Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
File: NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft (raw, json)
Hash identifier: kbHLg03q/dWgOlAnbA8AyAb2+TLSiuPkuuQDBHnnxNQ=
Subject key identifier: B7:B3:77:F5:11:7A:E9:A5:4C:DC:9B:52:73:77:68:F7:15:E1:39:CD
Authority key identifier: 34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D
Certificate issuer: /CN=344fdad10ee55b3282a64246a41dc61a8922d25d
Certificate serial: 01992F34F4857FA51660F8F69FA3A0DBEE51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
Manifest number: 137C
Signing time: Tue 09 Sep 2025 16:00:23 +0000
Manifest this update: Tue 09 Sep 2025 16:00:23 +0000
Manifest next update: Wed 10 Sep 2025 16:00:23 +0000
Files and hashes: 1: GHI5fKOLnVPTORGJ-8HvgMn5I8g.roa (hash: tTyvweQSG7PSV/1T7+CqEyju3wttfhrfn44tpkM7ENI=)
2: NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl (hash: zc7UCLrNXxMrQc5gptSISwRSJCgaGHQBa+x08IOYLSY=)
3: xHwvN6-vM3aYD0WFb7ooENGYbZk.roa (hash: iMOiUeIxNdKNrUiqdP5pHSRFVDIEoaVwDT8Frv9xIdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 16:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:34:f4:85:7f:a5:16:60:f8:f6:9f:a3:a0:db:ee:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344fdad10ee55b3282a64246a41dc61a8922d25d
Validity
Not Before: Sep 9 16:00:23 2025 GMT
Not After : Sep 10 16:00:23 2025 GMT
Subject: CN=b7b377f5117ae9a54cdc9b52737768f715e139cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:62:7f:fb:3e:49:92:88:cf:5d:0f:38:06:04:
07:e9:84:34:29:e7:0c:30:be:0c:3b:8f:54:c2:d3:
40:60:6b:f5:f3:16:a9:41:f7:15:7c:66:a6:7c:b2:
7c:0b:44:74:ce:6a:52:a3:e6:da:79:6d:64:cf:49:
d8:ed:29:8a:30:22:46:0f:91:3b:9b:1f:ee:7d:7a:
3c:09:03:74:90:68:24:51:6b:5f:fd:79:2f:88:07:
f8:c6:32:e2:84:99:13:e4:36:22:f6:e1:f2:23:de:
f3:3d:30:f2:00:f8:33:96:92:4c:e2:e0:24:ec:2b:
fd:1e:c1:5b:d7:27:69:23:e5:2a:da:96:7e:4f:fa:
66:04:ef:1d:05:80:5c:c4:12:76:73:8d:77:75:7d:
74:fc:0c:66:d3:cd:78:56:23:3a:42:05:da:cb:05:
4e:43:fc:95:fb:59:18:86:52:b6:7c:a8:bd:4b:c2:
68:30:72:24:bd:4f:a9:6a:56:d4:b3:98:a8:ff:e0:
26:be:44:54:02:77:c5:dd:2a:9f:af:a4:d5:13:c1:
12:c4:c7:9a:fb:f3:cc:87:94:6c:98:37:8d:c4:51:
db:8d:ca:69:94:03:32:2b:9b:a6:1b:d8:c8:3d:8e:
0e:8a:de:28:a6:dc:45:5c:39:79:cb:f0:1c:0a:f8:
bc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B3:77:F5:11:7A:E9:A5:4C:DC:9B:52:73:77:68:F7:15:E1:39:CD
X509v3 Authority Key Identifier:
keyid:34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:4d:35:b0:1b:62:7a:c1:ae:28:72:80:f3:1c:fd:5d:00:b0:
71:0f:9b:55:f7:81:4a:74:30:f1:49:3f:88:b5:5b:04:6d:07:
19:97:65:7f:9b:44:a1:b6:31:05:59:2c:49:5a:b8:39:7a:39:
d5:6d:53:62:eb:16:f1:76:65:75:3a:5f:19:77:4d:1c:ac:07:
9c:06:d5:fa:bd:b4:76:50:6c:80:89:90:20:42:c3:32:7b:56:
3c:16:06:00:0e:f4:05:f1:b3:32:6b:fd:1b:36:33:ba:8f:c6:
7b:40:c5:22:0e:4e:eb:77:05:01:d1:e4:2a:92:88:31:b6:3a:
81:3f:18:50:80:cd:6e:8b:ae:63:14:51:1b:53:5c:18:ce:d2:
ea:5c:58:f1:6f:76:fc:dd:bf:b9:80:67:da:6d:29:71:43:ff:
09:f6:58:59:1b:9f:23:76:2e:4b:0e:a2:e0:b0:03:54:e7:5a:
2e:8e:51:99:52:81:b7:56:26:a5:bc:9f:45:8d:80:50:db:c1:
07:77:10:34:50:1c:71:41:5c:55:fc:20:eb:ab:de:b9:89:12:
68:12:49:aa:22:32:3d:db:e6:57:bd:5c:dc:52:d9:46:8b:2f:
d5:7c:59:d5:dc:8e:96:d7:57:9c:7a:c4:25:df:f4:44:6b:49:
28:4b:35:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 23:03:01 2025 by rpki-client