Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
File: NEcY0TWgm7UkcGtCWcq8xiblFO8.mft (raw, json)
Hash identifier: 5zb25ljYhEt9Rrh0h2+m4rLGO3vxnPbZ8kL+XkBuF94=
Subject key identifier: 65:82:3E:57:49:8A:03:64:8F:E3:3F:EC:55:EA:36:42:35:05:E1:35
Authority key identifier: 34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF
Certificate issuer: /CN=344718d135a09bb524706b4259cabcc626e514ef
Certificate serial: 0198D4E0DC9CA4F09B1813C7653CC3C16F8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 03:02:42 +0000
Manifest this update: Sat 23 Aug 2025 03:02:42 +0000
Manifest next update: Sun 24 Aug 2025 03:02:42 +0000
Files and hashes: 1: NEcY0TWgm7UkcGtCWcq8xiblFO8.crl (hash: ZZFKswaJTRm4dKbzo7kUALwhddJWk7vuNv2HdZMVcAU=)
2: sO-QyC1vz5w60dvkaCQsXtLi8YA.roa (hash: wtWXsxxZV53+P/qICncBE0LIXN7QWpyRCdTXr4pbwmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:dc:9c:a4:f0:9b:18:13:c7:65:3c:c3:c1:6f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344718d135a09bb524706b4259cabcc626e514ef
Validity
Not Before: Aug 23 03:02:42 2025 GMT
Not After : Aug 24 03:02:42 2025 GMT
Subject: CN=65823e57498a03648fe33fec55ea36423505e135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:66:09:9c:bd:89:dc:95:a8:50:2d:10:4c:7d:
53:6c:76:6a:eb:c4:fd:45:25:c0:6d:3a:cb:5c:89:
e9:66:06:e4:80:a3:96:c4:42:37:65:9e:9c:90:4f:
14:b3:6e:66:77:dd:7a:a5:48:31:94:f8:e3:f7:84:
b2:f3:9a:ae:43:63:84:14:b1:cf:23:5b:54:56:e5:
18:77:56:b9:e6:7a:90:aa:31:a6:31:7c:e8:ff:17:
77:98:40:74:b2:1f:90:b2:43:31:5e:f9:99:c2:51:
6a:89:bf:d6:c3:b3:51:ff:94:94:4c:2e:68:a1:33:
36:59:12:5a:cf:8a:fa:3c:6b:57:1f:bf:e6:fd:c3:
88:f1:ce:95:31:e6:c7:06:e6:16:ae:8b:20:c9:45:
38:df:ec:93:3f:ff:22:8f:ed:2a:e2:b9:63:ab:f0:
19:08:0e:8f:93:f6:5a:22:f0:d1:79:f5:25:da:de:
3c:11:cf:7e:8b:73:c7:ad:db:05:8b:38:a3:7b:1a:
16:40:9b:9e:02:0b:ad:65:f2:97:c6:be:f0:8a:f7:
ed:11:98:64:44:7a:0f:f7:64:7a:58:06:83:50:04:
8e:a7:77:5d:ae:d6:84:7d:9a:ce:b5:24:c3:77:80:
74:b4:5b:44:7b:34:4e:4f:57:2d:f8:da:ff:8c:40:
ee:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:82:3E:57:49:8A:03:64:8F:E3:3F:EC:55:EA:36:42:35:05:E1:35
X509v3 Authority Key Identifier:
keyid:34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:9b:ee:60:c9:91:83:92:d7:84:8a:f1:8a:92:fd:73:24:87:
b3:fb:4a:d2:7e:69:06:b0:a3:a5:97:72:aa:0e:f5:b1:69:c7:
9b:c1:b2:2e:24:e3:ae:43:ef:33:bd:03:a6:43:59:ff:60:d8:
e7:72:bf:e3:fe:37:80:9b:c4:39:fd:90:92:df:9c:67:b9:f4:
67:43:72:8d:36:81:9e:ef:f6:21:9a:fe:f0:58:22:64:54:c0:
4a:24:40:ba:da:8f:f4:7b:98:df:9d:bc:c2:0f:df:5d:81:fd:
91:c3:18:42:18:d4:c6:f3:c6:28:33:73:9f:77:94:c3:ac:60:
eb:7a:30:85:71:50:b7:4e:d6:6f:17:1d:c6:45:dc:fa:8b:24:
34:4e:3c:18:e8:8b:08:2e:02:d0:be:fb:3c:82:ce:2d:64:1b:
bd:e9:0c:29:3c:16:ac:66:58:16:e1:72:04:ac:19:a4:e7:78:
d2:44:5c:f1:c8:3c:c1:70:5f:81:d1:0a:9e:df:33:36:3c:ff:
70:ff:a7:62:9f:df:75:d6:43:bb:7f:7b:78:ca:bd:ae:1d:6e:
cc:8c:fa:ac:2e:30:5b:0a:ee:ab:04:82:bd:af:03:be:ed:e8:
9c:6c:ce:f6:72:75:03:89:67:d1:d3:b5:ba:5f:28:92:47:68:
cf:3f:33:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:10:41 2025 by rpki-client