Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
File: NawwjJT1exHO4bqE7xJ4RHxnhes.mft (raw, json)
Hash identifier: dPXdmZPDCB3XMJ5kpamQI4lYLKseJ61ZIv8dTQrfY84=
Subject key identifier: 06:2F:05:5A:6D:33:01:BE:2D:F1:C3:AC:FE:E6:8A:D4:ED:3E:DB:98
Authority key identifier: 35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB
Certificate issuer: /CN=35ac308c94f57b11cee1ba84ef1278447c6785eb
Certificate serial: 01987E2EA6A0BFFC58CBC11FC8DE591107C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 07:00:43 +0000
Manifest this update: Wed 06 Aug 2025 07:00:43 +0000
Manifest next update: Thu 07 Aug 2025 07:00:43 +0000
Files and hashes: 1: NawwjJT1exHO4bqE7xJ4RHxnhes.crl (hash: Dk/zmqNO2rvHENMsL1O8AKLBpKP+D/ZuRyuzNwu0fnQ=)
2: ge72rIVKenfFe0v5asZR_PaxIp4.roa (hash: o9engqettqOIJ9n8PYQ/SXW11G8NZE3fZOewqKwRqSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2e:a6:a0:bf:fc:58:cb:c1:1f:c8:de:59:11:07:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ac308c94f57b11cee1ba84ef1278447c6785eb
Validity
Not Before: Aug 6 07:00:43 2025 GMT
Not After : Aug 7 07:00:43 2025 GMT
Subject: CN=062f055a6d3301be2df1c3acfee68ad4ed3edb98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:80:41:b4:94:89:9e:8c:44:13:84:77:5a:e1:
1f:b3:dc:4a:c0:88:77:e7:90:c1:22:98:30:c4:75:
41:3f:ef:fa:ff:c1:21:09:9f:10:62:f4:ea:12:ec:
be:02:86:15:22:62:7f:1d:86:dc:59:d8:4a:3e:b7:
d4:f5:be:6f:6a:88:3f:64:86:01:26:63:c3:db:34:
6f:29:d9:9f:55:0c:c2:93:6a:eb:3c:45:07:24:db:
ef:15:a7:fd:4a:0c:05:2d:8a:0a:95:e8:26:3b:d7:
fa:98:a7:d9:55:e6:1a:ba:99:4d:90:44:bf:70:a4:
a7:b1:70:f0:1e:4b:64:9f:bf:89:8e:6b:ec:1e:d3:
86:c6:43:d7:ab:ca:f4:a4:04:42:0a:4d:29:5f:74:
ff:bb:be:3e:1e:8c:05:14:fa:35:f4:ee:0d:20:02:
08:20:f3:3e:82:ed:9d:06:75:32:a5:ba:4c:24:96:
0a:da:c2:0f:71:15:0e:02:bc:57:4d:cd:38:36:9a:
56:d1:4b:fd:59:d9:fc:68:0a:0c:35:61:14:14:20:
c6:fa:e5:16:bd:94:4c:1d:e7:f6:41:2d:49:2f:e8:
8c:51:44:ea:85:8a:0b:ee:43:8e:e0:2d:06:59:dd:
0a:b2:69:8e:41:bb:c8:c9:ce:e5:e2:8c:a8:eb:5a:
e7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:2F:05:5A:6D:33:01:BE:2D:F1:C3:AC:FE:E6:8A:D4:ED:3E:DB:98
X509v3 Authority Key Identifier:
keyid:35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:12:07:20:29:02:cf:4a:53:eb:82:23:cb:cf:cb:eb:08:fe:
19:7b:00:40:90:75:22:d4:0d:57:7e:f6:40:bb:b4:ab:0d:50:
29:82:0f:e2:23:c5:2c:57:23:ec:69:a4:6c:b6:48:3c:22:d8:
04:cc:3e:1c:86:f6:7a:97:64:a5:9c:fc:ab:72:ea:ba:1a:00:
2f:a5:67:1e:e7:5a:53:88:c9:e0:34:b5:e7:c9:69:74:d6:68:
57:b9:53:81:19:73:9c:99:cb:46:a6:29:f2:e3:8b:d7:31:50:
39:57:ee:bd:40:c9:82:cc:48:2b:aa:91:b4:9d:ac:aa:b5:55:
11:b5:f8:e5:1f:5e:a6:8c:6b:9e:f3:a2:9a:7d:e1:1f:19:a1:
9d:86:be:a7:2b:87:44:6e:b8:de:52:b0:e8:0d:c8:2d:b2:d8:
c8:56:cb:13:3d:7c:a7:92:34:b0:6d:35:6c:12:42:50:5f:65:
4f:0d:fa:d7:9b:49:29:f3:c5:b5:f5:5c:e9:57:d6:44:4c:9c:
5e:83:04:6d:3e:ea:fe:41:9f:8e:36:c8:5a:f6:a7:e4:8b:59:
2e:54:a1:de:06:ed:68:62:a2:4d:38:11:60:c8:12:9a:d1:4a:
55:24:b7:54:84:78:42:06:dd:52:cb:99:38:1c:cb:6e:98:db:
d0:b7:f4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:14:36 2025 by rpki-client