Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
File: NeXw-_PWvzoWokvseAyw_W7fMec.mft (raw, json)
Hash identifier: cMclBW103HTwOvYNzqRKNslE2yvwSjgVIBR44IqEiqI=
Subject key identifier: 64:13:0E:62:42:B4:BD:DD:33:3B:31:57:6F:85:FC:C4:CC:C2:A5:93
Authority key identifier: 35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7
Certificate issuer: /CN=35e5f0fbf3d6bf3a16a24bec780cb0fd6edf31e7
Certificate serial: 0198D4E0432093F44D0F9EE5564D757B5217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
Manifest number: 0E8D
Signing time: Sat 23 Aug 2025 03:02:03 +0000
Manifest this update: Sat 23 Aug 2025 03:02:03 +0000
Manifest next update: Sun 24 Aug 2025 03:02:03 +0000
Files and hashes: 1: NeXw-_PWvzoWokvseAyw_W7fMec.crl (hash: PQ00QV+RREWzW3JrJ9S7E58/d5w7F+kpBVsKEOHyRFc=)
2: PmVcb6mc4PNxZC_ptgP_O-XbGLI.roa (hash: pKGXoSvQeFa7SbcSS7sBYIQ1DYaO2+BzF5Gj11hr5Ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:43:20:93:f4:4d:0f:9e:e5:56:4d:75:7b:52:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e5f0fbf3d6bf3a16a24bec780cb0fd6edf31e7
Validity
Not Before: Aug 23 03:02:03 2025 GMT
Not After : Aug 24 03:02:03 2025 GMT
Subject: CN=64130e6242b4bddd333b31576f85fcc4ccc2a593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e4:fa:e9:78:69:05:3e:99:05:eb:08:be:a4:
72:66:a2:f7:6d:62:3f:bb:70:9b:3e:7f:e2:0f:45:
bf:f2:f1:4f:f3:10:cd:9f:c1:22:cd:7b:dc:11:d1:
14:67:1a:2c:7b:8d:18:ac:20:83:0c:df:8f:da:dd:
0a:74:b6:6a:4b:5c:07:d7:73:4f:56:cc:3a:ff:1d:
52:6a:96:38:e3:8a:b9:19:d2:b0:15:ab:a2:a7:fe:
c1:cc:61:c0:68:e7:55:b1:99:15:ba:c4:44:59:3c:
d8:32:55:00:39:d5:41:9d:fe:c6:98:46:17:67:97:
7d:f8:8b:26:e0:a8:26:ed:04:c9:c6:0f:b7:b6:5c:
23:69:27:e7:ca:a3:07:07:25:4f:fd:6b:0d:8e:77:
b2:66:a6:b7:4b:62:2f:84:59:de:b5:29:71:8d:df:
e9:74:9b:d6:b1:6f:e9:96:7e:7d:b3:4a:f0:7e:10:
34:9c:9e:73:a6:b8:f3:66:18:98:67:43:1c:3d:8b:
02:39:50:4b:49:9b:10:e3:d8:18:dd:03:3e:08:de:
99:28:d9:66:d1:2d:95:09:dd:27:b4:a2:4b:44:46:
aa:5c:c3:93:91:ce:b5:ec:b2:15:08:2f:dd:d5:4e:
a5:72:3a:9a:85:52:c0:c3:58:79:df:63:95:15:83:
f1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:13:0E:62:42:B4:BD:DD:33:3B:31:57:6F:85:FC:C4:CC:C2:A5:93
X509v3 Authority Key Identifier:
keyid:35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:97:6d:05:4f:bd:ed:3c:b9:2c:8d:e8:49:ba:25:01:51:87:
53:2c:f2:89:a7:35:3e:91:02:c9:90:29:d6:84:36:e6:a9:cb:
