Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft
File: nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft (raw, json)
Hash identifier: Cmi93Lg2i6iC0p0NZ7v9J5xcGhAfIN3xqfc1g6xQXOY=
Subject key identifier: 17:03:F1:0E:34:76:2E:40:BB:AE:BD:67:D8:47:9C:37:53:3F:EC:D5
Authority key identifier: 9D:66:A5:CF:A3:9C:FA:91:E3:13:44:3F:61:3E:73:CC:E7:3F:21:40
Certificate issuer: /CN=9d66a5cfa39cfa91e313443f613e73cce73f2140
Certificate serial: 0199FB7C73AD0F5A6D993C705972E568EC28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft
Manifest number: 100D
Signing time: Sun 19 Oct 2025 08:01:01 +0000
Manifest this update: Sun 19 Oct 2025 08:01:01 +0000
Manifest next update: Mon 20 Oct 2025 08:01:01 +0000
Files and hashes: 1: S97lFgLq26JbbTYFy87788PSLWo.roa (hash: is6nhjEc4wx03A1n5kSCHVis+Wuf1J/yxv2gFot2aXA=)
2: nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl (hash: g6S8Af6TUZblic1Qf05R8bKggXO+OOYZwfG6fix8kCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:73:ad:0f:5a:6d:99:3c:70:59:72:e5:68:ec:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d66a5cfa39cfa91e313443f613e73cce73f2140
Validity
Not Before: Oct 19 08:01:01 2025 GMT
Not After : Oct 20 08:01:01 2025 GMT
Subject: CN=1703f10e34762e40bbaebd67d8479c37533fecd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a9:b8:48:75:bf:52:46:df:4b:63:9e:b4:8d:
93:73:30:61:8e:8c:d6:0e:1b:ce:71:24:3b:e2:bf:
f4:77:7c:ca:c9:6b:01:c2:32:c9:61:79:8c:20:b7:
69:93:85:b6:6a:7a:cb:1b:5c:28:e1:84:4f:f3:1a:
d0:a6:60:ec:5e:73:1a:f6:8a:a2:96:01:60:16:08:
9a:87:6b:e5:b9:cc:c6:33:9f:ae:a2:03:ef:21:41:
0c:67:fb:ae:4c:4c:32:bb:5e:57:f0:58:2d:7a:85:
cd:5a:c5:e6:c2:74:b0:ea:ba:66:e6:c6:87:6f:18:
c4:f9:9b:3a:52:42:68:97:03:6d:f9:d6:63:4f:81:
98:6a:50:2d:4c:e9:f0:c6:31:0b:ec:87:5c:3c:77:
3d:01:c0:00:68:d0:5e:af:12:2a:1f:66:3e:98:7f:
0f:20:86:41:ab:f0:c4:24:7e:b0:1f:8a:c9:91:e8:
1b:e0:6d:7a:10:16:69:fc:48:c7:30:13:4b:d1:2f:
88:7f:a1:3f:39:50:b0:02:18:1f:bb:9f:25:8f:aa:
cf:78:93:19:a5:91:1e:97:60:8e:8a:66:d2:56:43:
0c:7e:f3:0c:cf:dc:ae:fe:28:f5:35:29:92:65:58:
bb:24:d2:ce:5b:9d:39:d2:35:c4:ea:44:75:19:b9:
0e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:03:F1:0E:34:76:2E:40:BB:AE:BD:67:D8:47:9C:37:53:3F:EC:D5
X509v3 Authority Key Identifier:
keyid:9D:66:A5:CF:A3:9C:FA:91:E3:13:44:3F:61:3E:73:CC:E7:3F:21:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e4:be:67:9d:e4:ab:8d:64:2a:0e:95:d1:8a:c3:21:21:59:
c2:3d:b0:5c:1c:0b:3e:6a:1e:65:57:15:48:41:04:ec:9d:1a:
64:52:80:7e:7b:1e:d9:6b:05:2d:d6:a7:72:f0:0f:c6:8c:e5:
3c:46:86:3d:15:67:a9:d0:e5:e6:b4:ba:15:f4:3a:25:7f:93:
1e:9c:46:23:0a:26:0c:81:f7:06:df:d8:1e:3e:d1:68:d1:38:
a2:5d:3a:f4:cb:35:85:2c:4f:1f:43:eb:c0:cc:91:52:87:49:
be:d0:8b:b0:cd:6e:c6:81:2b:0c:f0:63:a0:8d:37:b0:ec:da:
ae:03:f6:60:79:66:f8:86:4d:71:01:d0:50:49:5b:8c:d3:9a:
11:56:74:52:81:f3:6c:2f:f9:9c:ed:74:32:92:ed:bd:c8:56:
e7:68:b0:df:da:5d:8a:4c:22:0f:3e:91:16:b3:35:4b:5a:b4:
e4:98:52:e1:08:50:92:10:4d:64:4c:64:09:c1:5c:cb:e2:09:
fa:63:a9:93:91:b3:32:ea:f7:fa:95:cb:0b:c4:41:a4:c4:d2:
00:1b:57:1f:24:e1:cf:98:52:fe:88:e1:a5:c7:2c:cd:24:20:
7a:b1:47:04:d1:f5:2f:0e:44:d0:83:85:57:2f:bf:ef:8a:3b:
88:a2:60:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:41 2025 by rpki-client