Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/1d4f36-b97d-4d98-bb2c-b8a27472a896/1/NEGOJrKutuqoFD_XGDD5s1Sue7w.mft
File: NEGOJrKutuqoFD_XGDD5s1Sue7w.mft (raw, json)
Hash identifier: IsG+3tvqojQ9JwL7UPmS008WT/P3Kw68VmlkerOZLOs=
Subject key identifier: 52:99:88:E7:D2:49:B7:F7:ED:1B:57:61:E5:4A:A7:73:37:89:C2:BF
Authority key identifier: 34:41:8E:26:B2:AE:B6:EA:A8:14:3F:D7:18:30:F9:B3:54:AE:7B:BC
Certificate issuer: /CN=34418e26b2aeb6eaa8143fd71830f9b354ae7bbc
Certificate serial: 019896A63F604A4ECDEF9FABD00C603E798F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEGOJrKutuqoFD_XGDD5s1Sue7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/1d4f36-b97d-4d98-bb2c-b8a27472a896/1/NEGOJrKutuqoFD_XGDD5s1Sue7w.mft
Manifest number: 0EFE
Signing time: Mon 11 Aug 2025 01:02:14 +0000
Manifest this update: Mon 11 Aug 2025 01:02:14 +0000
Manifest next update: Tue 12 Aug 2025 01:02:14 +0000
Files and hashes: 1: NEGOJrKutuqoFD_XGDD5s1Sue7w.crl (hash: yNqtJ3k5qBw15cBkR36D95szJkvt76K+idQsRU4yE/4=)
2: nsObN2DjPGcwLXn29XqybNz0hdw.roa (hash: LniUQovzLZtOR3Vslt1uv0Oiv/eQZfXqUz8XebxPz+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/1d4f36-b97d-4d98-bb2c-b8a27472a896/1/NEGOJrKutuqoFD_XGDD5s1Sue7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/1d4f36-b97d-4d98-bb2c-b8a27472a896/1/NEGOJrKutuqoFD_XGDD5s1Sue7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/NEGOJrKutuqoFD_XGDD5s1Sue7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:3f:60:4a:4e:cd:ef:9f:ab:d0:0c:60:3e:79:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34418e26b2aeb6eaa8143fd71830f9b354ae7bbc
Validity
Not Before: Aug 11 01:02:14 2025 GMT
Not After : Aug 12 01:02:14 2025 GMT
Subject: CN=529988e7d249b7f7ed1b5761e54aa7733789c2bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:02:7b:fd:95:e6:d7:8f:b1:58:74:2e:bb:9a:
ad:81:ce:42:d6:ef:c0:0d:09:f2:5d:f4:79:2d:ad:
d0:85:1d:4e:e3:4a:8e:25:db:60:59:da:07:90:de:
6a:ed:e1:e4:07:d7:e7:03:13:6c:79:3e:aa:1f:e5:
f1:51:52:2f:74:10:9c:9a:88:e7:db:78:e3:54:24:
b1:dc:1a:51:19:7f:5f:c1:d2:f4:10:a4:b6:e4:53:
4b:5f:5a:3f:a1:dd:4c:bf:ff:4b:ff:b3:1b:de:de:
f8:de:fc:e2:85:42:12:17:88:38:b6:94:aa:d5:43:
cb:c1:d0:61:19:a7:9e:ad:f8:b2:92:ba:ea:5c:a0:
6d:2d:94:8f:99:ce:83:1d:e2:63:45:1a:16:4b:df:
df:96:91:74:fc:ff:40:78:15:7b:4f:47:cb:93:3c:
eb:e7:14:13:27:26:4a:87:2e:8f:58:c1:37:c8:43:
c5:06:e4:38:76:3f:7f:5d:ea:01:0d:d5:c2:50:3f:
ea:80:75:f9:3c:96:ce:0e:06:e7:78:d2:2b:29:7e:
40:47:34:6f:98:6f:64:c9:76:45:e9:ef:d1:9b:0b:
36:37:fa:8f:e0:20:2c:bd:6b:63:72:11:63:8a:d7:
f3:ed:31:72:cc:75:a8:fd:7f:3a:cb:a7:65:25:ec:
89:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:99:88:E7:D2:49:B7:F7:ED:1B:57:61:E5:4A:A7:73:37:89:C2:BF
X509v3 Authority Key Identifier:
