Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.mft
File: NehMBjohgLI_X20xYqdbMJL1wY0.mft (raw, json)
Hash identifier: vrpLHeEEC0z5FBqFJgihwuoks2yAOs47wpKts9T9PfA=
Subject key identifier: 80:D5:4A:D0:7A:E5:CF:5C:21:9A:D5:34:80:59:39:E5:57:40:7D:5A
Authority key identifier: 35:E8:4C:06:3A:21:80:B2:3F:5F:6D:31:62:A7:5B:30:92:F5:C1:8D
Certificate issuer: /CN=35e84c063a2180b23f5f6d3162a75b3092f5c18d
Certificate serial: 019847ADAC14D331125F15BD65DC8549CAD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NehMBjohgLI_X20xYqdbMJL1wY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.mft
Manifest number: 15FE
Signing time: Sat 26 Jul 2025 17:00:20 +0000
Manifest this update: Sat 26 Jul 2025 17:00:20 +0000
Manifest next update: Sun 27 Jul 2025 17:00:20 +0000
Files and hashes: 1: NehMBjohgLI_X20xYqdbMJL1wY0.crl (hash: 3QmR58/xqJPDA6DiLpQXggp/GVF1LXy04jRAWzkhYjE=)
2: W3mDa3qMM3UMHKwdjXNmQQYwzCo.roa (hash: uhcnNrB9w8L6u9yOsZumoNimMZDsDc9Fp+1S6uVCDDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NehMBjohgLI_X20xYqdbMJL1wY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:ac:14:d3:31:12:5f:15:bd:65:dc:85:49:ca:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e84c063a2180b23f5f6d3162a75b3092f5c18d
Validity
Not Before: Jul 26 17:00:20 2025 GMT
Not After : Jul 27 17:00:20 2025 GMT
Subject: CN=80d54ad07ae5cf5c219ad534805939e557407d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a5:49:27:31:37:b1:b5:97:03:71:09:89:fa:
60:13:49:26:98:b5:11:8b:a6:61:07:be:8f:75:68:
4a:6c:7e:c7:5c:25:82:71:69:14:0f:58:4e:2e:e1:
73:08:6c:69:67:79:91:85:af:f2:63:31:0e:c9:8c:
94:3e:ec:d4:9c:bb:1d:21:0a:d4:ab:62:0f:29:2d:
4e:8b:a0:e3:74:95:82:7f:11:e3:b3:36:89:69:53:
91:a4:bb:23:5e:e6:70:bd:0f:6f:a9:5e:1f:ac:86:
15:4b:8d:7e:27:da:15:fe:64:4c:8f:1a:c1:25:f6:
aa:db:27:c3:de:fa:1e:4b:95:a4:79:4f:41:e9:ab:
8d:f8:68:3c:13:e1:68:c6:9f:55:33:d4:82:9c:e8:
84:78:71:34:76:f4:3d:ce:7a:2e:e7:ad:9e:f5:8b:
36:ba:04:96:08:d8:80:8f:fd:81:66:db:6a:9e:46:
73:35:ac:e8:23:93:a7:fd:96:83:3a:f7:51:71:a7:
5f:3c:c5:4f:8f:29:34:e9:b6:a5:0a:b3:25:d5:6c:
95:18:ea:23:4b:92:1b:35:fe:1a:36:92:97:df:77:
e5:c7:0d:91:21:5f:02:a0:77:77:61:b9:b7:63:78:
85:58:35:05:d3:66:78:42:74:06:49:ec:4d:87:65:
30:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D5:4A:D0:7A:E5:CF:5C:21:9A:D5:34:80:59:39:E5:57:40:7D:5A
X509v3 Authority Key Identifier:
keyid:35:E8:4C:06:3A:21:80:B2:3F:5F:6D:31:62:A7:5B:30:92:F5:C1:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NehMBjohgLI_X20xYqdbMJL1wY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:db:f0:86:29:53:3a:6b:f2:62:06:a7:71:98:ad:4e:20:ba:
f7:39:b5:8d:c8:c6:53:d3:d7:34:b2:fd:5e:00:ba:26:5a:f2:
3e:bc:fd:f7:0c:12:35:c7:2b:cb:f1:43:a6:1e:ab:6a:dd:d0:
b7:86:7b:44:ce:2b:63:3e:f6:56:69:78:4a:78:17:d6:d7:a0:
86:f2:d6:83:f3:77:8c:09:da:79:31:c4:b1:28:6a:e0:45:16:
14:b9:2d:82:bc:03:d0:d2:e7:ab:96:08:c4:e5:24:e3:53:64:
63:23:ca:5f:e4:35:79:6d:4c:cf:55:f4:5a:dc:4b:f5:a1:b8:
01:b7:4b:cf:2e:d3:02:78:ee:48:8a:14:20:15:0b:91:66:44:
c5:9b:c3:87:7f:81:79:bb:24:85:98:b6:64:65:6a:d1:0d:7d:
9a:e9:3e:4f:8e:ae:e2:f3:35:53:96:4f:02:35:06:fb:31:66:
24:f7:69:03:e3:54:f2:f9:26:50:d9:8f:52:b7:d6:9f:96:e9:
6e:93:b1:c3:8c:36:d4:07:1e:17:d7:af:42:91:23:df:4e:d0:
89:6a:25:8e:9e:a9:f4:4a:a5:0f:94:d4:41:07:21:f7:a5:b0:
f3:66:e2:bd:e7:9d:8e:0b:77:71:54:a7:1f:c5:18:6f:98:81:
f3:dc:5b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:55:22 2025 by rpki-client