Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft
File: NEwINt1cc7B3WQTqo7foekoMDPU.mft (raw, json)
Hash identifier: vvx7Qq8PUJG7scmOHKE+MnsO265Gd6ONfoGSxRrUVQY=
Subject key identifier: A8:A1:D9:1B:08:48:AF:D6:88:CA:35:89:3B:0B:7A:CE:C8:95:CF:54
Authority key identifier: 34:4C:08:36:DD:5C:73:B0:77:59:04:EA:A3:B7:E8:7A:4A:0C:0C:F5
Certificate issuer: /CN=344c0836dd5c73b0775904eaa3b7e87a4a0c0cf5
Certificate serial: 0197771C77A069478B3A6DB6BDFE978F2E65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEwINt1cc7B3WQTqo7foekoMDPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft
Manifest number: 1590
Signing time: Mon 16 Jun 2025 05:00:43 +0000
Manifest this update: Mon 16 Jun 2025 05:00:43 +0000
Manifest next update: Tue 17 Jun 2025 05:00:43 +0000
Files and hashes: 1: BTCMCQxXpgg5K5ucl-jfs_-nD0A.roa (hash: 72PY3Qqmz1maPY+ZM8ykIYNT4ZWmcAK3NGiS506bQm0=)
2: NEwINt1cc7B3WQTqo7foekoMDPU.crl (hash: JLF9+wsQDp3KEtp2g3LeUoz4udpEFImJV/S+Lah08Ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NEwINt1cc7B3WQTqo7foekoMDPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:1c:77:a0:69:47:8b:3a:6d:b6:bd:fe:97:8f:2e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344c0836dd5c73b0775904eaa3b7e87a4a0c0cf5
Validity
Not Before: Jun 16 05:00:43 2025 GMT
Not After : Jun 17 05:00:43 2025 GMT
Subject: CN=a8a1d91b0848afd688ca35893b0b7acec895cf54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:02:dc:27:a9:cf:39:f5:aa:e9:96:10:de:f5:
36:40:0f:5c:9b:66:3b:35:7b:8c:81:2a:32:43:5a:
36:ee:c8:4c:5f:71:60:b6:dd:ae:37:42:ff:7e:b7:
cf:51:5a:6f:89:16:e7:09:dc:40:84:32:13:4f:fe:
11:4d:2d:3b:81:4f:32:4f:5f:f4:ae:68:21:3b:f1:
c1:30:05:26:90:14:88:b2:72:c3:23:24:12:20:4b:
27:84:05:0c:56:94:60:91:c7:1e:e3:07:b9:df:0f:
74:fa:d3:1f:c0:da:6e:29:17:c1:c4:46:2a:0f:99:
e8:3b:d1:1c:9e:75:f3:1a:ae:b0:ba:54:67:75:f0:
75:85:7e:44:a5:7c:4d:9e:94:6e:7e:7a:ca:fb:12:
6a:9e:89:9d:ca:63:20:3b:df:29:a8:b0:43:de:5d:
2d:9e:09:9e:00:ee:e4:cc:7f:40:83:04:89:53:79:
cc:84:6d:9c:dc:2e:c3:f7:58:ea:74:94:3c:f1:c8:
f8:83:6b:8e:c9:ea:6b:0e:4b:5d:c8:37:80:3a:21:
40:b6:3f:5f:a2:8f:79:f3:8b:55:13:00:7e:94:8e:
9f:50:94:44:0a:33:f1:3a:be:2f:25:72:a1:47:69:
aa:50:61:e4:a9:20:30:c5:4f:de:b8:95:fd:0a:8d:
d5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A1:D9:1B:08:48:AF:D6:88:CA:35:89:3B:0B:7A:CE:C8:95:CF:54
X509v3 Authority Key Identifier:
keyid:34:4C:08:36:DD:5C:73:B0:77:59:04:EA:A3:B7:E8:7A:4A:0C:0C:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEwINt1cc7B3WQTqo7foekoMDPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:1a:1b:d3:1a:ef:18:e4:97:42:d5:3c:53:14:ea:4a:59:08:
