Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
File: NeXw-_PWvzoWokvseAyw_W7fMec.mft (raw, json)
Hash identifier: QsxED1+ik6UHWgHZnXVu8+fHI8VTP/6cr7n0w+irj2k=
Subject key identifier: CC:97:A7:36:4D:E9:80:DA:80:14:1D:08:0F:60:E8:0A:FF:FF:1E:77
Authority key identifier: 35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7
Certificate issuer: /CN=35e5f0fbf3d6bf3a16a24bec780cb0fd6edf31e7
Certificate serial: 019779424ECF5CA5DB42C45DD4A8E5BC3228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
Manifest number: 0DD9
Signing time: Mon 16 Jun 2025 15:01:18 +0000
Manifest this update: Mon 16 Jun 2025 15:01:18 +0000
Manifest next update: Tue 17 Jun 2025 15:01:18 +0000
Files and hashes: 1: NeXw-_PWvzoWokvseAyw_W7fMec.crl (hash: h8HCWvLyV3AGZcFnrlwWbCEARTKe8E5Lm5KfeC6yBHY=)
2: PmVcb6mc4PNxZC_ptgP_O-XbGLI.roa (hash: pKGXoSvQeFa7SbcSS7sBYIQ1DYaO2+BzF5Gj11hr5Ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:42:4e:cf:5c:a5:db:42:c4:5d:d4:a8:e5:bc:32:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e5f0fbf3d6bf3a16a24bec780cb0fd6edf31e7
Validity
Not Before: Jun 16 15:01:18 2025 GMT
Not After : Jun 17 15:01:18 2025 GMT
Subject: CN=cc97a7364de980da80141d080f60e80affff1e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c1:df:d9:43:b9:0a:f4:82:85:db:38:33:14:
81:ea:da:54:86:e4:06:9a:d4:60:07:af:d2:af:30:
86:43:ed:44:bd:76:26:93:97:ab:2e:31:95:ff:9d:
47:7a:6e:df:c7:38:2e:47:91:29:b1:65:8f:ad:f0:
f5:7b:af:01:4e:72:d9:71:59:e0:cf:1b:76:21:2e:
d8:03:53:b1:d8:17:67:a7:42:9e:07:db:e2:d1:b1:
90:1e:53:7c:25:4b:02:c5:4b:fe:3c:97:5f:85:1f:
7b:73:66:71:48:4b:1b:cf:32:56:3b:21:67:3d:16:
61:67:a4:2a:26:02:ac:02:d1:08:8a:f4:25:f3:93:
7a:b4:84:f2:83:ad:9a:b0:44:6d:53:41:db:73:e1:
a4:bc:70:99:31:7f:48:cf:ff:4e:f2:e1:06:35:ba:
71:45:ce:a4:64:23:27:8b:c6:02:f9:b2:74:16:0a:
d3:a4:30:63:a3:5e:1b:f9:41:55:38:5a:cb:64:e5:
07:0a:4f:e9:c9:e9:8f:1f:f4:62:ca:06:da:96:a0:
a9:9a:31:53:9d:e0:57:dc:b1:7b:b0:ca:84:92:a6:
e3:80:6c:03:cb:8b:ab:b4:a4:cd:52:04:57:13:64:
51:62:c1:60:5c:60:a7:f1:01:b7:ae:93:13:f6:01:
ad:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:97:A7:36:4D:E9:80:DA:80:14:1D:08:0F:60:E8:0A:FF:FF:1E:77
X509v3 Authority Key Identifier:
keyid:35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:89:95:1f:35:1f:89:b8:b0:18:8c:25:a8:d4:93:13:49:cf:
83:cc:57:00:08:69:ac:a3:0d:bb:c2:31:32:2d:c8:e7:bf:70:
99:d0:bb:0a:f2:a6:95:8f:5d:74:a7:75:cc:9f:80:06:2d:5b:
8f:c9:2b:2a:d7:c5:bd:2e:2c:da:18:6f:54:a5:e4:40:72:f6:
7f:93:25:7c:8a:04:ee:16:5b:ca:19:ee:93:72:8b:dd:1b:f1:
93:a7:f3:71:79:f5:9c:94:58:0f:a8:69:05:00:0c:e3:64:34:
4c:1b:c4:db:32:04:da:44:9b:e5:e5:48:05:8e:4f:22:f3:ce:
66:24:6e:0f:02:88:e3:83:1e:d8:04:55:50:7f:98:50:c8:fb:
29:64:70:28:32:37:77:c8:95:e7:5e:b5:40:41:11:7b:ff:2d:
7f:bb:08:00:57:c6:0d:7d:14:e9:cd:93:57:25:6d:d4:70:b8:
28:67:f8:c3:69:45:e0:23:42:68:d5:9d:8a:4e:2a:a1:12:d2:
6f:37:0c:b5:dc:f9:a3:1c:29:af:b2:fa:8c:4b:a3:6c:c6:d3:
c2:8c:51:e6:1f:6a:7a:ed:0a:49:8f:b3:3c:3a:65:c7:25:f8:
c7:66:5c:00:61:03:be:79:41:9c:40:7a:ea:f4:5f:5a:c3:f1:
98:80:87:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:32:16 2025 by rpki-client