Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft
File: NW4BARgaykJR6fJKj2NzXi9evc0.mft (raw, json)
Hash identifier: FoOHSaaolpD5zZ2zpGal1fzMRbUp3FC9y0VujkuVu/Y=
Subject key identifier: 83:45:F1:CF:04:46:FB:76:E2:60:0E:ED:3F:E9:1C:DD:DB:F5:40:6E
Authority key identifier: 35:6E:01:01:18:1A:CA:42:51:E9:F2:4A:8F:63:73:5E:2F:5E:BD:CD
Certificate issuer: /CN=356e0101181aca4251e9f24a8f63735e2f5ebdcd
Certificate serial: 01983804096A7C673F57B2722A89E310B6E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW4BARgaykJR6fJKj2NzXi9evc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft
Manifest number: 0305
Signing time: Wed 23 Jul 2025 16:00:45 +0000
Manifest this update: Wed 23 Jul 2025 16:00:45 +0000
Manifest next update: Thu 24 Jul 2025 16:00:45 +0000
Files and hashes: 1: NW4BARgaykJR6fJKj2NzXi9evc0.crl (hash: 3G3LenJwO/rhS/2n2BSfSgcu7093N7vaSwylmXW2mrQ=)
2: dEoQSu71Ws9XnNjOfEdbibTdInI.roa (hash: sYA0jY+C8zad7z34ckQV3VzC0yGLwcHRH79SGfsU6zY=)
3: y-NIwscX11p02xnh21oGE_zmYCI.roa (hash: +Y0OYgxDa6WhuGqqRO+OXeS1WkoYTiwyapeS/DlTCTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NW4BARgaykJR6fJKj2NzXi9evc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:04:09:6a:7c:67:3f:57:b2:72:2a:89:e3:10:b6:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356e0101181aca4251e9f24a8f63735e2f5ebdcd
Validity
Not Before: Jul 23 16:00:45 2025 GMT
Not After : Jul 24 16:00:45 2025 GMT
Subject: CN=8345f1cf0446fb76e2600eed3fe91cdddbf5406e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:47:70:7f:67:6a:df:7c:9a:ea:58:1f:8d:22:
11:24:20:33:fc:18:04:5d:9c:18:23:9f:08:df:69:
2d:2b:4f:fc:25:f7:52:0e:7c:0c:5a:ce:32:f4:25:
44:08:17:27:b8:1c:22:66:e3:65:ed:c3:e0:da:85:
b7:8d:9a:1a:86:57:5a:88:36:cb:c9:78:96:bb:12:
94:b6:45:68:bf:47:b6:1a:21:14:96:a2:15:5a:6a:
2b:96:0d:25:cb:b0:71:88:96:a6:f9:7d:f5:88:01:
2b:20:a3:d9:4e:6f:b7:5b:af:68:b0:22:2f:8f:8b:
1f:8b:9f:16:83:4b:dc:51:11:e6:d8:b4:76:e0:35:
b2:7c:d2:6a:46:67:f4:89:76:e5:c7:17:ba:94:f5:
01:8b:5b:c1:cf:9d:a0:75:a5:93:2e:75:85:71:f3:
fb:c0:29:96:23:0c:6e:c4:23:6c:81:d7:e2:5b:d6:
fb:52:a8:98:72:f9:8b:db:17:a3:b4:fd:90:8e:da:
0f:45:0a:16:6b:e8:b5:b2:78:59:3c:25:34:18:8f:
2b:06:a7:ed:00:f1:e0:9d:9a:38:f6:0e:d7:0b:6a:
cf:f2:22:ad:c5:74:bd:49:f1:d3:f9:19:e2:ea:14:
ee:01:0a:03:5a:a0:e2:e7:14:eb:d0:84:af:24:05:
83:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:45:F1:CF:04:46:FB:76:E2:60:0E:ED:3F:E9:1C:DD:DB:F5:40:6E
X509v3 Authority Key Identifier:
keyid:35:6E:01:01:18:1A:CA:42:51:E9:F2:4A:8F:63:73:5E:2F:5E:BD:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW4BARgaykJR6fJKj2NzXi9evc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf6e2f-58ff-41e0-8d0c-9d5e34b02e5b/1/NW4BARgaykJR6fJKj2NzXi9evc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c3:58:02:04:b8:d4:4f:17:4e:dd:8e:62:a9:74:4a:02:ec:
3b:54:3a:c4:c1:14:8b:cb:b4:67:5d:47:c9:ff:82:96:5e:f0:
36:67:2b:28:97:b3:f0:b5:71:15:f1:74:ee:1e:5b:db:0a:fe:
bd:8a:7f:2a:9b:8a:d8:fa:81:5b:69:8f:f7:8e:bb:9f:65:b4:
cb:8d:4a:c9:f2:27:f4:cc:4d:b9:1f:4c:de:5e:c9:86:63:81:
fc:2a:69:6c:0d:70:82:98:ff:8a:c9:80:b0:2f:fa:93:86:ff:
a9:0c:1d:b0:38:f2:2b:44:8e:60:04:75:0d:de:62:f8:29:05:
3d:40:e9:9c:81:58:fc:d9:f2:57:df:48:8a:0a:25:1e:bc:31:
bb:a6:ed:b6:9d:f2:ec:7d:0c:a5:71:c9:85:c3:40:0e:63:1b:
ee:6d:3b:5a:fc:aa:c9:79:57:0e:37:36:f9:cf:a3:e1:c2:7d:
84:31:3d:ec:c8:1c:2d:6f:a7:7b:3f:1a:49:b9:d2:5e:9f:57:
78:ee:ca:f7:37:a3:45:fb:cc:91:d1:ef:15:82:fc:af:79:22:
fd:fc:bd:72:3a:14:a1:2f:ea:08:8b:ea:94:f4:b9:0d:b4:29:
04:5d:db:7e:ae:3a:33:53:8d:93:06:f2:5b:9d:23:20:de:27:
26:49:a9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:19:10 2025 by rpki-client