Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
File: NawwjJT1exHO4bqE7xJ4RHxnhes.mft (raw, json)
Hash identifier: UDTqlvg37Ag6OQBd6WgHiAHwkjj8z+RGGlBRvU/dkx4=
Subject key identifier: 0C:94:3D:F7:EA:74:27:30:DB:40:E9:91:39:43:18:57:59:84:14:B5
Authority key identifier: 35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB
Certificate issuer: /CN=35ac308c94f57b11cee1ba84ef1278447c6785eb
Certificate serial: 0198462D1761043D0305A8214ECFE824B6D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 10:00:16 +0000
Manifest this update: Sat 26 Jul 2025 10:00:16 +0000
Manifest next update: Sun 27 Jul 2025 10:00:16 +0000
Files and hashes: 1: NawwjJT1exHO4bqE7xJ4RHxnhes.crl (hash: gH0MRH+OLUmqMoJ2FCm/vRoqqCckmdeRkUk0IbzTxW8=)
2: ge72rIVKenfFe0v5asZR_PaxIp4.roa (hash: o9engqettqOIJ9n8PYQ/SXW11G8NZE3fZOewqKwRqSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:2d:17:61:04:3d:03:05:a8:21:4e:cf:e8:24:b6:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ac308c94f57b11cee1ba84ef1278447c6785eb
Validity
Not Before: Jul 26 10:00:16 2025 GMT
Not After : Jul 27 10:00:16 2025 GMT
Subject: CN=0c943df7ea742730db40e99139431857598414b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:32:51:f4:52:86:00:6e:f7:c4:40:94:50:80:
2d:29:4f:64:2e:d5:38:c3:c2:6a:4b:32:26:16:79:
00:14:fa:ad:cc:2c:8c:8c:92:f6:c3:da:e2:60:57:
cc:e9:e2:12:b9:9d:03:0b:0d:4f:87:6c:6f:34:25:
c6:12:ee:44:a3:1c:2e:c1:2f:d7:f8:53:1b:76:d8:
33:be:c7:c6:50:32:b3:1c:7c:e9:bc:b8:4c:8d:a9:
e3:d5:27:ee:db:11:e3:4c:a4:dd:46:28:92:2d:fc:
f3:46:21:f4:62:e0:00:71:2b:82:4b:c7:ad:de:89:
c3:b2:a6:ec:7f:35:ff:49:2e:63:91:e2:67:5d:a2:
9d:ff:ef:67:af:c3:cb:8a:93:3b:bf:e5:2a:79:a9:
d1:b6:fc:8a:7a:13:90:4f:db:97:b5:34:9f:de:d7:
78:eb:b4:ae:bd:be:16:cd:e8:cd:4a:84:c5:f7:21:
c1:b4:94:57:63:de:14:86:38:84:d2:f8:56:bf:c4:
13:fc:6c:29:04:c7:23:90:96:13:b4:27:eb:26:e4:
cf:4e:d4:65:ed:e7:d7:41:c6:4e:43:37:88:c1:f2:
e5:27:19:fb:f4:46:ae:5e:8b:5e:00:4c:67:89:96:
49:48:16:28:18:3c:bf:85:f0:88:ce:57:39:cf:d4:
54:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:94:3D:F7:EA:74:27:30:DB:40:E9:91:39:43:18:57:59:84:14:B5
X509v3 Authority Key Identifier:
keyid:35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:cc:90:07:e2:93:dc:1b:2f:b9:87:35:38:ef:05:b2:11:f4:
bc:5d:40:9a:dd:75:cb:18:f9:c1:fc:5d:19:70:ee:1f:2d:5d:
23:08:9b:ec:91:39:9e:7d:fc:d9:cf:fe:00:19:02:6c:ab:85:
34:8d:0f:51:fd:50:e7:e1:f3:45:61:43:1c:26:81:0a:e5:fe:
a0:7b:5d:f0:52:42:f4:a2:12:89:a9:9c:40:f5:88:29:b9:42:
97:af:2d:9a:77:50:d6:59:af:b5:00:d1:38:61:a9:08:78:cd:
7b:a1:21:e8:50:45:4f:73:aa:1a:fb:70:fc:ab:a7:97:34:82:
49:8f:51:1e:4d:cb:4d:eb:69:a0:ad:7f:05:2d:0c:77:9b:6e:
15:1e:36:96:3b:a5:b8:35:ac:bb:3b:87:b9:1a:78:55:52:09:
0f:0e:16:99:49:ca:db:19:ad:50:2c:fc:62:15:54:75:85:00:
81:d6:99:24:7a:25:d5:1f:48:06:42:88:d1:ce:b2:54:15:83:
9b:fd:0d:c8:f4:72:53:13:5e:cc:82:b7:fc:e2:d3:27:dc:c4:
55:39:a9:18:14:40:2f:a6:cb:8d:bf:49:e4:0c:60:1a:54:97:
16:c3:5b:09:58:45:45:16:4d:1d:55:e8:26:99:05:97:84:64:
b0:81:c9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:57:23 2025 by rpki-client