Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
File: NePUvxvA-BcoIF5R3gl884Ogzck.mft (raw, json)
Hash identifier: M553wUjaQLfh1MDNb6f6jnxWYv7YEG+5kUKOdMnPNE8=
Subject key identifier: 75:39:96:9F:21:45:18:DA:DF:24:4F:E8:17:75:3A:EE:EA:D1:C1:34
Authority key identifier: 35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
Certificate issuer: /CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Certificate serial: 0198C6ED41F9316A8BF66F969150257C1F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
Manifest number: 1581
Signing time: Wed 20 Aug 2025 10:01:34 +0000
Manifest this update: Wed 20 Aug 2025 10:01:34 +0000
Manifest next update: Thu 21 Aug 2025 10:01:34 +0000
Files and hashes: 1: 0RltyGXYqOw5Hx9cC0hpgbUGn1M.roa (hash: mg2bYRQawjXXkuGc/ehoyx4cItI7XGim10ZVkynzOuM=)
2: NePUvxvA-BcoIF5R3gl884Ogzck.crl (hash: 5cJo15WEk3O/fIvt43bOE++KCYP7rZDqHsLdCfL6qGY=)
3: cC3qEyLwvQCoEx0E8fa6hCQIIMk.roa (hash: t6q5YnGG2tDRloa96C40IAzp6BUV/ndP0HTUzMGh9cA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:ed:41:f9:31:6a:8b:f6:6f:96:91:50:25:7c:1f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Validity
Not Before: Aug 20 10:01:34 2025 GMT
Not After : Aug 21 10:01:34 2025 GMT
Subject: CN=7539969f214518dadf244fe817753aeeead1c134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:62:0f:0f:0b:c4:48:a2:82:85:71:f2:9e:cf:
1d:19:54:79:74:be:ef:c4:e2:f2:14:90:d9:76:e1:
ae:4f:44:19:b7:02:49:3b:1b:12:9f:d8:97:47:ef:
17:51:24:f1:5c:7b:89:d1:04:78:88:6b:b3:48:28:
1f:ce:11:1d:44:43:95:10:95:7d:6a:dc:5f:80:7c:
5a:cc:c8:63:fc:6b:98:9b:ed:b6:be:a3:be:f4:b9:
b1:a4:fc:a3:5b:49:6f:89:41:2d:2c:ea:14:58:f1:
d1:36:dd:5d:2d:bd:38:7e:10:09:95:4d:f8:c7:e0:
9a:f0:1b:3a:a0:21:9e:04:ce:b1:47:2e:4b:2a:d2:
23:1d:10:ef:c1:d0:cc:23:72:aa:56:22:48:db:7a:
1c:5f:dc:2c:71:d8:04:8e:e7:e7:df:06:db:78:b8:
73:9e:52:6b:8a:54:7a:c0:d2:4c:26:e1:fc:72:0d:
7f:10:51:47:a0:9d:68:24:66:72:a6:5b:42:0f:77:
82:e4:05:2c:39:cb:62:b3:65:6d:3c:c6:8d:ae:d5:
c2:cd:cc:bf:a7:ca:98:aa:b7:9b:fe:0c:eb:25:7b:
5d:d8:05:4f:78:0b:9e:8d:33:2c:36:06:12:98:23:
6f:a5:c4:08:b1:75:69:6f:65:5b:c3:fe:f8:a5:09:
26:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:39:96:9F:21:45:18:DA:DF:24:4F:E8:17:75:3A:EE:EA:D1:C1:34
X509v3 Authority Key Identifier:
keyid:35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ca:c9:fa:24:6f:b2:5b:7a:a0:23:55:f2:9a:7d:50:6e:fb:
9a:c7:f9:fb:78:a4:26:8e:50:20:9b:07:6e:b2:12:2d:c4:60:
60:b8:fa:f9:4f:f0:c3:78:e0:47:6d:3d:79:c4:87:18:14:55:
ff:65:5c:2a:33:0d:fb:8f:de:fd:cc:25:2c:40:82:ff:c7:57:
d3:2d:4d:11:a7:58:d4:41:4e:34:18:d3:56:ea:37:49:9c:ea:
ce:d1:24:f1:37:be:ac:f0:45:dc:2b:4a:54:49:7d:86:1e:82:
ce:a4:c9:96:85:64:1c:0e:19:f6:2d:26:25:31:76:ad:f4:fc:
a8:4a:76:9c:0f:b7:6b:b7:23:41:c3:4b:fb:4f:31:79:b8:f9:
50:39:cf:54:41:41:30:84:28:eb:ca:ee:00:0f:d7:e3:95:08:
26:65:b1:b4:b9:ae:da:ff:d6:fe:83:a4:24:8b:ad:4e:e4:69:
f8:7d:dc:3a:b8:7a:45:a8:5a:07:f4:69:24:ae:07:4d:f0:34:
6b:e8:2b:4d:ef:3a:f7:1c:6f:88:74:be:b6:04:47:59:8a:01:
08:fd:2b:f5:32:0b:50:91:ab:2d:a6:6c:d4:47:70:a3:36:5e:
5a:26:6c:29:e3:6f:73:65:4c:6a:1e:6b:60:8c:4d:23:d1:6f:
c0:db:7f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:32:06 2025 by rpki-client