Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft
File: NEwINt1cc7B3WQTqo7foekoMDPU.mft (raw, json)
Hash identifier: ujx1w7wK7++C832lR46qkokKX6eY4UN5ulZOT6bV5Fs=
Subject key identifier: B1:E2:11:CD:FA:7E:C5:F3:A2:3C:3F:2E:EB:FF:A2:26:E8:A2:0B:67
Authority key identifier: 34:4C:08:36:DD:5C:73:B0:77:59:04:EA:A3:B7:E8:7A:4A:0C:0C:F5
Certificate issuer: /CN=344c0836dd5c73b0775904eaa3b7e87a4a0c0cf5
Certificate serial: 0198499C2A29B436916BCCD72FB91D66CFB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEwINt1cc7B3WQTqo7foekoMDPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft
Manifest number: 15FD
Signing time: Sun 27 Jul 2025 02:00:27 +0000
Manifest this update: Sun 27 Jul 2025 02:00:27 +0000
Manifest next update: Mon 28 Jul 2025 02:00:27 +0000
Files and hashes: 1: BTCMCQxXpgg5K5ucl-jfs_-nD0A.roa (hash: 72PY3Qqmz1maPY+ZM8ykIYNT4ZWmcAK3NGiS506bQm0=)
2: NEwINt1cc7B3WQTqo7foekoMDPU.crl (hash: JezKr93GA4ShrGujMab+KQQoE+I94NXMh10oSAYZdxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NEwINt1cc7B3WQTqo7foekoMDPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:2a:29:b4:36:91:6b:cc:d7:2f:b9:1d:66:cf:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344c0836dd5c73b0775904eaa3b7e87a4a0c0cf5
Validity
Not Before: Jul 27 02:00:27 2025 GMT
Not After : Jul 28 02:00:27 2025 GMT
Subject: CN=b1e211cdfa7ec5f3a23c3f2eebffa226e8a20b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2e:bd:19:9e:19:62:f1:18:44:25:00:dd:8b:
ca:d2:94:d9:f2:5d:67:4f:9f:aa:ff:65:e4:c1:2d:
e2:9b:23:84:73:20:0d:95:c3:46:3f:c7:8b:f5:6e:
e4:bc:1a:37:a8:0b:cd:47:52:95:c8:c2:a2:2a:1e:
34:5b:51:55:17:bc:9b:9c:26:28:e5:c1:de:b7:09:
44:ff:20:0e:75:58:35:c0:ee:82:62:c2:04:a5:9b:
e8:09:70:30:a7:ff:4f:69:66:4e:91:ae:e9:c6:1d:
8e:88:e9:c3:c5:ab:fa:b5:7c:84:65:79:af:48:a8:
f7:7a:1b:e5:de:66:e5:a8:db:b7:d9:1e:18:09:07:
32:ad:cb:e5:a0:64:de:0b:2f:22:27:87:0d:88:ad:
bf:78:ea:e3:4b:1e:e1:4f:12:5f:d9:f9:00:68:2a:
df:d2:c8:94:5b:60:a7:87:b0:53:63:b7:f8:56:18:
5e:66:03:82:6e:82:bc:91:2d:41:6e:43:6a:43:41:
21:b1:75:64:d4:ce:c8:1d:72:f5:78:dc:c0:68:6c:
01:ef:e9:56:1e:01:69:f8:1c:8d:ab:79:80:3d:67:
16:0f:01:55:ca:57:dd:86:30:dd:b9:0f:b9:9b:9b:
ab:42:ee:73:00:d4:22:49:d3:59:47:ae:45:e4:db:
29:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E2:11:CD:FA:7E:C5:F3:A2:3C:3F:2E:EB:FF:A2:26:E8:A2:0B:67
X509v3 Authority Key Identifier:
keyid:34:4C:08:36:DD:5C:73:B0:77:59:04:EA:A3:B7:E8:7A:4A:0C:0C:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEwINt1cc7B3WQTqo7foekoMDPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d8:2a:81:e2:2f:5d:cc:8d:27:8f:ed:ec:b0:d7:23:37:de:
38:40:3f:89:07:aa:c6:77:7a:d6:6a:16:9c:c7:5c:84:a7:7c:
6d:f1:6d:be:78:aa:62:dd:07:bb:53:32:ca:82:ea:96:ff:ef:
ef:fe:2c:a3:09:6c:4b:ab:c8:e5:3d:4e:95:c6:95:ce:28:d4:
4c:e7:e1:c8:67:aa:24:43:19:2b:2e:ec:ac:f3:9f:5b:da:83:
f7:0b:c5:7c:6e:8d:db:04:a0:49:bb:16:e4:77:93:a7:86:23:
24:df:67:10:41:a8:ce:ee:3f:d7:50:71:2d:ba:db:76:50:56:
0c:fc:17:f9:f0:6f:29:90:3c:39:18:d1:85:8d:1a:17:33:3f:
83:5d:c9:59:7d:ba:8b:ae:5d:99:94:5d:a7:28:8c:9f:bc:f9:
47:31:46:2c:2b:33:90:f0:a4:e9:0c:1b:b3:6b:41:d2:8f:4e:
81:69:e1:fb:2d:7c:fa:6c:c8:69:48:c1:d7:c9:d9:6a:47:45:
de:9e:11:a7:7d:ad:2f:3d:c1:ae:5e:d2:a5:05:40:08:20:ea:
fa:c8:61:19:a5:6d:92:5c:9a:ad:4e:f0:cb:66:fb:49:22:82:
51:fd:88:d1:da:4a:c9:dd:c2:a5:3a:d9:50:4a:d3:48:f8:2b:
82:11:b6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:56:53 2025 by rpki-client