:11:36:e6:ac:ce:2e:8e:a9:5d:95:3c:12:61:07:
45:14:e0:2f:59:f4:6a:88:c8:3e:4f:ec:fc:29:50:
e9:34:3b:ef:c8:d1:0f:8d:f9:7e:34:4c:a7:01:f9:
19:c2:7e:0b:28:cc:88:21:1f:35:a1:f1:32:68:8f:
c0:57:f4:16:ae:d0:b3:9b:8e:9d:5f:21:c7:92:61:
27:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:54:6E:79:48:F4:35:9F:77:45:A9:62:71:45:2A:45:EC:A7:6E:5F
X509v3 Authority Key Identifier:
keyid:9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:cd:7a:6d:77:a3:cd:b4:34:ef:d7:51:79:93:8a:fb:eb:51:
b1:79:21:ac:2a:2e:a4:57:7b:47:c8:37:0e:0c:25:5f:45:58:
bd:ac:88:57:a3:fa:b5:7b:2e:bf:8f:7a:26:4d:5a:b4:5c:31:
9c:fb:81:82:f0:2a:c2:fd:60:13:61:e0:53:22:04:83:d6:1a:
ea:00:46:4a:88:38:a9:9b:2a:c6:56:14:04:e1:29:78:42:19:
6f:38:b9:8e:0d:b2:bf:7d:8a:e9:d4:34:59:86:27:85:0a:2b:
0c:97:37:68:31:9f:70:0f:2f:6c:b4:01:2b:ca:12:0e:b0:03:
93:7b:69:4e:ab:72:09:2c:07:df:b6:c2:af:b8:6c:18:f1:c7:
cc:bc:f7:68:2e:a2:1b:f3:a3:a7:cc:b7:35:9c:48:03:0f:05:
ad:b3:06:28:90:a0:6d:1d:e0:78:93:f2:d0:7a:2c:13:13:d4:
31:08:32:4a:56:fd:ce:96:01:5a:f7:9d:83:72:6a:f5:91:d6:
43:b7:21:ef:e8:25:78:56:be:e0:e1:02:7a:4e:d6:ac:48:7b:
6a:5e:9e:42:67:49:64:6e:1f:5e:ff:ee:70:4a:2d:9f:72:e0:
81:fb:0a:24:ce:28:dc:e0:c2:c4:f1:86:94:fa:42:e1:b9:ef:
dc:fa:ac:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:59:08 2025 by rpki-client