Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft
File: NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft (raw, json)
Hash identifier: X2MQh/MYHG7laQaxjdEmNicxE5BCS7nplLaRm8/hbdY=
Subject key identifier: 58:6A:66:0E:9C:DD:5B:4F:5D:F1:F7:CC:86:1D:CE:BF:A2:83:87:A1
Authority key identifier: 34:01:23:43:A6:2F:3F:09:B5:5C:DB:C0:1E:75:C3:82:12:A2:35:DF
Certificate issuer: /CN=34012343a62f3f09b55cdbc01e75c38212a235df
Certificate serial: 0199FC213DB7F208E3860E6F960CDC6AFF61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAEjQ6YvPwm1XNvAHnXDghKiNd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft
Manifest number: 0EE7
Signing time: Sun 19 Oct 2025 11:01:00 +0000
Manifest this update: Sun 19 Oct 2025 11:01:00 +0000
Manifest next update: Mon 20 Oct 2025 11:01:00 +0000
Files and hashes: 1: NAEjQ6YvPwm1XNvAHnXDghKiNd8.crl (hash: ez72HnDbYwiTa8q9xN28xtr+5d0xs+OxbCLWPGtFyQw=)
2: hRAHaXw08T46yQXdPdRGo5FEyKc.roa (hash: kanS0GeR3i8daBZU7h/NZ29VRbj73ZfNj0diMdbJ7lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAEjQ6YvPwm1XNvAHnXDghKiNd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:3d:b7:f2:08:e3:86:0e:6f:96:0c:dc:6a:ff:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34012343a62f3f09b55cdbc01e75c38212a235df
Validity
Not Before: Oct 19 11:01:00 2025 GMT
Not After : Oct 20 11:01:00 2025 GMT
Subject: CN=586a660e9cdd5b4f5df1f7cc861dcebfa28387a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a2:62:d4:0e:6a:9c:82:09:53:92:3a:5a:39:
02:df:17:1e:18:3d:0e:25:28:35:49:21:07:41:49:
45:ac:08:96:50:4c:0d:8d:9f:12:f4:11:79:a3:a4:
b5:e1:cf:48:5f:28:dc:05:47:85:7b:21:2c:4d:1a:
e5:45:f5:e6:95:10:3a:4d:40:04:07:43:65:68:ba:
92:6c:ab:86:57:09:42:bd:d1:31:20:40:46:34:96:
b5:4a:d8:53:9c:3c:15:b3:2d:60:14:8f:55:a7:b5:
06:dd:e5:ba:6d:b4:06:5a:53:ae:95:fa:ae:98:3c:
c7:41:0c:c9:e8:7f:d1:cd:df:55:2f:51:b7:d9:44:
6d:18:da:45:bf:59:1e:dc:c3:85:04:40:d3:7d:6e:
67:35:f8:28:97:be:59:e8:e7:c4:76:12:dc:1d:8c:
ee:1f:d6:8d:25:17:19:7b:9d:1e:13:45:e5:b0:f3:
4e:43:6e:c2:3c:fd:97:0f:1f:52:91:0f:a7:d3:df:
93:75:5a:b6:b9:bf:99:9f:09:ce:2a:d5:9e:7e:8b:
0b:cd:4a:8a:72:32:f0:d5:f7:ef:16:18:b3:0a:12:
f2:ab:09:af:71:0f:c9:c3:3a:9c:9a:77:3c:76:c0:
1a:26:c7:56:43:11:0e:f4:12:db:4c:c7:2d:00:7e:
eb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6A:66:0E:9C:DD:5B:4F:5D:F1:F7:CC:86:1D:CE:BF:A2:83:87:A1
X509v3 Authority Key Identifier:
keyid:34:01:23:43:A6:2F:3F:09:B5:5C:DB:C0:1E:75:C3:82:12:A2:35:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAEjQ6YvPwm1XNvAHnXDghKiNd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b2302e-aade-465a-aa9b-32d2bdd4bbb1/1/NAEjQ6YvPwm1XNvAHnXDghKiNd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:12:bb:a4:58:f9:44:d7:d3:05:aa:6d:d5:da:9e:f0:86:cd:
04:17:82:49:dd:0c:77:27:3a:41:a6:5a:a3:7b:3a:6f:f4:f7:
ff:f2:9f:48:b5:e4:80:c1:0c:25:08:bd:0f:00:9f:a5:6a:1d:
7a:8b:6e:84:69:b8:c6:bd:96:af:68:74:8d:20:06:f0:b9:04:
d6:9c:55:24:fb:07:0a:77:15:95:08:5e:cb:7d:24:e5:00:48:
81:72:5b:2d:2f:19:aa:41:bd:9e:69:2c:1f:f0:6a:7d:a2:0f:
b9:cb:a6:6e:e8:3f:55:72:14:5b:46:ee:c1:37:94:8f:e2:a8:
65:ca:58:12:bb:fa:e9:74:f2:48:9d:70:27:00:8d:13:cc:f0:
dd:24:6c:e9:d0:96:50:2b:b2:79:c2:b0:19:b9:bb:08:06:49:
45:e5:46:81:b3:91:ca:b3:c0:13:4b:c2:12:69:51:8c:71:f9:
19:0e:79:25:42:89:c0:3c:d8:a0:19:27:58:22:8a:7d:b7:79:
8a:38:f3:ad:e1:29:d0:20:28:3e:38:82:9f:26:21:f3:95:0d:
12:87:13:59:74:28:60:47:e5:fe:17:cf:f7:0b:f0:1b:db:8e:
f3:09:8a:f2:4d:ed:e1:50:21:aa:c3:06:2d:e5:ce:ac:05:b3:
70:cb:86:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:26 2025 by rpki-client