Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
File: Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft (raw, json)
Hash identifier: a60UcWU2LYpuX9BGsVdUBVp5MahyQDsoCbbdyOwah4Y=
Subject key identifier: DE:F9:54:A0:CB:55:A8:20:28:12:02:ED:85:1E:4C:89:D7:39:22:44
Authority key identifier: 35:EF:79:C5:1E:3F:A0:84:33:20:64:AA:0B:83:60:8D:6E:41:C1:2B
Certificate issuer: /CN=35ef79c51e3fa084332064aa0b83608d6e41c12b
Certificate serial: 01987BD288A02DAFF1C310D8E16A18CFF1D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
Manifest number: 051F
Signing time: Tue 05 Aug 2025 20:00:51 +0000
Manifest this update: Tue 05 Aug 2025 20:00:51 +0000
Manifest next update: Wed 06 Aug 2025 20:00:51 +0000
Files and hashes: 1: Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl (hash: 968Fg4avqtRQXhv5S/qIEB0Cb2AX09oxc9yP8iVSAbE=)
2: _potATJqOaFRbfrrUyC81tvt8bE.roa (hash: uJ4lvA5jV+wv5Fa9R4ZV8hLyulLrozYlDZcFmzcOKdA=)
3: iO_CtKh3Y4ZrGmH0YqMWnYKlZNg.roa (hash: P3pxw91zYoBZsgP5Nx/MtBU2YXLYa7WtbiOEl2i4Gb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:88:a0:2d:af:f1:c3:10:d8:e1:6a:18:cf:f1:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ef79c51e3fa084332064aa0b83608d6e41c12b
Validity
Not Before: Aug 5 20:00:51 2025 GMT
Not After : Aug 6 20:00:51 2025 GMT
Subject: CN=def954a0cb55a820281202ed851e4c89d7392244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5e:ca:76:c7:3b:c9:6a:e0:83:62:ac:5e:37:
6e:02:9b:b0:86:9b:4b:c9:ba:2a:c8:28:7d:82:dc:
de:cc:31:5a:be:f3:7a:1d:85:c9:3b:0b:14:05:bf:
0e:b8:9b:f9:48:83:1d:9b:bb:b9:a5:86:50:77:a7:
1b:50:cf:76:a7:7e:fa:fe:06:e6:64:71:7e:88:93:
f5:d0:bc:8a:5e:96:9d:63:df:d1:23:65:8c:02:c1:
61:d0:87:f4:aa:17:96:13:af:91:81:ab:91:1c:ab:
cb:53:24:f3:23:21:0f:e9:4c:5c:03:a3:1a:df:62:
09:77:25:02:2c:90:f3:6c:85:7b:c0:76:fd:1f:f9:
c1:e8:63:2e:03:b5:89:a8:4c:43:23:6d:77:ec:71:
df:a2:a8:88:24:67:d1:bc:ca:75:3b:d4:64:32:c9:
68:65:68:59:19:d0:83:4a:4e:da:19:9e:cb:5c:9f:
1c:ab:b6:85:52:9b:76:e8:c6:8d:15:4f:14:bb:e7:
a1:89:60:5e:34:34:37:ce:89:fb:55:d5:cd:1d:38:
dc:8c:ab:d4:92:18:5e:8a:ba:75:02:5f:7e:30:ca:
20:96:2c:d6:45:4b:01:30:fd:02:7f:ef:6e:31:50:
c7:24:b8:39:1c:22:2f:19:66:a0:aa:3c:e8:f0:d1:
2c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F9:54:A0:CB:55:A8:20:28:12:02:ED:85:1E:4C:89:D7:39:22:44
X509v3 Authority Key Identifier:
keyid:35:EF:79:C5:1E:3F:A0:84:33:20:64:AA:0B:83:60:8D:6E:41:C1:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ba:9f:ec:b5:00:76:b0:c4:95:16:a8:0a:97:e5:bd:3b:0d:
0a:bb:83:2c:15:0f:38:78:e8:c4:44:12:7c:50:68:82:ef:5d:
b9:d9:ca:d5:df:d6:7a:17:14:21:4b:f9:f2:ce:d5:ab:df:d7:
24:f4:83:5d:1f:09:54:f4:60:69:3e:ca:77:5e:08:c3:3a:9a:
35:ba:e6:ef:8a:86:65:11:67:e9:62:6d:1a:7d:e2:43:bf:4c:
af:75:a6:28:3f:cb:a2:e1:09:1a:91:03:b4:b9:66:74:73:a3:
00:e5:a3:39:e3:c0:68:32:f2:49:e7:47:4f:ab:69:31:1a:ce:
cb:07:37:0e:62:d0:37:79:87:ef:15:e2:7f:0f:8e:1c:45:d8:
a3:f0:d3:53:0d:28:a7:f6:7b:31:1d:02:9e:5d:fd:b3:0c:a7:
ad:8c:05:e9:b1:8a:4b:e7:c3:72:48:42:bd:1f:73:7c:fe:14:
1f:f6:e3:d3:df:4e:0d:87:37:7a:9c:32:a5:44:cb:ad:e0:d8:
39:60:d3:58:3d:26:0e:63:04:f4:11:00:a1:f8:d8:d1:a5:09:
83:3a:73:7e:b9:eb:00:18:de:74:91:0d:7b:78:9f:51:f0:fc:
e3:27:62:2d:86:03:73:2f:11:b0:73:0b:87:77:c6:a8:3e:b6:
05:3f:cb:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:55:21 2025 by rpki-client