Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
File: NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft (raw, json)
Hash identifier: oeKuyYBKbjKgFR+s/UQw637zLQCE9kv4vrIXzVcQegk=
Subject key identifier: B3:B8:46:F0:96:E3:18:D2:08:D6:52:78:1D:80:76:53:97:DA:FE:7B
Authority key identifier: 34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
Certificate issuer: /CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
Certificate serial: 01984AE58FDFD802C3E2F8F9187D5153349B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 08:00:15 +0000
Manifest this update: Sun 27 Jul 2025 08:00:15 +0000
Manifest next update: Mon 28 Jul 2025 08:00:15 +0000
Files and hashes: 1: NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl (hash: AQzKkzxpN8JwfwVaz65buHugEHhqd3yQNfQvlwyVPIg=)
2: n9slDOW816oCeV0oI8sGph9zEHY.roa (hash: qD/TRD91aBYWewYzdvChC8Edlu2GICT4uFezEduAc7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:8f:df:d8:02:c3:e2:f8:f9:18:7d:51:53:34:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
Validity
Not Before: Jul 27 08:00:15 2025 GMT
Not After : Jul 28 08:00:15 2025 GMT
Subject: CN=b3b846f096e318d208d652781d80765397dafe7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d5:2d:66:dc:19:25:f4:67:5b:32:10:18:12:
8b:4a:c2:29:c5:cd:6f:3c:f4:e0:02:b9:51:fe:28:
52:41:c1:0b:f5:99:b0:9b:f7:4d:8d:63:3c:a9:d0:
9e:98:c1:97:47:8e:99:87:eb:f7:b2:76:97:2c:71:
c9:9d:e6:7a:54:c4:79:df:ce:6c:a7:53:96:91:e8:
3e:da:a0:4c:21:09:57:88:67:62:9c:29:cd:34:9d:
14:d2:f1:1c:07:04:7d:93:15:2a:89:3a:8d:d3:ae:
57:92:7f:c9:96:95:dc:ca:f7:75:e1:db:e0:39:c5:
35:12:20:0c:ff:de:4a:eb:e9:4e:ee:14:10:ba:08:
83:96:fe:f9:c8:9b:7b:22:68:84:03:ac:28:d6:2d:
e2:6c:0c:55:d2:91:f4:3d:8f:0e:25:ab:c7:dd:ef:
c2:20:b0:50:71:e1:2d:45:a3:60:b0:bb:eb:d7:00:
e4:8c:4f:6f:2d:72:d0:c9:84:cb:aa:81:f8:a3:47:
99:1e:18:1a:9b:36:9f:15:a0:81:55:eb:a2:d1:d3:
9d:67:6d:09:28:10:ea:cb:ff:c3:88:78:fa:5a:b6:
22:73:9e:25:dd:3a:ae:b2:95:e8:21:3e:35:5e:cc:
b6:31:b6:1d:f4:ea:56:c7:bc:6b:bd:3e:c6:b8:92:
1c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B8:46:F0:96:E3:18:D2:08:D6:52:78:1D:80:76:53:97:DA:FE:7B
X509v3 Authority Key Identifier:
keyid:34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:cb:db:8e:a0:dc:63:43:07:58:a5:be:d4:b6:69:75:78:21:
2e:d0:a2:68:b8:0f:ea:84:26:55:b2:fd:ee:6d:2e:b6:6c:55:
75:69:7c:c5:1d:c3:7b:d1:6b:be:0a:72:e3:7d:d3:38:bf:02:
86:9a:a5:7c:73:e2:1c:c6:4d:e8:fe:90:44:1c:68:90:3e:b6:
38:95:4e:e8:86:5e:b9:fa:8f:6f:c1:da:c8:10:71:63:f9:5d:
89:c3:4a:1f:9e:bf:0c:0e:fe:f1:27:bb:91:c9:a1:69:09:62:
4e:65:f2:93:54:67:61:3b:99:e2:5e:c2:52:26:49:9e:74:5e:
a0:6b:ea:87:d0:37:5c:c8:54:aa:a8:ac:69:4b:ca:1b:b1:66:
02:65:1c:0b:a8:57:c6:ce:a4:2d:57:f7:89:05:84:c9:8a:00:
80:19:12:a4:14:db:4e:40:97:44:d4:a8:65:e9:8a:d6:0e:4a:
0e:cd:d1:f9:da:78:e3:97:b4:4f:8b:97:a5:94:65:74:2e:0a:
ed:1b:94:e0:d6:6e:ab:cc:1f:a9:5c:17:8a:18:f5:c2:9f:ad:
4c:5e:95:0d:4c:b9:33:fb:b3:e0:58:2c:c2:fd:e5:6e:a5:d4:
e5:9e:23:91:36:a9:c7:07:15:c5:c2:8d:ec:0f:8d:3a:7a:fd:
8e:6d:1b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:04:57 2025 by rpki-client