Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft
File: ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft (raw, json)
Hash identifier: ijIFwmmSOjs2uSFfwuTvV2VryIKfkMKsXcMwoLRa0gU=
Subject key identifier: 57:F8:10:F3:93:51:14:DF:18:91:CA:51:4F:B4:9B:FD:51:58:5F:1C
Authority key identifier: 9E:DC:3F:F1:66:15:5E:69:88:BE:80:95:FC:B4:20:00:1D:8B:E2:1D
Certificate issuer: /CN=9edc3ff166155e6988be8095fcb420001d8be21d
Certificate serial: 0198D58383C5C3D176099E53F4CE49B77CB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntw_8WYVXmmIvoCV_LQgAB2L4h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 06:00:22 +0000
Manifest this update: Sat 23 Aug 2025 06:00:22 +0000
Manifest next update: Sun 24 Aug 2025 06:00:22 +0000
Files and hashes: 1: 9f1wfLMKGBE8v9MkOS4m3itL3mw.roa (hash: bPIUPhKEdbriAsko7Y4dw04AFw67jLRfl2Ngnf52fJ8=)
2: ntw_8WYVXmmIvoCV_LQgAB2L4h0.crl (hash: ZBxkPOdk05HLUJLzb3YL5p+MzPxq1UiMf64Xrvgo05s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntw_8WYVXmmIvoCV_LQgAB2L4h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:83:c5:c3:d1:76:09:9e:53:f4:ce:49:b7:7c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9edc3ff166155e6988be8095fcb420001d8be21d
Validity
Not Before: Aug 23 06:00:22 2025 GMT
Not After : Aug 24 06:00:22 2025 GMT
Subject: CN=57f810f3935114df1891ca514fb49bfd51585f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:39:c4:e1:17:ef:bd:bf:75:c2:b7:e7:b6:4c:
d8:ec:64:b6:4c:8d:8c:64:0e:8a:e4:cc:a5:b3:5f:
af:a3:10:a8:17:ef:d2:61:17:66:9b:bb:cf:d8:41:
b7:78:4e:07:e9:e6:e6:f6:8c:f6:50:d5:04:43:14:
1f:9c:ee:03:2e:b5:bd:a7:73:41:88:22:94:eb:5f:
d2:41:3c:f7:12:3d:71:18:d9:a0:cc:a5:c3:63:9f:
be:88:9a:d0:87:64:40:5d:f3:bb:1c:09:03:ea:bd:
89:9f:6f:3f:de:fc:b3:ce:12:aa:2a:d7:9e:47:cb:
31:f4:ff:91:c4:49:10:ae:36:b4:3f:af:69:00:27:
20:9b:a4:f8:d9:89:43:a7:dd:9d:a0:72:d7:95:52:
0f:56:72:1d:8e:a0:3f:b0:38:42:f4:2f:92:3c:0b:
a2:0d:39:82:88:7d:b4:28:39:08:ab:59:73:dd:74:
62:94:b8:8f:5e:13:fd:c1:70:9b:9b:86:a9:61:0e:
b7:b5:df:a3:ab:5e:d7:20:7b:9b:c5:e7:e9:cc:52:
06:ef:b5:4a:4d:f3:e3:cf:f9:df:c7:95:07:76:a1:
b5:9f:ea:aa:dc:25:89:2a:48:da:d0:16:3d:3c:95:
b2:20:b4:c7:75:5a:62:1a:a7:8c:a2:88:c0:4a:83:
3d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F8:10:F3:93:51:14:DF:18:91:CA:51:4F:B4:9B:FD:51:58:5F:1C
X509v3 Authority Key Identifier:
keyid:9E:DC:3F:F1:66:15:5E:69:88:BE:80:95:FC:B4:20:00:1D:8B:E2:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntw_8WYVXmmIvoCV_LQgAB2L4h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:54:7f:09:29:4d:69:31:8b:87:2a:33:71:86:34:c3:07:d5:
