Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft
File: NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft (raw, json)
Hash identifier: ls5OSJEiqe5DFQhQFAg4q9G/CtYtvarGWvNCoJ4kbow=
Subject key identifier: 33:47:81:4B:0D:65:4D:62:12:12:D8:44:63:37:C6:62:45:EE:84:87
Authority key identifier: 34:01:23:43:A6:2F:3F:09:B5:5C:DB:C0:1E:75:C3:82:12:A2:35:DF
Certificate issuer: /CN=34012343a62f3f09b55cdbc01e75c38212a235df
Certificate serial: 01989CA727BA09E193EFB78E558796445FE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAEjQ6YvPwm1XNvAHnXDghKiNd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft
Manifest number: 0E31
Signing time: Tue 12 Aug 2025 05:00:57 +0000
Manifest this update: Tue 12 Aug 2025 05:00:57 +0000
Manifest next update: Wed 13 Aug 2025 05:00:57 +0000
Files and hashes: 1: NAEjQ6YvPwm1XNvAHnXDghKiNd8.crl (hash: Zg88H5xNZ1HPTV7ecrLE80KR0fETyBUVgu9q2UysM2k=)
2: hRAHaXw08T46yQXdPdRGo5FEyKc.roa (hash: kanS0GeR3i8daBZU7h/NZ29VRbj73ZfNj0diMdbJ7lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAEjQ6YvPwm1XNvAHnXDghKiNd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9c:a7:27:ba:09:e1:93:ef:b7:8e:55:87:96:44:5f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34012343a62f3f09b55cdbc01e75c38212a235df
Validity
Not Before: Aug 12 05:00:57 2025 GMT
Not After : Aug 13 05:00:57 2025 GMT
Subject: CN=3347814b0d654d621212d8446337c66245ee8487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:11:72:b6:6b:98:10:79:45:a6:29:57:44:23:
66:ca:3d:d3:f4:0b:a7:b8:90:37:0f:53:07:f4:f5:
8c:34:76:df:ac:7b:14:4f:68:54:92:6a:57:67:f7:
d5:b9:a9:b4:4b:7d:e7:0e:df:f6:86:44:c9:95:2d:
70:29:ce:cf:15:24:6a:ae:0f:92:31:24:eb:9b:2d:
49:99:3f:73:fc:f1:c4:f2:26:ca:3b:1e:8f:0d:48:
15:89:f7:af:f0:69:fe:34:50:32:a6:05:bd:c5:83:
29:a0:35:ff:ab:9b:cd:1f:a3:a9:a9:a1:20:3a:d7:
f7:75:a5:35:f2:45:c5:23:a8:2a:b3:ff:cc:aa:b5:
ff:f1:5f:dd:23:4d:a1:d8:71:5a:25:3c:16:1f:ee:
07:c6:f4:d3:3e:0c:05:0d:a4:ff:6c:6e:0c:9e:53:
22:5b:4e:e5:82:16:e2:d9:f9:84:29:16:07:eb:fa:
98:17:66:e9:1e:22:21:91:c0:bb:28:ba:f1:7a:5b:
76:ba:c8:c0:57:ff:00:48:e6:3c:e1:7a:7b:95:58:
e5:da:93:94:ec:19:53:31:73:30:61:c8:43:30:d1:
ea:09:3f:b2:73:40:92:31:15:cc:e4:85:05:c2:bc:
9a:14:f1:0c:4b:77:23:89:38:07:82:c9:2f:73:e8:
db:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:47:81:4B:0D:65:4D:62:12:12:D8:44:63:37:C6:62:45:EE:84:87
X509v3 Authority Key Identifier:
keyid:34:01:23:43:A6:2F:3F:09:B5:5C:DB:C0:1E:75:C3:82:12:A2:35:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAEjQ6YvPwm1XNvAHnXDghKiNd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:3c:e8:d5:a3:95:60:93:69:20:ea:91:25:ff:af:53:1b:60:
df:45:cc:a9:f2:2c:8d:e6:1e:8d:89:53:90:2a:a0:20:71:27:
dc:b3:00:14:38:25:43:e3:51:97:f6:2e:3a:ff:3f:52:fe:6f:
fb:e4:8b:bf:6a:bd:4a:bf:e9:04:10:c2:89:7e:1d:43:30:95:
7b:74:16:40:42:59:73:4f:17:de:81:8b:18:bf:07:dc:46:02:
b6:75:8a:ce:f9:49:0e:83:44:d1:a5:7f:a5:26:ed:4c:ad:f2:
5e:7d:a9:8d:6a:8d:eb:ee:2f:e8:63:eb:a4:56:7d:80:6c:6c:
53:df:4a:a9:63:d3:c3:02:07:d8:78:06:82:8c:e7:1f:98:3d:
30:b4:f9:08:d3:b4:4f:81:d5:c2:ef:f8:8b:41:22:44:b1:19:
bc:a3:3c:f6:18:45:06:b9:fa:0f:9e:8a:44:7d:21:6b:71:13:
47:fc:dc:38:3a:bc:aa:fd:f6:68:0a:a1:0d:00:6f:92:f3:02:
b2:62:b4:3d:e6:ef:7a:be:77:c4:71:82:3b:86:23:4f:13:f4:
d9:28:28:24:2d:61:14:52:a1:95:57:26:b6:60:a1:74:d8:70:
fd:03:83:52:29:81:fd:8f:af:87:e4:9b:35:15:dc:bf:77:99:
18:1d:9d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 14:33:53 2025 by rpki-client