Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
File: NeXw-_PWvzoWokvseAyw_W7fMec.mft (raw, json)
Hash identifier: 06m7++/Yg1BC0+YUagal/Ee0wHTltjQMgsBpe8JnL9o=
Subject key identifier: 7A:F7:25:0C:71:6D:7E:73:31:5F:14:68:84:2C:CD:8C:4B:F9:D8:E6
Authority key identifier: 35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7
Certificate issuer: /CN=35e5f0fbf3d6bf3a16a24bec780cb0fd6edf31e7
Certificate serial: 01974EC5CA8E793CB9BFFE9DBC9F64144819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
Manifest number: 0DC3
Signing time: Sun 08 Jun 2025 09:01:14 +0000
Manifest this update: Sun 08 Jun 2025 09:01:14 +0000
Manifest next update: Mon 09 Jun 2025 09:01:14 +0000
Files and hashes: 1: NeXw-_PWvzoWokvseAyw_W7fMec.crl (hash: U3ATOnBQTG5pA9DSPmvKfh9l1+liCFIK2+LexQwbo+0=)
2: PmVcb6mc4PNxZC_ptgP_O-XbGLI.roa (hash: pKGXoSvQeFa7SbcSS7sBYIQ1DYaO2+BzF5Gj11hr5Ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:ca:8e:79:3c:b9:bf:fe:9d:bc:9f:64:14:48:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e5f0fbf3d6bf3a16a24bec780cb0fd6edf31e7
Validity
Not Before: Jun 8 09:01:14 2025 GMT
Not After : Jun 9 09:01:14 2025 GMT
Subject: CN=7af7250c716d7e73315f1468842ccd8c4bf9d8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9a:dc:d3:8c:da:60:b0:e9:fb:be:15:84:19:
9f:35:f9:8e:76:a6:29:7a:37:7d:0f:87:a4:c1:bb:
46:fe:e9:f9:98:20:52:98:42:c3:21:af:5f:91:3e:
75:63:6e:04:5c:61:22:75:3e:e8:9d:77:80:87:38:
9a:62:de:cd:47:ea:78:db:00:17:87:fe:2f:b0:86:
a3:dc:fa:c5:05:8a:76:6a:0e:5e:eb:0c:7e:f5:fb:
80:3a:11:ed:fb:1b:5e:25:6e:b5:82:3c:31:f6:b9:
65:d8:99:57:e6:7a:f2:6d:1d:96:e6:55:68:f6:c4:
8d:e1:3e:ee:80:ce:65:e6:b1:8f:f9:5e:16:e4:71:
ba:02:8f:53:91:c9:4b:0c:34:d0:fe:a0:f2:1f:34:
f2:d2:91:88:f8:ca:5a:e8:a1:fa:52:52:01:3d:42:
dd:1a:5d:ae:b3:20:be:5c:96:94:0f:ba:c8:17:f0:
2a:4e:d8:bf:7d:6c:e3:87:96:fd:91:60:5e:e8:2d:
19:fb:14:1b:4b:36:19:be:ac:4d:e1:54:a3:05:35:
7a:23:fc:24:4c:f0:08:7d:b6:fb:c3:78:0c:db:13:
c3:00:be:2a:f3:b9:8c:44:df:77:bc:1f:b1:02:8d:
82:1e:88:8d:50:99:93:07:ab:47:49:94:04:d9:bf:
e1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F7:25:0C:71:6D:7E:73:31:5F:14:68:84:2C:CD:8C:4B:F9:D8:E6
X509v3 Authority Key Identifier:
keyid:35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:78:13:1d:cb:53:6e:f5:7b:72:db:67:1d:1a:3f:dd:62:6e:
fe:8f:11:0b:b8:14:01:99:4c:fe:51:50:2b:65:d7:a4:53:3a:
26:60:4c:e2:3f:d3:e6:0f:a7:1e:39:37:c3:7a:2d:46:8d:e8:
bf:7b:e4:b5:72:09:d8:ae:f1:0c:54:02:f3:91:8b:ab:8e:47:
a3:19:30:45:3b:10:26:c0:8e:04:10:5b:1b:3b:4d:99:7a:f6:
f9:81:40:08:3c:8a:2b:d4:d7:cc:81:ae:ab:b2:8f:6f:f9:4b:
47:da:26:b8:ba:88:80:33:1b:c9:ca:e0:34:29:1a:53:5b:a7:
43:24:7c:8f:14:34:7b:22:72:37:82:1a:45:ce:65:e1:ba:03:
62:ed:c4:42:fb:53:ea:67:cf:70:88:71:9e:dd:72:29:6e:55:
c9:f7:7d:81:ce:21:be:c1:54:b1:9b:fe:d6:67:a0:73:2f:9d:
09:e6:17:ec:65:1c:ec:60:f9:ef:56:a4:27:b6:36:46:9a:18:
ea:bb:5d:b2:1e:21:10:a9:bc:6a:2d:d6:e7:fb:51:41:72:7d:
92:25:de:1b:9e:7f:2c:bc:32:cc:a1:7f:11:15:f7:c1:fa:b9:
f1:5d:41:7f:3b:33:fc:7c:db:ae:b8:7f:d3:e2:a6:86:6c:60:
86:e4:7d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:37:02 2025 by rpki-client