Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.mft
File: NwLYaw5xBmjqZtp9zRsUDeweDD0.mft (raw, json)
Hash identifier: bjbv25dwybyE0944RyPUxrg6v2Q2UniNff8bVp5CeC0=
Subject key identifier: 2F:68:5A:C4:80:9A:68:98:89:20:A6:C4:4A:72:FB:D8:59:B1:4C:B3
Authority key identifier: 37:02:D8:6B:0E:71:06:68:EA:66:DA:7D:CD:1B:14:0D:EC:1E:0C:3D
Certificate issuer: /CN=3702d86b0e710668ea66da7dcd1b140dec1e0c3d
Certificate serial: 0197B7B30E617DF623B530695D9FB69D2C08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NwLYaw5xBmjqZtp9zRsUDeweDD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.mft
Manifest number: 12B8
Signing time: Sat 28 Jun 2025 18:00:54 +0000
Manifest this update: Sat 28 Jun 2025 18:00:54 +0000
Manifest next update: Sun 29 Jun 2025 18:00:54 +0000
Files and hashes: 1: 1-S9axjiECoFVFbxoTLP7k8hUrKw.roa (hash: +KpSmdQY0uaMjR1ylAxprXZXg3kf0ZtjvDy8OppLqso=)
2: NwLYaw5xBmjqZtp9zRsUDeweDD0.crl (hash: PjP7xRtjxb3DOwk48YBb/JGER7PmqSX921o/ree6HYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NwLYaw5xBmjqZtp9zRsUDeweDD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:0e:61:7d:f6:23:b5:30:69:5d:9f:b6:9d:2c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3702d86b0e710668ea66da7dcd1b140dec1e0c3d
Validity
Not Before: Jun 28 18:00:54 2025 GMT
Not After : Jun 29 18:00:54 2025 GMT
Subject: CN=2f685ac4809a68988920a6c44a72fbd859b14cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e8:79:37:aa:a7:06:20:bc:88:e2:47:4e:00:
4b:54:43:22:3c:26:dd:7a:3a:80:68:5a:45:b1:e1:
25:f4:df:9e:46:51:e9:a5:ee:21:c4:cf:7b:79:43:
ec:12:36:57:7f:ee:80:f7:3c:6c:31:f8:a5:95:24:
2c:d5:b4:a6:8a:6a:7d:ef:b1:15:1a:3f:0a:36:1a:
7a:b7:40:85:57:fa:75:c1:f3:19:62:87:ca:ba:8c:
bb:e9:1d:9b:ee:0d:5f:1a:ea:58:44:a0:a4:d2:8f:
73:ba:82:86:e3:d1:8f:aa:06:da:ce:ce:34:64:f4:
34:e0:86:b4:8e:bc:1c:8c:55:9f:83:12:bb:b6:17:
09:5b:4d:5d:13:34:e7:e4:e1:4b:a1:80:7a:59:87:
5c:f2:87:27:84:ad:92:8f:98:85:c1:4a:d1:19:3b:
a0:47:9d:bc:df:ea:4a:74:34:fe:79:06:ab:e5:f8:
71:e4:cf:0f:dd:93:02:f3:45:02:43:7f:4b:f6:3c:
a6:b8:51:dd:df:7a:71:ba:09:15:14:63:22:55:2c:
7d:6f:15:52:5c:29:f2:a7:1a:f4:3e:47:ae:38:dc:
b1:bc:4a:1a:8f:3e:d9:f7:1e:a5:54:14:2c:cd:e6:
77:b3:16:63:cd:8d:07:5d:09:db:74:cc:88:e4:46:
70:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:68:5A:C4:80:9A:68:98:89:20:A6:C4:4A:72:FB:D8:59:B1:4C:B3
X509v3 Authority Key Identifier:
keyid:37:02:D8:6B:0E:71:06:68:EA:66:DA:7D:CD:1B:14:0D:EC:1E:0C:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NwLYaw5xBmjqZtp9zRsUDeweDD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f6:82:79:bc:92:5e:d4:ba:dd:2e:07:75:e0:28:e3:d7:d7:
a4:9a:ae:f1:09:ea:bf:f0:c9:41:ac:cf:cc:42:f9:9a:d6:6b:
10:14:b7:0f:70:d8:60:e9:2a:97:49:45:0a:d7:cd:75:b4:8a:
86:68:b1:e2:0a:d6:1b:b7:c3:3f:4d:0e:9d:b8:36:ce:01:13:
74:b4:24:ef:f6:7b:b4:f9:a6:1c:ed:37:9c:d5:db:c2:fa:79:
f6:95:f1:fa:58:b3:b4:4a:5c:8d:81:4f:61:1e:c9:d4:1b:ab:
2b:4a:72:93:e9:de:25:2d:f7:3f:e2:58:e2:fa:48:a5:d7:80:
bb:15:88:9b:fa:15:0f:bf:27:83:da:f9:1c:93:e0:49:8c:b8:
f2:17:97:91:36:e8:a2:bd:af:22:d8:bd:19:93:c9:99:56:28:
ec:a0:27:c1:04:ee:f7:1a:77:cc:53:97:ba:58:7c:88:90:25:
e7:18:73:43:93:a5:80:21:50:28:ff:04:df:f5:cc:39:cd:72:
b6:2c:93:cf:b6:2e:13:1c:e0:27:68:50:57:44:6f:9a:02:3c:
a5:a4:41:b7:ed:d5:27:22:36:22:8e:6b:e8:a6:4e:f3:94:89:
f0:01:6e:02:16:9e:76:d5:82:a2:57:a6:81:3a:5f:e1:a6:28:
ab:be:6e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:06 2025 by rpki-client