52:80:c1:dc:ea:fd:1e:e8:20:c8:01:a1:c5:f6:8e:f0:55:a5:
4b:a7:32:9e:1b:82:50:6b:38:79:be:6a:c6:cf:b6:5e:74:79:
61:39:45:ca:d2:e8:ea:4f:e5:fb:8e:9b:da:85:a9:27:62:bf:
4f:44:c0:53:22:df:be:c9:ca:5a:65:b9:a5:89:88:30:e7:c3:
20:18:0a:8a:f0:25:e4:39:ec:13:d3:54:41:a9:26:94:f1:9b:
98:10:df:94:74:9a:63:49:11:02:8a:34:02:c0:16:c9:b2:da:
86:7f:e8:c5:33:92:4c:93:d4:6f:d7:1f:41:83:87:bd:56:b8:
8c:04:77:49:a8:bd:26:e2:f1:e7:93:b3:d0:45:0b:e4:b3:a3:
7b:37:34:98:9c:8f:2d:58:db:cb:3e:77:ed:8d:36:2f:16:fa:
7a:57:fe:d9:e9:32:7e:fa:af:49:54:ae:ca:e8:5c:bc:34:75:
e0:e2:e6:9f:44:03:de:83:fc:54:08:66:be:e1:ba:32:95:3c:
fb:b4:ab:c7:53:be:b2:60:d4:e5:47:e7:f8:fc:2d:c8:60:51:
1c:74:fb:8a:8f:cd:17:14:98:73:bf:d2:50:50:49:3e:b0:20:
92:11:fe:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd3HHegaUeLOm22vf6Xjy5lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NGMwODM2ZGQ1YzczYjA3NzU5MDRlYWEzYjdlODdhNGEw
YzBjZjUwHhcNMjUwNjE2MDUwMDQzWhcNMjUwNjE3MDUwMDQzWjAzMTEwLwYDVQQD
EyhhOGExZDkxYjA4NDhhZmQ2ODhjYTM1ODkzYjBiN2FjZWM4OTVjZjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wLcJ6nPOfWq6ZYQ3vU2QA9cm2Y7
NXuMgSoyQ1o27shMX3Fgtt2uN0L/frfPUVpviRbnCdxAhDITT/4RTS07gU8yT1/0
rmghO/HBMAUmkBSIsnLDIyQSIEsnhAUMVpRgkcce4we53w90+tMfwNpuKRfBxEYq
D5noO9EcnnXzGq6wulRndfB1hX5EpXxNnpRufnrK+xJqnomdymMgO98pqLBD3l0t
ngmeAO7kzH9AgwSJU3nMhG2c3C7D91jqdJQ88cj4g2uOyeprDktdyDeAOiFAtj9f
oo9584tVEwB+lI6fUJRECjPxOr4vJXKhR2mqUGHkqSAwxU/euJX9Co3VGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKih2RsISK/WiMo1iTsLes7Ilc9UMB8GA1UdIwQY
MBaAFDRMCDbdXHOwd1kE6qO36HpKDAz1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkV3SU50MWNjN0IzV1FUcW83Zm9la29NRFBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8wMTBkYzMtNGNlZi00NGUzLWFlOTIt
MTllMTM0NzEyZTkyLzEvTkV3SU50MWNjN0IzV1FUcW83Zm9la29NRFBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8wMTBkYzMtNGNlZi00NGUzLWFlOTItMTllMTM0NzEyZTky
LzEvTkV3SU50MWNjN0IzV1FUcW83Zm9la29NRFBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOhob0xrv
GOSXQtU8UxTqSlkIUoDB3Or9HuggyAGhxfaO8FWlS6cynhuCUGs4eb5qxs+2XnR5
YTlFytLo6k/l+46b2oWpJ2K/T0TAUyLfvsnKWmW5pYmIMOfDIBgKivAl5DnsE9NU
QakmlPGbmBDflHSaY0kRAoo0AsAWybLahn/oxTOSTJPUb9cfQYOHvVa4jAR3Sai9
JuLx55Oz0EUL5LOjezc0mJyPLVjbyz537Y02Lxb6elf+2ekyfvqvSVSuyuhcvDR1
4OLmn0QD3oP8VAhmvuG6MpU8+7Srx1O+smDU5Ufn+PwtyGBRHHT7io/NFxSYc7/S
UFBJPrAgkhH+xg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 14:50:03 2025 by rpki-client