Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
File: NWrJx2mXb24ugqrM_iObaqGSI3g.mft (raw, json)
Hash identifier: 4mkhwwh0EbCZzkVh/ZvFPcSGNcpfHf2MyJYzRErpwxE=
Subject key identifier: 1E:78:FA:F4:88:45:80:83:C7:F4:6F:91:3E:01:D7:F3:30:2F:18:6F
Authority key identifier: 35:6A:C9:C7:69:97:6F:6E:2E:82:AA:CC:FE:23:9B:6A:A1:92:23:78
Certificate issuer: /CN=356ac9c769976f6e2e82aaccfe239b6aa1922378
Certificate serial: 0198D54E3437BCCDDF9813F227FCF0D154DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 05:02:08 +0000
Manifest this update: Sat 23 Aug 2025 05:02:08 +0000
Manifest next update: Sun 24 Aug 2025 05:02:08 +0000
Files and hashes: 1: NWrJx2mXb24ugqrM_iObaqGSI3g.crl (hash: t0c5yJ0QOOA9vw6LBqLrDExmF/4VzDiT4BZEUZFdA8g=)
2: kVipI_xyp0_kuJlOJOnoAHsePks.roa (hash: 1FUuhHfAvSDiWJAZOii+4sL3nFhAdH6ZW0fC89DJLKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:34:37:bc:cd:df:98:13:f2:27:fc:f0:d1:54:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356ac9c769976f6e2e82aaccfe239b6aa1922378
Validity
Not Before: Aug 23 05:02:08 2025 GMT
Not After : Aug 24 05:02:08 2025 GMT
Subject: CN=1e78faf488458083c7f46f913e01d7f3302f186f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:03:73:4c:9c:7c:0a:8e:7e:af:4b:72:bc:c2:
a8:9a:79:f4:fc:de:3b:ce:05:32:1c:b9:0d:aa:e7:
36:91:09:01:22:1a:e8:3e:55:0d:83:04:42:4f:44:
af:20:bf:ec:1a:8e:fb:63:57:bc:d0:e5:34:90:2e:
cb:72:82:b4:7c:ab:aa:2b:86:ec:8e:80:58:75:94:
15:31:58:a3:ef:4b:e2:c2:cb:42:22:a1:7c:68:ba:
cc:8d:d3:f5:3b:e7:36:e8:4f:64:b5:88:c5:04:4a:
5b:cd:6d:d5:d8:57:9d:ff:7c:8d:cf:55:8d:be:e1:
76:cc:b0:83:97:9b:76:8d:a1:47:30:57:8f:22:f7:
a4:02:0c:4e:19:d6:72:95:b3:c6:bb:f6:7f:a7:56:
ed:41:30:8c:31:70:50:aa:b3:e4:ef:74:91:f7:03:
ae:74:42:d6:57:5a:d7:34:b3:2d:77:38:11:c7:8f:
60:31:fc:ff:eb:88:5d:c8:98:0c:7a:87:ac:9d:d4:
bb:a2:5b:43:78:15:68:ff:7a:43:6a:49:2d:9d:e7:
4a:7b:78:e2:cd:19:78:85:f0:ec:02:dc:2a:6a:3e:
d4:46:df:be:47:21:ac:02:1b:5a:5e:90:e5:61:6d:
e9:1b:b3:dd:ec:3f:04:0d:f3:50:12:48:c5:45:62:
64:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:78:FA:F4:88:45:80:83:C7:F4:6F:91:3E:01:D7:F3:30:2F:18:6F
X509v3 Authority Key Identifier:
keyid:35:6A:C9:C7:69:97:6F:6E:2E:82:AA:CC:FE:23:9B:6A:A1:92:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWrJx2mXb24ugqrM_iObaqGSI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eefe67-3ebd-46cb-bcc8-6c61a9023139/1/NWrJx2mXb24ugqrM_iObaqGSI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:c6:68:ef:bd:a4:63:ec:a6:57:d2:d9:51:aa:e9:f9:71:a0:
30:cb:75:74:2d:8e:8f:97:ca:19:4a:bb:a9:e5:d0:98:d2:f1:
9e:b3:72:8c:a3:8c:50:61:d6:88:39:53:16:f4:6f:ee:e4:ed:
96:43:55:e2:1a:29:fc:98:72:ab:20:d9:e5:be:c0:c9:a6:98:
27:0e:5f:e3:3d:5b:83:2e:55:5e:6e:1d:cb:0b:91:db:21:44:
8d:d6:b0:9d:f5:0d:24:48:eb:bf:73:ec:94:3f:b1:d4:05:03:
7a:f3:f5:7d:af:55:32:3d:a4:7c:30:40:b5:f6:6e:3d:85:65:
dc:a3:09:9e:f1:5c:42:22:bc:5d:e9:00:2a:f0:01:1b:eb:7e:
65:ed:2a:50:de:9b:86:17:ad:d4:6b:f3:a5:cd:4a:85:f9:05:
7b:f4:a8:b1:e1:af:9e:67:c2:e5:39:b4:bc:c7:04:f4:56:c7:
c2:c5:42:47:37:8c:ea:27:24:6f:51:d9:16:98:57:fe:65:a4:
d3:86:dc:bb:c2:79:1f:c3:56:02:08:6a:a6:47:31:75:b2:c9:
a3:89:43:d6:52:d8:d3:41:cd:c9:45:3e:49:9d:cd:58:1e:62:
c2:59:6b:15:d0:87:7d:b3:b1:68:d0:be:8d:84:4b:44:91:66:
26:77:35:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:59 2025 by rpki-client