Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
File: nPYI_632AAge6SIpjksq6Wr_SOg.mft (raw, json)
Hash identifier: Cj4iZ5QW7XpD51faEzEO50zdVIjCoUycBcWTgPlEcng=
Subject key identifier: EF:6E:2F:8D:59:DF:D0:1C:84:BD:00:E9:60:B5:FD:B2:32:2C:05:66
Authority key identifier: 9C:F6:08:FF:AD:F6:00:08:1E:E9:22:29:8E:4B:2A:E9:6A:FF:48:E8
Certificate issuer: /CN=9cf608ffadf600081ee922298e4b2ae96aff48e8
Certificate serial: 01984B53AFA2FEA833B2CDFFA2C2AF2E57F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 10:00:32 +0000
Manifest this update: Sun 27 Jul 2025 10:00:32 +0000
Manifest next update: Mon 28 Jul 2025 10:00:32 +0000
Files and hashes: 1: ObbHotU_QnvsulgBzQaW4wh0HAk.roa (hash: mbgTfoasS2/JRLVjEdWRajTXVRhnW7d5YvctUH9mztI=)
2: nPYI_632AAge6SIpjksq6Wr_SOg.crl (hash: Y98Pz+ClXy0GoJHEx9oK6u9oFEvs7XiGVJcrZdLnJBk=)
3: sLdQOZGVUyb44hu-OktavwbL-fA.roa (hash: 61zdCvV2SZ1HoaLvCC14jhWwxqjS5pgyZuPOqRzMG/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:af:a2:fe:a8:33:b2:cd:ff:a2:c2:af:2e:57:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf608ffadf600081ee922298e4b2ae96aff48e8
Validity
Not Before: Jul 27 10:00:32 2025 GMT
Not After : Jul 28 10:00:32 2025 GMT
Subject: CN=ef6e2f8d59dfd01c84bd00e960b5fdb2322c0566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:39:3a:a1:d8:bf:c4:fa:a1:c4:ec:13:00:62:
dc:b6:9d:9a:29:23:71:0a:e0:b9:57:14:18:02:5c:
5d:d5:be:d9:5a:f8:19:c1:c8:cb:ef:dd:f9:a1:0d:
3e:73:c0:0e:69:00:06:bf:c2:22:81:38:00:ad:cb:
4c:0f:b0:32:94:fe:2a:35:4c:89:0d:76:6a:ea:ac:
21:dd:9d:17:a3:a7:cf:72:49:33:c7:8c:b8:3f:bc:
be:fd:54:bd:4a:15:9c:73:0b:88:cb:65:69:8a:72:
10:94:a7:71:b0:0b:6c:85:e3:47:0b:54:d8:b0:50:
5a:9e:56:63:e2:3c:8f:21:ce:6f:90:9d:eb:50:9f:
54:7f:eb:eb:48:48:25:3c:e0:0e:ca:e2:6b:46:c5:
ba:e7:ff:40:cc:71:5e:bf:9e:fe:50:46:4d:c0:b2:
02:93:5d:2e:39:d4:db:5d:1e:a4:82:49:28:13:ba:
9a:04:c8:89:8c:bb:dc:82:70:6a:8c:6c:17:93:03:
94:f3:fe:6d:18:22:2e:45:fb:53:74:a9:d8:e2:83:
d8:56:c5:4c:a7:dc:5f:e6:9e:00:9d:6f:3b:e8:91:
9e:a7:12:85:04:fd:c5:ec:08:80:4f:ba:d9:74:ac:
1e:3d:87:2b:dd:20:1b:b4:bc:16:e2:45:89:34:9f:
6b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:6E:2F:8D:59:DF:D0:1C:84:BD:00:E9:60:B5:FD:B2:32:2C:05:66
X509v3 Authority Key Identifier:
keyid:9C:F6:08:FF:AD:F6:00:08:1E:E9:22:29:8E:4B:2A:E9:6A:FF:48:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:21:63:5b:66:6d:ba:37:0e:89:c5:ed:65:d7:4a:32:04:e0:
