Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
File: nwSzzyTPS4GyIhFGoA8id7w0h4A.mft (raw, json)
Hash identifier: 8etNc8Ko/+Xrd1ekDNCj1/v+88jng8AXhBmZW/gHcX0=
Subject key identifier: 7D:7F:D7:F4:6F:8E:51:93:86:87:1B:FA:B8:10:8E:77:AB:9C:E0:3E
Authority key identifier: 9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
Certificate issuer: /CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Certificate serial: 0199FFC81B986FB855683194BDEA3DAC8878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
Manifest number: 1186
Signing time: Mon 20 Oct 2025 04:02:08 +0000
Manifest this update: Mon 20 Oct 2025 04:02:08 +0000
Manifest next update: Tue 21 Oct 2025 04:02:08 +0000
Files and hashes: 1: JkR72JNkfOOkf4Hdto9Hn61nIOM.roa (hash: GdSC1LJhK3esreP7fCY/nmDtbQZgfXPG6XPWXjCKZig=)
2: Q8bZioVPDoZ4xd-x42q6Z5HkkPQ.roa (hash: uBME2SsaTDhptgYkDGLlHO5wga4qvwY0K6f/+pZrE38=)
3: nwSzzyTPS4GyIhFGoA8id7w0h4A.crl (hash: S1HPwCOqcTO2w7DCVzNYdKWcrhY6znNkSz2lU+1XaHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:1b:98:6f:b8:55:68:31:94:bd:ea:3d:ac:88:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f04b3cf24cf4b81b2221146a00f2277bc348780
Validity
Not Before: Oct 20 04:02:08 2025 GMT
Not After : Oct 21 04:02:08 2025 GMT
Subject: CN=7d7fd7f46f8e519386871bfab8108e77ab9ce03e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ac:ca:63:d9:99:b4:e7:f3:1d:65:85:b8:b0:
ec:af:da:82:8e:a9:e1:ac:f0:a2:33:22:6e:7c:c0:
25:25:a4:b1:3f:af:80:6f:6a:a2:84:ba:ed:e3:31:
b4:35:3e:2b:08:c9:0e:cc:b5:4d:2a:79:8f:64:ce:
88:2c:cd:84:d4:ff:09:6c:2d:e6:69:85:28:04:6b:
d4:44:48:be:3f:db:54:b0:d7:b3:3b:31:b0:54:d3:
d7:67:5a:87:d5:cb:23:f9:dc:81:24:15:17:64:97:
12:99:be:37:5e:50:f9:a4:38:80:e9:ba:6b:f0:60:
58:2f:ba:2c:14:a3:ec:14:05:b5:81:8f:7c:95:ad:
a4:39:2b:8a:e2:8f:7a:f2:51:be:84:19:d1:1b:2e:
a7:13:b7:d8:3d:88:89:46:01:a6:99:85:27:94:df:
67:b8:d7:3d:f8:6f:70:92:c9:94:0b:b1:f0:d8:57:
a3:44:92:34:46:2f:d7:2d:ef:8b:b9:fc:f2:ea:e8:
5a:99:f2:08:f7:e6:da:c1:66:31:31:75:3a:09:b5:
63:0b:15:99:89:39:7b:08:97:d5:96:9e:6e:91:6c:
2c:b1:03:80:77:25:c5:80:05:6f:46:d3:09:ed:30:
32:22:b7:1b:3a:9c:6d:f6:d4:2e:95:bf:8b:26:f0:
17:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7F:D7:F4:6F:8E:51:93:86:87:1B:FA:B8:10:8E:77:AB:9C:E0:3E
X509v3 Authority Key Identifier:
keyid:9F:04:B3:CF:24:CF:4B:81:B2:22:11:46:A0:0F:22:77:BC:34:87:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwSzzyTPS4GyIhFGoA8id7w0h4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/da358c-2e47-44ec-b0c5-2ad968b362de/1/nwSzzyTPS4GyIhFGoA8id7w0h4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:0f:e7:3f:f8:28:31:63:3f:3b:49:bd:bd:95:cb:29:a3:01:
ae:cd:00:6b:2e:87:9d:70:97:bd:73:4b:6d:04:42:a0:a2:9d:
23:c8:6f:b5:25:2d:1e:1d:68:5a:c6:fc:fc:fc:c9:03:b6:bb:
c6:da:5b:79:8b:0e:0c:dc:84:3f:7d:62:f0:b0:3e:7d:88:5f:
10:32:ba:7a:dc:d0:4b:d8:56:0b:cc:c8:92:ac:7b:57:b3:88:
a2:74:1a:dc:48:da:61:99:b3:5c:f8:ad:e6:92:7e:35:e2:4f:
c8:c9:d9:98:0e:fe:7c:04:f5:d2:ff:77:f5:73:13:5f:1b:4d:
dd:34:6e:4d:9f:56:93:19:f6:ff:ed:e4:ae:75:5c:4e:4f:5a:
da:af:b1:d6:03:4b:30:35:a4:22:90:c1:66:f4:b9:7f:11:85:
8e:3f:11:2a:3c:7a:eb:5e:98:e4:8e:da:df:a8:87:2f:12:dc:
dd:e6:81:b2:0c:72:9e:90:e8:af:00:fa:42:32:db:7c:97:e0:
11:6f:11:5e:c5:de:1d:a1:82:34:f7:af:1d:2e:95:81:56:82:
a9:4b:6b:31:d8:e5:aa:d2:97:d8:26:73:1b:e6:09:60:5f:ab:
b8:80:28:83:d3:b5:ae:a0:0e:79:ad:15:68:4d:24:5a:81:0f:
16:1c:6f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:23:54 2025 by rpki-client