Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
File: NW5HRHMdpE8I-l6SxesqR01JqJI.mft (raw, json)
Hash identifier: AOobzeGmkTNV5cVP0PEJRmp7PPc7kM1SQlIWLROp0kE=
Subject key identifier: 29:A3:CC:58:DD:54:DF:7C:6E:09:BA:3F:53:BB:8B:98:AB:1C:68:ED
Authority key identifier: 35:6E:47:44:73:1D:A4:4F:08:FA:5E:92:C5:EB:2A:47:4D:49:A8:92
Certificate issuer: /CN=356e4744731da44f08fa5e92c5eb2a474d49a892
Certificate serial: 01987418F5B53B886A29703FE2B60CE66060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 08:00:49 +0000
Manifest this update: Mon 04 Aug 2025 08:00:49 +0000
Manifest next update: Tue 05 Aug 2025 08:00:49 +0000
Files and hashes: 1: NW5HRHMdpE8I-l6SxesqR01JqJI.crl (hash: gXXoJnhr8RM6Il/+x4w3XMApoix3GMtdbN9xo4HvR84=)
2: sWXWz9KHFQhAxmDZ0n63KNEzRYA.roa (hash: VInHBflevKh8uKrJkW73psQEtmEHrPxva/qTjQRvp1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:f5:b5:3b:88:6a:29:70:3f:e2:b6:0c:e6:60:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356e4744731da44f08fa5e92c5eb2a474d49a892
Validity
Not Before: Aug 4 08:00:49 2025 GMT
Not After : Aug 5 08:00:49 2025 GMT
Subject: CN=29a3cc58dd54df7c6e09ba3f53bb8b98ab1c68ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d2:6e:af:e0:cf:55:92:25:d1:91:61:8b:61:
d4:fc:51:35:64:fb:22:2e:66:7b:31:50:83:6c:66:
b3:d9:2d:42:8d:0e:2e:53:93:6b:02:f2:55:63:6c:
51:12:f6:fb:58:47:89:70:65:c8:d7:fe:12:98:13:
68:60:96:53:47:90:b1:ac:e4:55:97:dd:6a:d7:5f:
cd:78:76:68:98:fd:93:5e:a5:d4:30:a4:de:49:fc:
01:a0:e6:49:31:4a:20:32:a4:8d:c0:74:ce:22:ab:
dc:5c:6b:84:a8:f7:d9:73:35:bc:dd:d0:8f:64:a4:
b3:4f:b9:32:19:f1:83:da:fa:1b:70:45:d7:4a:7e:
13:15:ea:6b:8e:06:cf:da:01:df:c1:c0:62:c8:d2:
27:c1:7a:d3:8c:02:6a:67:8b:ca:04:61:f5:39:26:
78:8b:a2:1b:95:69:20:93:9b:e9:32:9a:56:9d:c1:
6e:f6:fb:0c:91:a1:07:ef:54:86:a1:1b:64:0c:59:
40:c5:e8:7a:5a:c8:ec:9e:f6:d5:61:28:45:cc:f1:
4f:63:b4:aa:23:2f:9b:3e:3a:9c:28:4b:cf:29:0b:
02:33:3e:4a:4a:97:dd:96:8e:bf:38:89:65:31:f7:
d1:28:85:5d:af:5c:2e:51:48:23:f4:7f:9b:b4:bb:
08:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A3:CC:58:DD:54:DF:7C:6E:09:BA:3F:53:BB:8B:98:AB:1C:68:ED
X509v3 Authority Key Identifier:
keyid:35:6E:47:44:73:1D:A4:4F:08:FA:5E:92:C5:EB:2A:47:4D:49:A8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:c7:64:65:6a:e1:c6:4f:e2:a2:e1:36:03:2f:41:4e:1e:86:
f0:4d:d1:90:f5:99:ef:9a:4a:f1:e1:09:51:81:fb:1b:e0:82:
eb:fc:2f:89:ef:05:7f:52:93:f5:ef:8a:ed:7f:eb:12:a0:83:
8e:7e:36:ab:d5:86:87:b1:98:21:f4:8a:15:74:bf:f6:11:ed:
2e:e2:1a:04:47:f8:01:d3:49:c0:a8:69:cb:cb:6c:2f:21:bc:
93:9b:54:d1:c6:15:ee:d8:d5:90:23:57:28:dd:3c:1c:fb:6d:
d9:71:69:1e:30:da:de:71:af:68:a7:17:57:a5:0b:c8:17:7e:
88:a6:5e:0e:f0:b8:75:a4:19:26:25:3d:9f:a0:10:cf:75:34:
22:ad:dd:0e:97:6d:5e:b0:6c:4a:ce:12:50:f1:40:4b:9e:83:
5f:52:a1:e7:5d:fa:bf:35:b9:6b:8c:8d:f5:a5:ee:00:46:73:
80:5b:8d:ce:2f:c9:f1:90:f5:50:ee:ef:85:8f:77:55:3a:f2:
aa:7e:9d:7c:2c:c0:3f:12:ea:ee:e9:19:c7:de:f7:97:14:0d:
c4:fb:b6:e2:30:7a:3e:3f:16:97:0e:ab:a9:c3:22:fd:e8:7c:
1a:5a:9e:93:fe:88:80:c7:ab:5a:bd:6c:0d:24:30:21:7e:01:
d7:28:97:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:46 2025 by rpki-client