7f:d2:b9:92:3e:e1:e8:70:f2:b0:61:08:1c:d2:a9:aa:7f:89:
cc:6b:e4:7b:e2:01:6f:13:63:8a:7f:c3:19:a3:28:53:26:a9:
d6:7f:a9:1a:ea:93:e8:41:c9:74:1f:00:5e:c0:59:76:74:ce:
84:5a:51:02:0c:93:fc:e9:99:f4:9e:4c:62:8c:a1:5d:24:0d:
5c:34:06:b5:03:3e:b4:a7:79:cd:ea:1e:9c:d9:ff:93:dc:e6:
29:29:26:83:7a:55:3b:e3:a3:cc:92:7c:b2:ea:6a:a0:55:d3:
ff:f8:fa:cd:f2:cc:17:46:83:76:a0:7e:42:96:40:48:8a:ce:
9a:1c:3f:b1:b8:7b:4e:e3:3c:19:fc:c4:eb:2b:f1:8f:98:66:
13:5f:60:4b:9e:64:a4:ca:1f:f6:22:b9:be:1d:2e:e3:a5:3f:
52:fc:3a:d0:aa:32:2f:72:d2:03:0b:9f:02:26:7f:b9:48:e4:
d2:d1:91:32:a7:22:0a:bd:36:c9:c9:14:dd:a4:ec:23:c8:dd:
47:bb:41:19:3b:96:ca:a7:cb:c5:0a:9a:0a:b2:a5:e2:8d:26:
24:ac:84:48:ec:28:e6:6a:26:eb:f5:9a:5d:08:dc:2d:c7:99:
c5:a4:9d:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg4PFw9F2CZ5T9M5Jt3ywMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZGMzZmYxNjYxNTVlNjk4OGJlODA5NWZjYjQyMDAwMWQ4
YmUyMWQwHhcNMjUwODIzMDYwMDIyWhcNMjUwODI0MDYwMDIyWjAzMTEwLwYDVQQD
Eyg1N2Y4MTBmMzkzNTExNGRmMTg5MWNhNTE0ZmI0OWJmZDUxNTg1ZjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6znE4Rfvvb91wrfntkzY7GS2TI2M
ZA6K5Myls1+voxCoF+/SYRdmm7vP2EG3eE4H6ebm9oz2UNUEQxQfnO4DLrW9p3NB
iCKU61/SQTz3Ej1xGNmgzKXDY5++iJrQh2RAXfO7HAkD6r2Jn28/3vyzzhKqKtee
R8sx9P+RxEkQrja0P69pACcgm6T42YlDp92doHLXlVIPVnIdjqA/sDhC9C+SPAui
DTmCiH20KDkIq1lz3XRilLiPXhP9wXCbm4apYQ63td+jq17XIHubxefpzFIG77VK
TfPjz/nfx5UHdqG1n+qq3CWJKkja0BY9PJWyILTHdVpiGqeMoojASoM9NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFf4EPOTURTfGJHKUU+0m/1RWF8cMB8GA1UdIwQY
MBaAFJ7cP/FmFV5piL6Alfy0IAAdi+IdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnR3XzhXWVZYbW1Jdm9DVl9MUWdBQjJMNGgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy80ZmZjYjAtYmM1Ny00NjAyLWFkM2Qt
NTI0ZDE0NDMwMWZmLzEvbnR3XzhXWVZYbW1Jdm9DVl9MUWdBQjJMNGgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy80ZmZjYjAtYmM1Ny00NjAyLWFkM2QtNTI0ZDE0NDMwMWZm
LzEvbnR3XzhXWVZYbW1Jdm9DVl9MUWdBQjJMNGgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAClR/CSlN
aTGLhyozcYY0wwfVf9K5kj7h6HDysGEIHNKpqn+JzGvke+IBbxNjin/DGaMoUyap
1n+pGuqT6EHJdB8AXsBZdnTOhFpRAgyT/OmZ9J5MYoyhXSQNXDQGtQM+tKd5zeoe
nNn/k9zmKSkmg3pVO+OjzJJ8supqoFXT//j6zfLMF0aDdqB+QpZASIrOmhw/sbh7
TuM8GfzE6yvxj5hmE19gS55kpMof9iK5vh0u46U/Uvw60KoyL3LSAwufAiZ/uUjk
0tGRMqciCr02yckU3aTsI8jdR7tBGTuWyqfLxQqaCrKl4o0mJKyESOwo5mom6/Wa
XQjcLceZxaSdKQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:36 2025 by rpki-client