Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
File: NePUvxvA-BcoIF5R3gl884Ogzck.mft (raw, json)
Hash identifier: q8W/JMXCZ+x9AOz8tp7PV3WoC3A9QR2olhi0RcTdL58=
Subject key identifier: 69:F0:EB:4C:D0:36:8F:14:9C:38:EA:1A:93:D3:CD:10:99:B9:B1:5C
Authority key identifier: 35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
Certificate issuer: /CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Certificate serial: 0198D65F58C275E61EAFAD7B7D8ABB965C07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
Manifest number: 1589
Signing time: Sat 23 Aug 2025 10:00:29 +0000
Manifest this update: Sat 23 Aug 2025 10:00:29 +0000
Manifest next update: Sun 24 Aug 2025 10:00:29 +0000
Files and hashes: 1: 0RltyGXYqOw5Hx9cC0hpgbUGn1M.roa (hash: mg2bYRQawjXXkuGc/ehoyx4cItI7XGim10ZVkynzOuM=)
2: NePUvxvA-BcoIF5R3gl884Ogzck.crl (hash: URTxRn3vp2J8Ts6aVWM9aU5JueylDqJ9w2Lu+QH6Q04=)
3: cC3qEyLwvQCoEx0E8fa6hCQIIMk.roa (hash: t6q5YnGG2tDRloa96C40IAzp6BUV/ndP0HTUzMGh9cA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:58:c2:75:e6:1e:af:ad:7b:7d:8a:bb:96:5c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Validity
Not Before: Aug 23 10:00:29 2025 GMT
Not After : Aug 24 10:00:29 2025 GMT
Subject: CN=69f0eb4cd0368f149c38ea1a93d3cd1099b9b15c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e4:ef:96:4d:77:c2:d7:ce:8b:e3:b3:1d:a7:
6d:cd:ac:ca:55:c1:ff:c7:ea:9a:93:60:6e:1a:ef:
14:b6:78:39:83:11:04:a5:d7:36:b6:44:78:1e:8a:
1f:59:87:aa:37:b1:62:4c:c4:ca:d6:c9:f7:c8:0b:
0b:6b:b0:ab:33:18:c8:7c:10:e7:69:b2:63:d4:e5:
b6:26:4f:9c:11:1a:71:cd:92:89:ec:ca:98:8b:2f:
05:c8:1f:b8:a6:38:3d:8c:b8:81:f4:53:a8:14:49:
61:b1:7b:12:de:da:2d:15:16:ad:a3:3a:b2:54:7c:
0a:f0:77:1c:f2:81:1d:ee:d4:91:9e:b1:40:2e:82:
d2:ee:84:cb:61:8b:e8:eb:b6:24:93:26:16:2e:39:
f4:5b:26:5d:32:d8:88:f3:30:c5:68:7f:22:2e:0a:
ea:bf:2f:f1:01:fc:39:77:b6:4e:27:3a:e7:40:f4:
95:2b:d0:fa:3e:20:ac:ec:90:b4:5c:a9:43:c3:f3:
16:73:15:a3:27:68:0a:14:64:a4:1c:cc:f4:39:dd:
ff:2e:af:a3:1c:77:54:38:b6:8f:eb:74:48:d8:b7:
d6:49:c2:33:99:f1:85:51:a8:55:fa:0c:35:5f:5d:
3e:2d:be:ba:8f:fc:ee:1a:b1:da:ba:b2:2f:cf:3d:
4b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F0:EB:4C:D0:36:8F:14:9C:38:EA:1A:93:D3:CD:10:99:B9:B1:5C
X509v3 Authority Key Identifier:
keyid:35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:2c:26:39:6d:7f:02:03:e9:a6:6b:85:01:26:aa:67:8a:8d:
83:80:76:e4:ab:6b:d5:d0:46:75:2f:ed:8e:92:a7:bf:0a:a8:
2c:c6:98:6f:92:fd:c6:9b:64:a2:40:35:ba:87:c0:e2:4a:d3:
57:81:5a:a1:81:b8:5b:c0:23:54:43:42:39:70:84:c0:b9:a6:
25:9d:af:43:c2:6e:0a:a6:70:e0:28:ec:ce:27:4a:37:6b:a8:
de:c1:0e:68:18:7d:85:22:45:69:1b:93:99:69:ba:83:46:17:
01:74:16:69:38:5f:b1:ba:e1:d4:e2:34:54:04:35:04:d9:81:
d9:61:97:06:a2:86:de:9d:5b:e9:c6:44:af:dc:29:71:34:c0:
ef:6d:a6:ad:c9:30:54:36:26:72:ba:89:2e:30:1b:b0:4f:43:
a4:0d:72:d7:06:9b:97:e8:aa:9b:70:17:86:76:14:8d:bc:5f:
22:29:f0:d4:b3:6d:34:80:94:64:e2:5e:12:43:c7:7a:49:83:
eb:51:af:da:47:27:a7:74:a4:ec:9c:cc:70:cd:0e:57:a8:a2:
8e:72:b9:52:ed:c8:af:a3:d5:6b:25:2c:6b:54:00:82:d9:d6:
20:fb:34:d3:44:17:e7:43:b9:fd:57:18:fc:d4:3e:fc:f3:72:
8b:de:b3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:21 2025 by rpki-client