Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
File: NePUvxvA-BcoIF5R3gl884Ogzck.mft (raw, json)
Hash identifier: 8G6kzJYVbkO0Tgtwbht5sSSEyR7CxvSx4ncNpMGr03I=
Subject key identifier: 57:6A:C3:0D:0B:4A:BF:2B:EE:A9:BF:97:DE:78:7A:38:D3:21:33:AF
Authority key identifier: 35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
Certificate issuer: /CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Certificate serial: 01988356F3AFF2F9D5443C24CD2BAC96AFB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
Manifest number: 155E
Signing time: Thu 07 Aug 2025 07:02:50 +0000
Manifest this update: Thu 07 Aug 2025 07:02:50 +0000
Manifest next update: Fri 08 Aug 2025 07:02:50 +0000
Files and hashes: 1: 0RltyGXYqOw5Hx9cC0hpgbUGn1M.roa (hash: mg2bYRQawjXXkuGc/ehoyx4cItI7XGim10ZVkynzOuM=)
2: NePUvxvA-BcoIF5R3gl884Ogzck.crl (hash: e6KCxbYGu65z1WRFAv0QAdQ05R4IT4XJ9/ITHUsuw3w=)
3: cC3qEyLwvQCoEx0E8fa6hCQIIMk.roa (hash: t6q5YnGG2tDRloa96C40IAzp6BUV/ndP0HTUzMGh9cA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:56:f3:af:f2:f9:d5:44:3c:24:cd:2b:ac:96:af:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Validity
Not Before: Aug 7 07:02:50 2025 GMT
Not After : Aug 8 07:02:50 2025 GMT
Subject: CN=576ac30d0b4abf2beea9bf97de787a38d32133af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ab:bd:db:d4:58:3d:cf:cc:17:e9:ea:69:90:
ef:9b:1b:fc:f0:31:95:7d:b1:23:cb:6d:40:0f:44:
5a:7e:f7:12:49:75:d9:51:5b:49:f4:ec:e7:43:3b:
81:b0:26:5c:fb:71:77:4c:ef:e3:14:3e:d0:61:4b:
85:68:8a:72:d3:04:70:26:9e:d2:88:a7:6e:b2:40:
0f:cf:36:8f:7a:a9:c0:b7:d1:00:ee:18:ca:f0:83:
a4:75:67:a0:04:ca:e4:be:ed:2e:4f:17:f9:d4:2a:
3c:29:41:c2:0c:82:b7:55:70:80:51:3b:95:45:b3:
33:09:74:bd:52:a4:73:19:da:5f:13:46:b8:e5:5b:
2a:c5:54:f8:8a:92:57:45:a0:ab:34:1d:9c:c0:b7:
1d:fc:71:bc:0c:13:73:3c:07:a2:24:b2:57:fc:13:
f0:fd:c8:7c:43:ef:c8:2e:b1:8c:d0:28:02:f8:63:
2a:a7:03:00:bb:e9:65:d1:77:b5:fc:12:20:e6:c9:
f5:82:cd:7a:27:c3:c7:24:f8:4a:b5:f3:29:f6:05:
78:c6:0e:64:2f:b5:a4:2a:48:88:0a:37:de:2a:29:
f9:00:62:c2:56:d5:af:ae:71:42:bd:4a:78:24:8a:
b8:e3:4b:62:78:db:91:37:1e:5d:03:9f:1b:5e:4c:
30:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:6A:C3:0D:0B:4A:BF:2B:EE:A9:BF:97:DE:78:7A:38:D3:21:33:AF
X509v3 Authority Key Identifier:
keyid:35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:7c:ad:d0:25:e1:a7:20:9e:86:58:98:60:de:42:b5:dd:2b:
1c:0b:22:b2:6b:f0:6c:30:89:a9:5c:1f:26:6b:15:9c:8f:83:
17:3a:56:e9:0f:6a:30:be:01:74:4d:14:01:45:12:5f:e8:04:
84:49:9f:d7:dc:51:2a:38:3e:98:67:05:b9:9a:68:9f:5d:20:
54:41:06:89:c0:06:d5:2b:01:fe:7e:df:47:c9:2f:db:75:e4:
f2:d8:08:36:52:d8:0a:f9:ec:42:57:95:55:8d:17:06:c0:4e:
85:ab:9c:72:0c:70:ee:80:3a:6e:6f:fd:b7:2b:67:7a:0f:a3:
ac:51:99:dd:2e:48:ce:cc:62:c6:75:f5:d1:8b:86:41:15:1b:
bd:bc:ef:97:d3:73:5a:ae:93:33:7c:b8:89:14:6b:e1:a6:04:
eb:73:af:3f:89:dd:d5:7c:7b:f9:7a:ca:cb:42:6d:3a:ec:0a:
df:24:99:8e:40:62:68:d5:df:9e:7c:93:97:37:8d:80:c9:6b:
14:c2:ec:d2:de:d3:88:9e:5b:82:64:fa:cd:23:21:d8:03:5b:
d0:be:91:1d:fb:9b:bc:d8:17:95:a2:a1:4d:6d:bd:be:bf:fb:
78:d0:3f:fe:b9:93:47:e5:ef:e7:3b:3b:54:69:6b:0a:bc:b8:
5f:7e:71:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:49:35 2025 by rpki-client