Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft
File: ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft (raw, json)
Hash identifier: Mcr4F7bCrXic5k9H3buFtL5F1+dbteLrxvlRCsDjk2w=
Subject key identifier: 81:FA:DF:FB:42:D1:25:DF:F8:08:88:17:DE:02:77:F5:98:7B:94:19
Authority key identifier: 9E:DC:3F:F1:66:15:5E:69:88:BE:80:95:FC:B4:20:00:1D:8B:E2:1D
Certificate issuer: /CN=9edc3ff166155e6988be8095fcb420001d8be21d
Certificate serial: 0197B7B38698CDD6C3D9FD1C2CC28823550B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntw_8WYVXmmIvoCV_LQgAB2L4h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 18:01:25 +0000
Manifest this update: Sat 28 Jun 2025 18:01:25 +0000
Manifest next update: Sun 29 Jun 2025 18:01:25 +0000
Files and hashes: 1: 9f1wfLMKGBE8v9MkOS4m3itL3mw.roa (hash: bPIUPhKEdbriAsko7Y4dw04AFw67jLRfl2Ngnf52fJ8=)
2: ntw_8WYVXmmIvoCV_LQgAB2L4h0.crl (hash: CIGrXdvTNb20XpxkhuEzldMCJKegrLIUefE9TjpNL3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntw_8WYVXmmIvoCV_LQgAB2L4h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:86:98:cd:d6:c3:d9:fd:1c:2c:c2:88:23:55:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9edc3ff166155e6988be8095fcb420001d8be21d
Validity
Not Before: Jun 28 18:01:25 2025 GMT
Not After : Jun 29 18:01:25 2025 GMT
Subject: CN=81fadffb42d125dff8088817de0277f5987b9419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:53:01:4b:ce:f4:1a:25:89:4f:54:5f:cc:d8:
51:19:82:a1:fd:46:88:c8:87:6a:00:3a:fb:56:3b:
b1:55:25:01:c7:ba:ab:3a:35:89:93:9e:81:5b:35:
fe:83:88:d3:54:b3:cc:bf:c7:e3:06:1e:7d:4f:64:
dc:16:d7:9d:96:9e:36:e6:3e:e8:57:05:8b:6f:57:
36:3e:ec:7a:7c:f8:1d:84:22:fd:9d:1d:ef:08:8f:
12:64:0e:ab:ba:01:b5:3e:44:74:06:ff:55:0e:e0:
8a:3b:b1:75:e5:58:63:23:4e:e1:dc:69:84:5c:fb:
9d:5b:eb:91:24:9b:50:d6:6e:4b:e5:3d:81:03:4e:
ce:64:45:6c:67:ad:1c:54:5b:87:b1:bb:74:0b:f1:
02:6f:16:bf:fc:95:81:f2:d0:d4:3d:69:36:67:13:
42:a8:b0:8c:84:d6:6c:dd:84:7c:e4:20:ef:30:26:
7b:72:e4:9a:77:4e:f1:bc:97:1c:bf:3f:9c:7e:6c:
cb:60:b6:a3:89:71:5c:b5:06:35:1b:ea:12:4d:ef:
ea:75:5b:49:1b:1e:97:f4:99:42:a7:dd:00:98:bc:
10:eb:03:46:1a:ac:13:45:ea:25:1f:57:24:92:ff:
73:e8:2f:9d:73:e7:fe:bb:2e:d6:07:09:5c:51:54:
e8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:FA:DF:FB:42:D1:25:DF:F8:08:88:17:DE:02:77:F5:98:7B:94:19
X509v3 Authority Key Identifier:
keyid:9E:DC:3F:F1:66:15:5E:69:88:BE:80:95:FC:B4:20:00:1D:8B:E2:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntw_8WYVXmmIvoCV_LQgAB2L4h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:98:81:85:ca:01:18:ba:ff:28:63:31:65:b2:7d:15:f8:47:
