Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
File: NeXw-_PWvzoWokvseAyw_W7fMec.mft (raw, json)
Hash identifier: Vh5RM6AIxgToPEk2D6H2DhMTERPEPZpjVGBzbrMLY/0=
Subject key identifier: B4:80:5E:90:5A:BD:DF:2C:FA:98:6F:41:8C:83:EE:D2:B8:3F:EC:48
Authority key identifier: 35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7
Certificate issuer: /CN=35e5f0fbf3d6bf3a16a24bec780cb0fd6edf31e7
Certificate serial: 0199221EE94C10A0287AA31E185E85C9FD45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
Manifest number: 0EB5
Signing time: Sun 07 Sep 2025 03:01:15 +0000
Manifest this update: Sun 07 Sep 2025 03:01:15 +0000
Manifest next update: Mon 08 Sep 2025 03:01:15 +0000
Files and hashes: 1: NeXw-_PWvzoWokvseAyw_W7fMec.crl (hash: is50rHO5xfG0mrc+t3RL/bF38IDsnlFvQdos9Vk0pWk=)
2: PmVcb6mc4PNxZC_ptgP_O-XbGLI.roa (hash: pKGXoSvQeFa7SbcSS7sBYIQ1DYaO2+BzF5Gj11hr5Ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:e9:4c:10:a0:28:7a:a3:1e:18:5e:85:c9:fd:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e5f0fbf3d6bf3a16a24bec780cb0fd6edf31e7
Validity
Not Before: Sep 7 03:01:15 2025 GMT
Not After : Sep 8 03:01:15 2025 GMT
Subject: CN=b4805e905abddf2cfa986f418c83eed2b83fec48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:af:bc:fa:a8:3c:7f:2a:d5:b5:ca:92:8f:7b:
f3:b0:3b:33:d7:53:14:d1:a7:45:d1:51:bb:3c:4f:
86:d8:7a:a5:a0:0a:c8:b9:a6:91:0b:e8:63:85:78:
54:aa:6e:5d:2e:de:0d:ce:c6:c5:52:cc:e2:d1:44:
b9:d4:98:56:c6:41:a9:91:e9:53:c6:83:18:0b:fa:
86:18:84:94:5a:e8:f6:87:6b:bb:6b:52:a5:f2:2b:
c4:7a:0e:34:99:b5:b6:55:4e:9c:7c:f7:c5:7a:a4:
e9:e4:43:b4:ca:86:d7:b4:ce:91:70:cd:c6:27:65:
90:a9:38:93:cf:f3:c9:a5:70:a3:02:13:ed:d6:2a:
0b:c0:7e:9b:e5:ec:16:95:18:5f:cb:b3:27:50:af:
69:0d:59:c7:5c:98:96:08:a2:53:a4:8a:b5:97:5e:
5f:91:55:7f:32:c8:b7:d2:eb:11:e1:a3:31:f2:1d:
fe:a8:aa:f3:fe:1e:21:18:83:8e:74:9b:6a:81:c8:
38:6b:d4:b9:c6:a0:20:b5:71:13:41:c7:8c:10:b5:
ef:d2:57:cf:3b:b5:e9:39:cc:7c:18:02:3d:d7:8b:
93:49:20:69:94:1a:30:9a:26:66:c0:5d:47:89:c9:
86:2c:a1:90:c5:25:d4:1a:37:24:40:03:a4:e9:08:
aa:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:80:5E:90:5A:BD:DF:2C:FA:98:6F:41:8C:83:EE:D2:B8:3F:EC:48
X509v3 Authority Key Identifier:
keyid:35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:66:7b:66:f9:ee:2e:77:29:2c:3d:e5:39:0f:86:d1:87:f9:
94:72:83:06:08:44:43:7d:62:f6:56:d8:32:4b:fd:2c:35:ae:
4e:97:7f:43:e6:22:2b:68:61:f1:98:66:db:ec:08:a7:5c:af:
a0:1c:d4:46:fe:43:63:25:a7:09:b7:5b:80:57:ac:43:da:01:
c3:3b:d5:86:da:e8:95:89:6f:ed:7b:73:11:57:1c:60:25:c9:
d1:5e:cf:12:4a:f5:0e:2a:9a:7a:fe:25:01:a0:9e:3f:9b:bb:
ed:8c:c2:33:eb:46:56:8d:8e:be:51:d4:82:47:5b:ec:1c:ee:
ed:59:c9:49:84:c6:b7:c5:b8:0e:46:14:38:83:21:41:c0:ed:
fe:ba:d3:ca:fa:8a:b3:80:b7:17:77:55:4a:ab:83:7b:f8:f3:
d1:39:6c:0e:0c:31:da:79:45:a7:85:f0:b9:15:12:71:88:4e:
97:2c:96:7d:d9:6d:b2:93:8c:64:f8:f3:49:99:b0:9a:0c:c3:
cc:c6:2c:38:c8:e4:5f:89:36:80:2d:4a:20:79:da:6a:46:69:
e1:00:ea:4e:86:c7:be:9a:27:ec:99:e2:b7:82:9b:b3:09:60:
c1:d4:c0:1a:05:55:fe:db:90:c1:01:e3:8b:2c:21:51:9b:19:
1d:77:7d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:43:34 2025 by rpki-client