72:26:3c:b6:95:e6:e8:4d:cc:3f:05:59:64:e2:e9:4c:81:32:
81:21:60:2e:b0:15:eb:61:1f:27:3d:3a:d4:d5:ca:21:39:20:
2a:1e:b1:d7:e2:1d:38:67:e0:87:d7:92:1d:d7:7e:27:09:e3:
5b:d5:e2:df:61:ee:35:0f:1d:b8:96:f5:95:23:5d:06:82:d6:
c9:9d:db:a2:35:c3:7e:73:52:d0:1d:ec:e0:61:41:55:04:e0:
7a:63:44:93:92:a8:d8:12:16:21:a1:d9:98:c4:58:cc:09:02:
f9:1a:6e:f3:de:05:c0:90:10:eb:7d:7a:8b:79:77:88:21:b9:
7a:5e:ad:ef:2c:54:ff:73:a6:85:cd:d5:42:e7:fb:8b:6b:93:
4c:60:9b:17:ca:0f:b2:ea:41:f7:2a:c8:be:86:f4:82:51:46:
f1:6e:9a:16:06:26:4d:b1:50:e4:dd:3e:55:f4:0f:0d:5e:1f:
1e:d3:40:da:16:a7:0f:a1:a1:ec:60:36:3f:8b:69:f8:59:27:
ac:45:9d:d6:38:7e:53:ea:59:e8:12:5a:c9:75:53:cf:6c:70:
03:fa:43:5f:73:75:e1:f5:0a:e6:07:a2:2a:5e:99:46:28:92:
fa:d8:d3:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLU6+i/qgzss3/osKvLlf2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljZjYwOGZmYWRmNjAwMDgxZWU5MjIyOThlNGIyYWU5NmFm
ZjQ4ZTgwHhcNMjUwNzI3MTAwMDMyWhcNMjUwNzI4MTAwMDMyWjAzMTEwLwYDVQQD
EyhlZjZlMmY4ZDU5ZGZkMDFjODRiZDAwZTk2MGI1ZmRiMjMyMmMwNTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjk6odi/xPqhxOwTAGLctp2aKSNx
CuC5VxQYAlxd1b7ZWvgZwcjL7935oQ0+c8AOaQAGv8IigTgArctMD7AylP4qNUyJ
DXZq6qwh3Z0Xo6fPckkzx4y4P7y+/VS9ShWccwuIy2VpinIQlKdxsAtsheNHC1TY
sFBanlZj4jyPIc5vkJ3rUJ9Uf+vrSEglPOAOyuJrRsW65/9AzHFev57+UEZNwLIC
k10uOdTbXR6kgkkoE7qaBMiJjLvcgnBqjGwXkwOU8/5tGCIuRftTdKnY4oPYVsVM
p9xf5p4AnW876JGepxKFBP3F7AiAT7rZdKwePYcr3SAbtLwW4kWJNJ9rDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO9uL41Z39AchL0A6WC1/bIyLAVmMB8GA1UdIwQY
MBaAFJz2CP+t9gAIHukiKY5LKulq/0joMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblBZSV82MzJBQWdlNlNJcGprc3E2V3JfU09nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kNDVmMTEtNjdjMi00N2E1LTk5NmMt
ODkxZWI1NDhiODkxLzEvblBZSV82MzJBQWdlNlNJcGprc3E2V3JfU09nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9kNDVmMTEtNjdjMi00N2E1LTk5NmMtODkxZWI1NDhiODkx
LzEvblBZSV82MzJBQWdlNlNJcGprc3E2V3JfU09nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHCFjW2Zt
ujcOicXtZddKMgTgciY8tpXm6E3MPwVZZOLpTIEygSFgLrAV62EfJz061NXKITkg
Kh6x1+IdOGfgh9eSHdd+JwnjW9Xi32HuNQ8duJb1lSNdBoLWyZ3bojXDfnNS0B3s
4GFBVQTgemNEk5Ko2BIWIaHZmMRYzAkC+Rpu894FwJAQ6316i3l3iCG5el6t7yxU
/3Omhc3VQuf7i2uTTGCbF8oPsupB9yrIvob0glFG8W6aFgYmTbFQ5N0+VfQPDV4f
HtNA2hanD6Gh7GA2P4tp+FknrEWd1jh+U+pZ6BJayXVTz2xwA/pDX3N14fUK5gei
Kl6ZRiiS+tjTfg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:34:11 2025 by rpki-client