Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft
File: NEwINt1cc7B3WQTqo7foekoMDPU.mft (raw, json)
Hash identifier: EDEU4U8QyN27Ze8+oTKQz9xe0OEnmxZT2H38FMh+LW4=
Subject key identifier: C8:AE:9E:1D:AC:F9:02:0C:31:55:84:A6:45:91:3B:4E:2F:0E:42:65
Authority key identifier: 34:4C:08:36:DD:5C:73:B0:77:59:04:EA:A3:B7:E8:7A:4A:0C:0C:F5
Certificate issuer: /CN=344c0836dd5c73b0775904eaa3b7e87a4a0c0cf5
Certificate serial: 01988D345FA2F2F3C02F6008B3CDA7E34DB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEwINt1cc7B3WQTqo7foekoMDPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft
Manifest number: 1620
Signing time: Sat 09 Aug 2025 05:01:16 +0000
Manifest this update: Sat 09 Aug 2025 05:01:16 +0000
Manifest next update: Sun 10 Aug 2025 05:01:16 +0000
Files and hashes: 1: BTCMCQxXpgg5K5ucl-jfs_-nD0A.roa (hash: 72PY3Qqmz1maPY+ZM8ykIYNT4ZWmcAK3NGiS506bQm0=)
2: NEwINt1cc7B3WQTqo7foekoMDPU.crl (hash: kz2G7zhV3mITEY8wbfYLpr6VHc732dOH7oO0UyBnb/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NEwINt1cc7B3WQTqo7foekoMDPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:34:5f:a2:f2:f3:c0:2f:60:08:b3:cd:a7:e3:4d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344c0836dd5c73b0775904eaa3b7e87a4a0c0cf5
Validity
Not Before: Aug 9 05:01:16 2025 GMT
Not After : Aug 10 05:01:16 2025 GMT
Subject: CN=c8ae9e1dacf9020c315584a645913b4e2f0e4265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:00:d0:f1:95:23:45:bb:85:33:e3:84:fd:09:
5c:66:40:23:32:16:36:bb:fc:2e:db:91:07:e5:de:
8e:7d:38:27:e4:4b:ec:5b:97:d2:69:b8:56:a8:59:
a4:c9:78:2c:11:8e:1e:16:70:0b:1a:f5:ea:d3:9e:
0e:4b:73:b1:fb:f5:ef:f0:10:e5:ab:49:2b:e1:84:
17:c6:ce:36:9f:ed:a0:b9:5f:30:b2:9d:e6:1b:99:
3c:85:9e:7f:c9:5f:ac:07:3e:bb:b9:51:df:fa:b1:
37:b7:72:be:b0:ad:f9:cb:ac:4b:7f:ff:77:81:6d:
91:02:f5:e0:53:7f:76:7e:31:9a:27:ab:2e:3b:d7:
ca:da:1b:bc:2c:ad:b0:6d:c7:aa:a7:64:d4:d1:95:
e0:4d:1b:6b:7e:de:99:2f:53:2d:bf:2f:d6:26:72:
de:8b:de:6a:ff:6f:b5:7d:e4:e5:b5:05:60:cc:a4:
d3:b2:ca:c6:32:9b:aa:48:bb:e7:a3:32:7b:61:70:
74:4f:71:b5:79:67:dd:d8:9a:76:87:ed:81:79:5f:
a7:6a:5d:b3:c1:e9:50:bb:bc:19:9b:00:49:c1:77:
7a:99:f3:28:f8:3f:e9:d1:b3:4c:d5:a3:1e:2b:5c:
6a:6f:80:91:14:7c:b7:b6:03:49:a1:64:7a:34:6e:
f3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AE:9E:1D:AC:F9:02:0C:31:55:84:A6:45:91:3B:4E:2F:0E:42:65
X509v3 Authority Key Identifier:
keyid:34:4C:08:36:DD:5C:73:B0:77:59:04:EA:A3:B7:E8:7A:4A:0C:0C:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEwINt1cc7B3WQTqo7foekoMDPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:95:34:d5:e1:67:3c:c4:5f:c6:4e:3f:ad:61:fe:28:df:cd:
d0:9d:19:aa:df:43:f5:ed:59:76:ec:57:04:4f:71:52:8e:f3:
ca:c5:31:7d:1a:82:4d:94:6e:ff:86:85:c5:2f:ff:a0:9b:14:
c1:a6:b4:3f:ec:ef:2e:9f:93:4d:bb:84:93:9b:63:57:eb:86:
c5:2c:88:e1:e5:7b:8e:dc:c8:fe:a6:b1:a0:02:86:e9:06:d8:
ec:ce:03:94:51:d0:6b:12:d2:35:ab:df:eb:cb:1e:f6:fa:f7:
71:ea:19:74:ac:20:75:77:68:7e:6f:61:a9:48:57:f4:05:75:
50:ca:86:5f:59:62:67:89:a9:73:c1:6b:b2:8c:0f:1a:15:80:
9f:68:70:b8:32:98:bd:4b:ef:15:ab:58:ce:3e:03:83:d6:49:
cb:f6:e6:75:65:e3:ed:71:3e:37:9a:ca:bf:25:5c:34:8e:9b:
96:3d:a6:0e:2c:a4:68:7d:3b:c7:32:5b:53:a0:98:f4:29:15:
01:f5:2b:71:6e:4c:00:9f:20:d7:ec:8d:8a:59:3d:c2:69:ad:
01:7e:67:41:00:0b:d6:75:ae:5a:30:9f:a1:30:26:73:2a:a2:
fd:8b:ae:20:7d:c7:42:a5:12:79:aa:41:c7:ea:fc:fa:a0:26:
21:cd:e9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:35:22 2025 by rpki-client