Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.mft
File: NwLYaw5xBmjqZtp9zRsUDeweDD0.mft (raw, json)
Hash identifier: V4nwDDFDLLugZMnwbah5FtCPPVfKc88t5HCC5Nv0m00=
Subject key identifier: 79:21:BF:F8:74:B3:05:E3:69:1D:F2:B5:DC:C6:9D:86:A5:72:DA:9A
Authority key identifier: 37:02:D8:6B:0E:71:06:68:EA:66:DA:7D:CD:1B:14:0D:EC:1E:0C:3D
Certificate issuer: /CN=3702d86b0e710668ea66da7dcd1b140dec1e0c3d
Certificate serial: 01984A7826A6A40E11557E762D6572C0FD40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NwLYaw5xBmjqZtp9zRsUDeweDD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.mft
Manifest number: 1304
Signing time: Sun 27 Jul 2025 06:00:44 +0000
Manifest this update: Sun 27 Jul 2025 06:00:44 +0000
Manifest next update: Mon 28 Jul 2025 06:00:44 +0000
Files and hashes: 1: 1-S9axjiECoFVFbxoTLP7k8hUrKw.roa (hash: +KpSmdQY0uaMjR1ylAxprXZXg3kf0ZtjvDy8OppLqso=)
2: NwLYaw5xBmjqZtp9zRsUDeweDD0.crl (hash: 4Jw63oDBc0FXt1A/g2EBpIxgIaSRzigwJspw/07TGYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NwLYaw5xBmjqZtp9zRsUDeweDD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:26:a6:a4:0e:11:55:7e:76:2d:65:72:c0:fd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3702d86b0e710668ea66da7dcd1b140dec1e0c3d
Validity
Not Before: Jul 27 06:00:44 2025 GMT
Not After : Jul 28 06:00:44 2025 GMT
Subject: CN=7921bff874b305e3691df2b5dcc69d86a572da9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:14:eb:52:8e:e9:cd:ae:f2:3d:d5:d6:60:09:
99:a2:de:36:5d:a1:c2:17:fb:f3:e4:f0:1f:2f:6d:
57:4d:7e:f9:ed:82:6a:9a:9e:77:7e:85:d4:57:cb:
d5:71:49:cf:a6:ce:ed:f7:27:44:ac:5d:99:c4:c3:
4a:c5:ad:90:09:c9:96:cf:7e:49:a8:a0:4e:52:9d:
f4:76:f8:18:14:e8:4c:b9:39:0f:59:62:41:f4:08:
95:24:26:eb:b9:8d:24:f1:59:94:ab:60:f8:0b:7d:
17:01:7f:b9:88:17:d0:ff:25:0b:4d:0c:5e:34:58:
ea:97:df:0a:2c:f5:e4:e1:b7:e2:5f:af:8f:0c:9b:
be:41:29:52:ba:24:62:13:fd:0d:89:4e:e7:22:9d:
ac:1c:74:b5:02:51:07:2c:c4:cf:8d:1c:fd:a5:6b:
f0:51:a8:fb:50:a6:f8:14:6c:73:00:2a:4c:f8:ed:
70:63:c9:ba:57:4a:4d:1f:8a:52:a1:a1:4b:8b:36:
7c:b3:96:e0:f1:ba:32:16:13:eb:b9:51:f9:da:06:
19:b6:52:20:59:a0:53:bb:32:72:61:7c:db:f4:37:
2c:69:36:bb:63:2d:38:24:7c:f4:c2:61:ec:ac:49:
eb:7c:a2:c9:a8:3f:a9:60:6e:07:7f:6e:d4:eb:1d:
b4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:21:BF:F8:74:B3:05:E3:69:1D:F2:B5:DC:C6:9D:86:A5:72:DA:9A
X509v3 Authority Key Identifier:
keyid:37:02:D8:6B:0E:71:06:68:EA:66:DA:7D:CD:1B:14:0D:EC:1E:0C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NwLYaw5xBmjqZtp9zRsUDeweDD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a4:2d:b7:fd:9e:ba:d8:af:ee:26:f3:5f:02:83:69:73:58:
4f:d9:06:7c:ee:ab:11:20:c3:59:da:e7:88:85:aa:e7:c2:e6:
13:c4:1b:dd:7e:4c:64:13:cb:55:c9:e6:d2:02:8f:94:75:65:
25:0c:71:ec:7f:d8:a2:07:5b:da:5b:0e:33:4f:f3:6a:69:80:
92:01:c8:7e:6c:fe:e4:c1:7e:76:52:60:0c:2e:fd:60:8d:a6:
3d:e6:7b:d2:be:a2:4c:5c:e3:59:e7:53:48:91:60:01:d0:84:
80:56:50:99:5a:35:6a:52:b2:ad:f6:0d:4c:e7:2c:5a:4a:fb:
d8:ed:40:18:9e:9b:49:7d:21:62:47:d2:64:1f:54:fe:bd:f3:
f1:00:17:68:88:53:ce:d6:17:30:ee:73:ee:3c:bd:81:4f:a2:
92:4b:3a:44:37:25:c3:c6:36:af:95:04:a3:03:ce:68:c5:ff:
af:42:29:33:55:fb:a3:7e:12:de:b2:df:7f:dc:20:a5:04:0a:
2e:9b:3f:eb:d4:3a:a2:ad:62:76:af:48:cb:34:b6:8d:41:fb:
ec:93:e4:81:17:a1:f7:bb:0f:40:34:fd:2b:84:76:b0:80:df:
e0:fd:63:fc:8e:5c:55:92:ea:d2:7e:1b:bf:c0:ff:9d:16:2a:
33:c9:a1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:23:29 2025 by rpki-client