Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.mft
File: NwLYaw5xBmjqZtp9zRsUDeweDD0.mft (raw, json)
Hash identifier: AEwu2fu72SuH5lCy080Xi8EjJNeuKdTw3RBCjAON7gA=
Subject key identifier: C3:C7:9E:0C:01:55:8F:DD:1C:58:25:10:88:60:2B:2C:81:CA:5D:59
Authority key identifier: 37:02:D8:6B:0E:71:06:68:EA:66:DA:7D:CD:1B:14:0D:EC:1E:0C:3D
Certificate issuer: /CN=3702d86b0e710668ea66da7dcd1b140dec1e0c3d
Certificate serial: 0197857CAF85B678183578B14C588500B005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NwLYaw5xBmjqZtp9zRsUDeweDD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.mft
Manifest number: 129E
Signing time: Thu 19 Jun 2025 00:00:30 +0000
Manifest this update: Thu 19 Jun 2025 00:00:30 +0000
Manifest next update: Fri 20 Jun 2025 00:00:30 +0000
Files and hashes: 1: 1-S9axjiECoFVFbxoTLP7k8hUrKw.roa (hash: +KpSmdQY0uaMjR1ylAxprXZXg3kf0ZtjvDy8OppLqso=)
2: NwLYaw5xBmjqZtp9zRsUDeweDD0.crl (hash: Idfzfi3WElZHQ5lPA6VhfyKcRhpN9AS6ARE4ohUUE+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NwLYaw5xBmjqZtp9zRsUDeweDD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 23:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:85:7c:af:85:b6:78:18:35:78:b1:4c:58:85:00:b0:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3702d86b0e710668ea66da7dcd1b140dec1e0c3d
Validity
Not Before: Jun 19 00:00:30 2025 GMT
Not After : Jun 20 00:00:30 2025 GMT
Subject: CN=c3c79e0c01558fdd1c58251088602b2c81ca5d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:35:e1:18:f0:0f:57:ef:61:f5:be:d2:95:02:
6f:59:cb:dc:58:e7:c6:c1:01:9e:a8:15:bd:28:0f:
e4:dd:a2:6c:44:da:87:6b:39:99:3e:9d:5d:c6:73:
a4:0a:33:29:b3:d0:16:b8:48:7a:96:10:98:ff:66:
af:1e:0a:3e:1e:81:a8:50:00:1b:f9:1c:7e:c8:db:
0d:dd:a6:9a:72:65:0a:c9:e2:42:b2:cc:d6:66:64:
e4:86:a7:ac:f2:a2:22:21:a7:9f:7c:c4:e3:24:0a:
b2:e9:47:27:3b:91:d2:28:0f:fe:de:10:70:ed:3b:
4c:6a:5f:96:42:f0:56:86:79:a6:aa:48:d4:a9:ea:
db:a4:92:8b:f9:c0:d6:01:81:5f:d1:7c:32:a0:3b:
79:f8:29:79:c9:cb:6c:5e:a3:f6:10:ec:49:bc:08:
18:f4:27:c7:fe:c0:9e:fe:44:8b:64:09:48:a3:b5:
26:c0:9c:61:da:d5:6e:34:60:44:ca:50:3e:cd:16:
39:fc:ec:9a:f4:82:4f:2c:f1:0b:de:4d:08:01:8a:
cf:ee:c1:3f:a4:a6:a3:70:1b:e4:83:2c:3e:28:66:
31:1b:ba:4e:14:29:22:56:01:1d:88:f4:5f:01:84:
da:04:c6:0d:60:dc:f7:6c:7f:91:97:59:09:d6:76:
6b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C7:9E:0C:01:55:8F:DD:1C:58:25:10:88:60:2B:2C:81:CA:5D:59
X509v3 Authority Key Identifier:
keyid:37:02:D8:6B:0E:71:06:68:EA:66:DA:7D:CD:1B:14:0D:EC:1E:0C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NwLYaw5xBmjqZtp9zRsUDeweDD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:d2:1e:34:23:5f:91:8f:68:2e:b3:00:12:9c:11:87:1c:19:
ca:15:4f:b6:c4:d1:1f:c5:48:5a:ca:d1:6e:bb:73:59:27:09:
a3:5e:3f:50:fd:59:2a:a5:87:e2:ee:da:2b:80:41:75:6d:d4:
6a:12:76:d3:ee:25:88:1c:68:d8:04:4b:3c:32:6c:98:7e:89:
f0:3c:7b:2f:ba:16:06:c5:d5:89:5f:c0:be:5e:16:55:01:3e:
36:1a:54:bf:fd:d3:e4:da:f4:e7:bf:c7:81:18:76:a1:d9:64:
a5:5b:53:62:c9:9c:a0:a5:1a:dd:47:27:22:a7:57:85:ad:21:
cf:05:c8:ed:db:0b:8d:80:18:b5:eb:a3:5e:a6:89:e8:95:88:
ea:80:2e:02:87:47:8e:f3:8d:27:e1:f9:76:d1:bf:f1:98:c1:
40:87:a5:04:3f:d2:7d:8f:6f:b2:83:8f:b7:af:77:d3:ba:47:
a3:31:10:25:ac:dc:13:eb:4c:9e:a9:48:33:6d:a4:b3:a6:78:
f2:58:f1:41:db:ce:49:53:d6:61:04:47:2d:23:46:b2:b3:8d:
a8:07:72:b7:10:8e:36:75:4e:a3:bc:52:2b:ba:89:90:02:03:
66:78:51:c8:5f:79:de:a8:97:eb:8f:d4:56:45:0d:f8:c4:bb:
7c:32:d7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 09:17:10 2025 by rpki-client