Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
File: NEcY0TWgm7UkcGtCWcq8xiblFO8.mft (raw, json)
Hash identifier: w6eXqwsBXljdXqDtYb+N3NuUQ0r/R1PJq2ijWCgJ53Q=
Subject key identifier: 07:C2:CD:6B:1B:CA:DD:B0:D6:99:86:F6:4E:B4:1F:EA:23:5B:9D:C2
Authority key identifier: 34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF
Certificate issuer: /CN=344718d135a09bb524706b4259cabcc626e514ef
Certificate serial: 019849D31D9E402A4B2405AB7D008505CFB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
Manifest number: 1594
Signing time: Sun 27 Jul 2025 03:00:29 +0000
Manifest this update: Sun 27 Jul 2025 03:00:29 +0000
Manifest next update: Mon 28 Jul 2025 03:00:29 +0000
Files and hashes: 1: NEcY0TWgm7UkcGtCWcq8xiblFO8.crl (hash: hpDdo0O0dNCpM3BMvWoFsJ8h1ehtIxxmM0PFehG7U+E=)
2: sO-QyC1vz5w60dvkaCQsXtLi8YA.roa (hash: wtWXsxxZV53+P/qICncBE0LIXN7QWpyRCdTXr4pbwmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:1d:9e:40:2a:4b:24:05:ab:7d:00:85:05:cf:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344718d135a09bb524706b4259cabcc626e514ef
Validity
Not Before: Jul 27 03:00:29 2025 GMT
Not After : Jul 28 03:00:29 2025 GMT
Subject: CN=07c2cd6b1bcaddb0d69986f64eb41fea235b9dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cf:fe:5a:ec:07:89:f9:cc:54:1c:47:14:6e:
d2:b3:e3:87:ba:82:13:ee:68:1b:22:3f:f2:08:c9:
e4:4a:b1:1e:43:e4:fb:3a:3e:47:e5:d6:70:b8:86:
72:d6:2a:ce:c1:b9:c2:43:0c:ef:39:f0:cc:33:58:
16:51:48:ab:a7:d7:a1:b5:c3:25:0a:9c:69:07:34:
72:25:45:99:dd:b1:1b:d9:e9:4f:ee:f7:9c:09:fc:
06:0e:0b:90:92:7d:a1:1d:90:08:f6:08:53:6a:cc:
06:ee:9b:47:12:9a:ba:e8:d9:a3:8e:ad:6d:57:c7:
9d:06:de:ef:d3:fe:e8:3f:24:c1:36:0c:68:6c:83:
47:7f:f6:95:74:96:59:80:13:c1:8d:29:22:6d:f6:
e1:2b:e6:51:de:18:8f:2b:c2:20:cc:af:79:0c:d7:
83:92:33:30:20:ea:fa:75:15:ee:8f:74:f8:8c:f9:
23:7a:5a:06:49:2f:37:20:5b:07:f5:18:05:28:ec:
d5:d5:43:df:d1:3a:d8:4f:b5:4b:97:47:8b:14:45:
09:f2:1f:2d:66:68:8c:4f:2f:e9:63:ac:b4:a2:72:
90:40:81:eb:b1:c4:d5:d0:33:94:9c:93:b6:af:27:
2a:d8:30:d3:3a:d7:e3:1c:7a:0a:bd:7e:31:ed:7a:
95:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C2:CD:6B:1B:CA:DD:B0:D6:99:86:F6:4E:B4:1F:EA:23:5B:9D:C2
X509v3 Authority Key Identifier:
keyid:34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:1a:c3:53:ea:73:62:ed:be:47:89:25:7a:83:33:55:80:f4:
50:17:b4:b7:f8:2b:52:7b:7a:5f:bb:2c:3b:9d:b0:41:c5:bc:
55:2a:26:6a:88:ca:a4:86:3d:67:f5:83:c5:5c:90:d8:bb:66:
28:f1:a2:67:48:3a:df:67:92:f4:65:b7:19:35:30:e3:f4:20:
3d:df:be:78:7d:e5:f7:be:20:f6:d8:68:79:f8:11:db:67:72:
12:06:be:55:52:f0:69:9a:aa:04:91:28:b3:e5:35:17:05:b1:
ee:5b:54:f3:9e:fd:3b:9a:db:18:89:19:1a:84:86:31:4e:1b:
cb:36:1c:23:9d:5a:59:dd:10:f1:be:ee:a8:45:1f:db:29:88:
10:f7:9b:8b:6f:2d:a4:96:14:02:1a:25:04:6a:77:33:32:4a:
08:ea:ab:84:73:c4:09:84:f3:ed:f4:1c:fa:7c:b3:4a:a9:b4:
64:d9:06:9f:5e:18:24:be:f3:f3:bf:c7:a1:3c:19:34:a4:80:
51:eb:99:26:ad:58:9b:b9:12:b5:5e:20:a5:25:ad:87:11:12:
e0:3c:68:72:f8:25:5a:73:96:77:33:f5:53:c8:d0:1b:1c:35:
b9:36:a3:3f:e7:72:5a:12:c2:0e:dc:f7:fa:bb:06:93:b2:3a:
66:9b:8f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:04:56 2025 by rpki-client