Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
File: NW5HRHMdpE8I-l6SxesqR01JqJI.mft (raw, json)
Hash identifier: T6ORdk2yDybwqEuV09QlHB4fajHsnlt6FupgEnpNdoo=
Subject key identifier: 11:C6:0A:CF:92:F9:4C:3A:D9:98:69:4C:38:77:17:A8:FD:4C:06:3A
Authority key identifier: 35:6E:47:44:73:1D:A4:4F:08:FA:5E:92:C5:EB:2A:47:4D:49:A8:92
Certificate issuer: /CN=356e4744731da44f08fa5e92c5eb2a474d49a892
Certificate serial: 01984B8A69EE6782A2EEC9E439C25AFEB934
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 11:00:18 +0000
Manifest this update: Sun 27 Jul 2025 11:00:18 +0000
Manifest next update: Mon 28 Jul 2025 11:00:18 +0000
Files and hashes: 1: NW5HRHMdpE8I-l6SxesqR01JqJI.crl (hash: hK6Os5Hn3Xwcl/MW7pFp/W5hUXVPfDKIZu1vK9zcoAY=)
2: sWXWz9KHFQhAxmDZ0n63KNEzRYA.roa (hash: VInHBflevKh8uKrJkW73psQEtmEHrPxva/qTjQRvp1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:69:ee:67:82:a2:ee:c9:e4:39:c2:5a:fe:b9:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356e4744731da44f08fa5e92c5eb2a474d49a892
Validity
Not Before: Jul 27 11:00:18 2025 GMT
Not After : Jul 28 11:00:18 2025 GMT
Subject: CN=11c60acf92f94c3ad998694c387717a8fd4c063a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0c:33:3d:09:9a:c9:10:77:33:3f:e5:1e:e9:
95:39:e7:1c:04:d6:4a:7d:aa:d2:0a:19:c7:39:3b:
ff:af:7e:7f:ce:2c:b3:08:a3:bf:d2:21:c3:74:9a:
09:0a:ec:f4:f9:af:8a:19:b6:0b:cd:24:d3:81:22:
76:aa:02:44:11:68:a6:70:dd:3e:d5:c7:ec:e5:1f:
63:ae:bf:b6:62:59:ed:e9:f6:be:a7:cf:9f:a6:4c:
a9:b0:cd:d1:22:c2:e3:63:dc:6a:d5:3c:57:73:18:
6e:66:45:4d:19:29:b3:0a:bd:ab:eb:a7:64:8f:7b:
f3:4e:72:ec:bf:39:9b:6f:dd:be:a6:70:2d:20:e9:
66:7a:62:ee:ed:d6:23:25:ae:28:2b:87:73:8b:82:
fa:1e:96:ac:f4:78:df:63:de:4a:97:a1:3b:95:9b:
96:d1:2c:7e:c3:6f:54:f2:37:16:aa:3f:60:79:4d:
21:96:b5:57:56:1b:29:14:66:1b:e0:d7:ce:99:3b:
25:45:3d:c2:d6:b4:50:53:17:89:af:8e:21:65:8f:
9a:0b:92:4d:45:9d:8e:f6:76:54:e4:2e:ce:cf:7f:
ea:88:ab:90:05:43:13:45:03:d0:a3:dd:e6:55:66:
cc:82:1c:37:32:32:0d:39:b0:f9:fc:4e:35:b5:ff:
75:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C6:0A:CF:92:F9:4C:3A:D9:98:69:4C:38:77:17:A8:FD:4C:06:3A
X509v3 Authority Key Identifier:
keyid:35:6E:47:44:73:1D:A4:4F:08:FA:5E:92:C5:EB:2A:47:4D:49:A8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:eb:ef:df:06:56:f4:9c:60:c4:63:27:0b:64:d1:4f:ca:c4:
f5:2d:b4:4b:c5:a6:f3:85:55:26:ce:92:03:0d:09:a8:6a:41:
4a:7b:c0:52:92:33:61:b7:9e:5b:b0:52:e9:0a:3e:80:d1:4b:
15:63:8f:f3:69:05:5b:d6:26:f1:ff:70:ed:99:47:6c:8d:6c:
dc:93:3d:e7:b6:c7:b6:6d:fa:79:5a:11:3f:57:7a:06:90:b2:
c6:f4:b9:e2:21:93:1e:8f:21:d4:63:6a:ec:30:1e:c0:4c:b8:
01:11:0a:3a:5a:5c:7f:25:ae:e4:82:6d:8c:8b:90:47:2a:f2:
49:2b:ff:ff:fd:1f:25:ad:af:64:51:a0:51:a4:86:e4:6e:b7:
bc:1d:2d:67:de:f1:c9:95:59:41:c9:98:34:28:82:8f:2a:2d:
64:31:14:09:f4:49:b3:21:8c:e4:fe:97:96:75:68:20:f5:d2:
2e:4d:c6:f6:7e:1e:86:64:1d:ad:b5:3e:ca:1b:b0:9f:50:57:
79:b9:e7:c1:44:bd:cd:2e:d3:5b:00:7b:2e:2a:e6:e7:df:f6:
6b:63:38:3a:fd:d3:ae:b7:a4:2e:21:6a:b5:68:a4:bd:13:14:
32:84:62:97:3e:d2:4a:be:51:94:cc:bf:ee:b5:3c:8e:a5:71:
c1:ff:a4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:35:04 2025 by rpki-client