8d:a7:4f:bd:85:9a:e3:57:22:c6:57:2f:48:8c:c5:b6:5a:62:
20:5f:ce:ea:fa:1d:6f:54:f1:a2:11:9a:2d:f5:76:f8:39:2b:
a8:65:cf:15:3c:d8:28:db:16:e3:71:5e:96:7b:89:36:d8:18:
64:ad:ec:65:d5:07:20:a6:49:0a:26:0c:06:65:61:f2:97:26:
3d:73:f3:8e:3f:10:82:dd:6e:93:2d:a7:d5:cf:7a:19:2b:56:
6a:bd:4e:3e:cc:c6:ab:9d:50:1b:d3:95:43:4c:75:f8:ac:64:
b1:e6:d0:1e:1c:b4:b0:58:1a:cd:0e:09:a1:1f:ae:ce:b1:26:
4c:f1:12:0c:9b:67:9e:ed:4c:32:23:93:b1:84:6b:01:a2:de:
01:51:28:eb:80:a2:61:4a:d5:6e:8c:d4:c3:d1:53:38:a5:63:
35:00:b3:09:10:78:e9:ca:9c:f5:08:9c:4c:d3:70:90:ec:f7:
9c:a4:6f:b3:ed:4a:91:5e:56:ec:04:1c:d4:c4:38:86:cb:32:
ae:5e:2e:b3:0a:34:7f:4e:13:ac:97:d2:3c:b7:fb:85:a5:f0:
a3:1a:b3:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4EMgk/RND57lVk11e1IXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZTVmMGZiZjNkNmJmM2ExNmEyNGJlYzc4MGNiMGZkNmVk
ZjMxZTcwHhcNMjUwODIzMDMwMjAzWhcNMjUwODI0MDMwMjAzWjAzMTEwLwYDVQQD
Eyg2NDEzMGU2MjQyYjRiZGRkMzMzYjMxNTc2Zjg1ZmNjNGNjYzJhNTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OT66XhpBT6ZBesIvqRyZqL3bWI/
u3CbPn/iD0W/8vFP8xDNn8EizXvcEdEUZxose40YrCCDDN+P2t0KdLZqS1wH13NP
Vsw6/x1SapY444q5GdKwFauip/7BzGHAaOdVsZkVusREWTzYMlUAOdVBnf7GmEYX
Z5d9+Ism4Kgm7QTJxg+3tlwjaSfnyqMHByVP/WsNjneyZqa3S2IvhFnetSlxjd/p
dJvWsW/pln59s0rwfhA0nJ5zprjzZhiYZ0McPYsCOVBLSZsQ49gY3QM+CN6ZKNlm
0S2VCd0ntKJLREaqXMOTkc617LIVCC/d1U6lcjqahVLAw1h532OVFYPxgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQTDmJCtL3dMzsxV2+F/MTMwqWTMB8GA1UdIwQY
MBaAFDXl8Pvz1r86FqJL7HgMsP1u3zHnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmVYdy1fUFd2em9Xb2t2c2VBeXdfVzdmTWVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9iNmJhYTQtYzEzMS00MzBkLTgwNmEt
MmU5NjdhNGNkZGUxLzEvTmVYdy1fUFd2em9Xb2t2c2VBeXdfVzdmTWVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9iNmJhYTQtYzEzMS00MzBkLTgwNmEtMmU5NjdhNGNkZGUx
LzEvTmVYdy1fUFd2em9Xb2t2c2VBeXdfVzdmTWVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiJdtBU+9
7Ty5LI3oSbolAVGHUyzyiac1PpECyZAp1oQ25qnLjadPvYWa41cixlcvSIzFtlpi
IF/O6vodb1TxohGaLfV2+DkrqGXPFTzYKNsW43FelnuJNtgYZK3sZdUHIKZJCiYM
BmVh8pcmPXPzjj8Qgt1uky2n1c96GStWar1OPszGq51QG9OVQ0x1+KxksebQHhy0
sFgazQ4JoR+uzrEmTPESDJtnnu1MMiOTsYRrAaLeAVEo64CiYUrVbozUw9FTOKVj
NQCzCRB46cqc9QicTNNwkOz3nKRvs+1KkV5W7AQc1MQ4hssyrl4uswo0f04TrJfS
PLf7haXwoxqzng==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:07 2025 by rpki-client