Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
File: naTpXS9Mw0pzdrc8DwObPhWPUVI.mft (raw, json)
Hash identifier: QZTjQpbD83qmBiZEf0iSh/cpJD+ybzqezNBC6eSLv8Q=
Subject key identifier: 01:A3:81:CA:BF:F4:83:EA:AB:42:99:0A:99:5F:F2:D3:17:62:99:60
Authority key identifier: 9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
Certificate issuer: /CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Certificate serial: 0198451A9FDF063B8B19E1D730A01802E880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
Manifest number: 150B
Signing time: Sat 26 Jul 2025 05:00:29 +0000
Manifest this update: Sat 26 Jul 2025 05:00:29 +0000
Manifest next update: Sun 27 Jul 2025 05:00:29 +0000
Files and hashes: 1: WYyFBT5nmwxFR4gPo5unCY2UhVc.roa (hash: Z4ZpbpPZKoHHj3yG0X2Ro2qP/JaWFIzV9WlYUI0Hg8s=)
2: j9lH8J7G3WobH4lsD15m-VsHfXA.roa (hash: qeHJX0Tapm1zxSb8XB+NF4p89KIeCYI5mpUGKGseBY0=)
3: naTpXS9Mw0pzdrc8DwObPhWPUVI.crl (hash: xAoex/68kgCldnMgEmW4thjMr63Ama788yD/ANdBh7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:1a:9f:df:06:3b:8b:19:e1:d7:30:a0:18:02:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Validity
Not Before: Jul 26 05:00:29 2025 GMT
Not After : Jul 27 05:00:29 2025 GMT
Subject: CN=01a381cabff483eaab42990a995ff2d317629960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ef:9b:11:5b:16:f9:9e:63:d1:0a:a2:3c:a3:
7c:7f:41:83:52:23:1f:05:23:15:4d:7e:91:af:25:
f8:66:cf:91:20:0d:1f:fa:33:31:6f:9c:ba:2b:2c:
c6:93:4b:ff:16:05:0e:be:72:64:93:79:3e:06:d7:
13:ba:7a:9e:94:2d:d7:82:63:8e:3c:ae:48:7b:be:
e6:d8:ce:65:bd:4b:80:ea:89:07:aa:00:4f:43:10:
28:89:be:cb:5f:c5:e6:1e:41:f4:76:13:a8:36:b9:
21:46:c6:17:cf:45:0d:cc:c1:67:14:14:8e:10:e1:
32:b6:3a:f7:7f:c3:15:ef:89:92:fb:76:45:74:02:
95:b6:2e:ea:eb:e1:79:f0:c7:4f:dd:6f:52:2f:08:
ac:7a:67:ec:99:f8:1d:59:77:57:63:da:06:cf:57:
3e:2c:dd:4b:63:eb:b7:55:23:13:7e:5a:23:74:86:
98:1e:a0:a1:7a:77:cb:75:c9:8c:17:1c:a7:b7:e3:
3c:4f:76:79:4d:4e:a0:c9:2c:80:be:ba:d1:28:4f:
21:cf:44:a5:0d:91:39:a8:de:49:6c:12:a4:5d:12:
3e:b7:67:a4:f7:2a:77:e9:e0:20:fe:db:99:76:6e:
99:1b:2d:ca:55:7d:41:b2:71:f3:f1:9b:79:fe:28:
41:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A3:81:CA:BF:F4:83:EA:AB:42:99:0A:99:5F:F2:D3:17:62:99:60
X509v3 Authority Key Identifier:
keyid:9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:68:4f:e1:73:c4:bb:e0:f2:96:c1:f6:5e:d8:7a:fe:9f:4b:
47:48:02:6a:cb:34:a7:50:37:ef:74:61:8a:df:49:7c:fd:b6:
6a:6c:8a:38:43:4a:2b:8e:ad:b5:28:93:01:e4:fa:60:ff:5d:
2b:fc:27:3a:1a:44:33:18:9c:99:8f:ed:b6:9a:bc:fd:42:1b:
3b:7f:3b:e6:c8:fa:83:68:23:a3:40:c7:c6:2e:70:30:53:4b:
aa:7b:2e:20:9a:8f:f0:29:09:2f:c0:93:fc:a8:b5:7d:2f:fa:
ba:e9:94:8f:f2:55:48:76:c1:f3:d7:13:40:b8:7b:c8:d2:2f:
8e:6d:8c:de:07:60:0e:66:3c:57:34:b8:17:a3:2e:ab:03:8b:
d5:26:08:4a:3c:d1:d4:34:85:d0:1e:37:bf:81:9e:9e:cc:1a:
cd:da:70:17:43:16:c7:86:77:83:bb:cf:44:d9:43:e5:ba:ff:
34:56:e4:08:8d:52:72:c2:3e:9c:4f:30:d9:1c:87:5f:95:2d:
3c:b4:89:7b:d0:d9:a2:43:48:15:3d:bf:cb:01:3e:df:cb:18:
32:da:2f:2f:73:33:60:07:37:84:65:4b:ed:a8:0b:dd:3e:a9:
34:6d:b6:5e:1a:0b:b8:c3:4d:5b:11:83:5b:c2:c1:f8:26:06:
b7:db:ca:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 09:50:04 2025 by rpki-client