fb:c0:0e:81:3b:f3:2a:ef:35:f1:bf:a9:bf:09:71:71:a7:c8:
2b:61:ea:33:29:ed:73:07:50:c6:42:a8:86:cc:32:e9:e3:b1:
4e:db:ca:26:34:f5:92:fe:ab:cc:45:c0:df:c7:aa:dc:49:a5:
e8:ab:77:b9:8a:00:ab:a2:86:5d:38:62:13:6e:7f:ee:03:ef:
65:00:24:9b:3e:57:93:40:6e:aa:a0:1d:55:d4:0f:f2:25:04:
14:d5:62:ae:b5:f9:14:bf:dc:a0:05:6b:52:79:d0:8c:cc:f9:
06:96:29:73:99:2f:1c:a3:6e:4b:70:39:dd:d9:1d:eb:67:7e:
cf:a9:44:56:f2:40:ba:81:24:7e:d2:c8:a2:73:7f:ca:cb:fa:
45:8a:3c:b2:f7:e3:09:34:0d:bc:2e:7d:f6:7b:a0:5b:4e:c3:
3b:7a:95:a7:db:ca:54:58:4c:94:33:9e:69:86:0c:32:63:1a:
f7:82:ef:ff:4a:c0:f5:ac:02:b1:c5:c5:0b:76:5f:76:db:1b:
ef:3b:a2:64:23:86:3e:61:58:b1:fc:f7:1f:b5:28:8d:a8:dc:
2e:e0:af:52:c1:48:82:18:bc:01:e8:14:92:88:a2:0f:17:3c:
b7:a5:56:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3s4aYzdbD2f0cLMKII1ULMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZGMzZmYxNjYxNTVlNjk4OGJlODA5NWZjYjQyMDAwMWQ4
YmUyMWQwHhcNMjUwNjI4MTgwMTI1WhcNMjUwNjI5MTgwMTI1WjAzMTEwLwYDVQQD
Eyg4MWZhZGZmYjQyZDEyNWRmZjgwODg4MTdkZTAyNzdmNTk4N2I5NDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1MBS870GiWJT1RfzNhRGYKh/UaI
yIdqADr7VjuxVSUBx7qrOjWJk56BWzX+g4jTVLPMv8fjBh59T2TcFtedlp425j7o
VwWLb1c2Pux6fPgdhCL9nR3vCI8SZA6rugG1PkR0Bv9VDuCKO7F15VhjI07h3GmE
XPudW+uRJJtQ1m5L5T2BA07OZEVsZ60cVFuHsbt0C/ECbxa//JWB8tDUPWk2ZxNC
qLCMhNZs3YR85CDvMCZ7cuSad07xvJccvz+cfmzLYLajiXFctQY1G+oSTe/qdVtJ
Gx6X9JlCp90AmLwQ6wNGGqwTReolH1ckkv9z6C+dc+f+uy7WBwlcUVToHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIH63/tC0SXf+AiIF94Cd/WYe5QZMB8GA1UdIwQY
MBaAFJ7cP/FmFV5piL6Alfy0IAAdi+IdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnR3XzhXWVZYbW1Jdm9DVl9MUWdBQjJMNGgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy80ZmZjYjAtYmM1Ny00NjAyLWFkM2Qt
NTI0ZDE0NDMwMWZmLzEvbnR3XzhXWVZYbW1Jdm9DVl9MUWdBQjJMNGgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy80ZmZjYjAtYmM1Ny00NjAyLWFkM2QtNTI0ZDE0NDMwMWZm
LzEvbnR3XzhXWVZYbW1Jdm9DVl9MUWdBQjJMNGgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANZiBhcoB
GLr/KGMxZbJ9FfhH+8AOgTvzKu818b+pvwlxcafIK2HqMyntcwdQxkKohswy6eOx
TtvKJjT1kv6rzEXA38eq3Eml6Kt3uYoAq6KGXThiE25/7gPvZQAkmz5Xk0BuqqAd
VdQP8iUEFNVirrX5FL/coAVrUnnQjMz5BpYpc5kvHKNuS3A53dkd62d+z6lEVvJA
uoEkftLIonN/ysv6RYo8svfjCTQNvC599nugW07DO3qVp9vKVFhMlDOeaYYMMmMa
94Lv/0rA9awCscXFC3Zfdtsb7zuiZCOGPmFYsfz3H7UojajcLuCvUsFIghi8AegU
koiiDxc8t6VWRg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:21 2025 by rpki-client