keyid:34:41:8E:26:B2:AE:B6:EA:A8:14:3F:D7:18:30:F9:B3:54:AE:7B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEGOJrKutuqoFD_XGDD5s1Sue7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/1d4f36-b97d-4d98-bb2c-b8a27472a896/1/NEGOJrKutuqoFD_XGDD5s1Sue7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/1d4f36-b97d-4d98-bb2c-b8a27472a896/1/NEGOJrKutuqoFD_XGDD5s1Sue7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:d3:a9:cf:6f:d9:05:95:c0:97:f3:ad:52:34:61:79:12:f7:
98:af:dc:b1:56:e5:6b:03:bc:2a:23:fd:7a:f0:d9:e1:32:45:
89:ea:73:56:c6:2a:24:e8:cf:52:e3:4a:39:96:98:58:b9:ae:
02:19:c3:ff:ba:2d:b7:52:71:73:ac:69:fe:ae:ea:4a:29:a2:
09:ad:52:51:57:89:e9:6b:2f:95:ad:51:90:74:a9:27:db:82:
74:a2:0a:05:f1:aa:9b:0e:4c:a1:b0:72:fc:be:30:a6:7a:7b:
f0:24:4d:ff:f7:99:6d:db:68:f0:73:f3:ec:3a:bf:a7:e4:4a:
c7:84:da:97:5d:70:89:94:bb:a0:c3:c3:7d:91:be:fb:bd:4b:
6d:d6:8e:4e:57:86:ac:d9:b3:f1:59:a5:52:ac:30:09:ed:1a:
e9:bb:d6:ff:c2:2d:99:b4:bb:31:84:fd:9f:d5:11:02:82:d0:
9d:af:d8:81:cc:59:e4:bf:c2:8e:f8:0a:e3:1d:79:e8:ca:f0:
16:9b:3e:27:86:23:72:11:bf:01:bf:b1:65:bb:2b:04:40:1e:
f1:d5:0f:1a:dd:6f:f1:be:88:9c:82:33:7c:6e:ad:1d:b4:3c:
42:c1:55:e3:2a:86:96:ef:87:c4:c3:14:84:65:30:2a:99:0a:
67:a0:e9:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWpj9gSk7N75+r0AxgPnmPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NDE4ZTI2YjJhZWI2ZWFhODE0M2ZkNzE4MzBmOWIzNTRh
ZTdiYmMwHhcNMjUwODExMDEwMjE0WhcNMjUwODEyMDEwMjE0WjAzMTEwLwYDVQQD
Eyg1Mjk5ODhlN2QyNDliN2Y3ZWQxYjU3NjFlNTRhYTc3MzM3ODljMmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AJ7/ZXm14+xWHQuu5qtgc5C1u/A
DQnyXfR5La3QhR1O40qOJdtgWdoHkN5q7eHkB9fnAxNseT6qH+XxUVIvdBCcmojn
23jjVCSx3BpRGX9fwdL0EKS25FNLX1o/od1Mv/9L/7Mb3t743vzihUISF4g4tpSq
1UPLwdBhGaeerfiykrrqXKBtLZSPmc6DHeJjRRoWS9/flpF0/P9AeBV7T0fLkzzr
5xQTJyZKhy6PWME3yEPFBuQ4dj9/XeoBDdXCUD/qgHX5PJbODgbneNIrKX5ARzRv
mG9kyXZF6e/Rmws2N/qP4CAsvWtjchFjitfz7TFyzHWo/X86y6dlJeyJpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFKZiOfSSbf37RtXYeVKp3M3icK/MB8GA1UdIwQY
MBaAFDRBjiayrrbqqBQ/1xgw+bNUrnu8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkVHT0pyS3V0dXFvRkRfWEdERDVzMVN1ZTd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8xZDRmMzYtYjk3ZC00ZDk4LWJiMmMt
YjhhMjc0NzJhODk2LzEvTkVHT0pyS3V0dXFvRkRfWEdERDVzMVN1ZTd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8xZDRmMzYtYjk3ZC00ZDk4LWJiMmMtYjhhMjc0NzJhODk2
LzEvTkVHT0pyS3V0dXFvRkRfWEdERDVzMVN1ZTd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC9Opz2/Z
BZXAl/OtUjRheRL3mK/csVblawO8KiP9evDZ4TJFiepzVsYqJOjPUuNKOZaYWLmu
AhnD/7ott1Jxc6xp/q7qSimiCa1SUVeJ6Wsvla1RkHSpJ9uCdKIKBfGqmw5MobBy
/L4wpnp78CRN//eZbdto8HPz7Dq/p+RKx4Tal11wiZS7oMPDfZG++71LbdaOTleG
rNmz8VmlUqwwCe0a6bvW/8ItmbS7MYT9n9URAoLQna/YgcxZ5L/CjvgK4x156Mrw
Fps+J4YjchG/Ab+xZbsrBEAe8dUPGt1v8b6InIIzfG6tHbQ8QsFV4yqGlu+HxMMU
hGUwKpkKZ6DpEQ==
-----END CERTIFICATE-----
Generated at Mon Aug 11 09:51:13 2025 by rpki-client