Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
File: NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft (raw, json)
Hash identifier: mD/aG3bnuApiiw8WkXltT45R5DyDwL3AivqYqyxAt4c=
Subject key identifier: 67:BF:97:C7:6E:53:FF:11:52:45:2B:41:0F:50:79:75:F7:02:3B:2E
Authority key identifier: 34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46
Certificate issuer: /CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346
Certificate serial: 01982710C34B6733BD1762F15CE7A8CECFA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
Manifest number: 1359
Signing time: Sun 20 Jul 2025 09:01:06 +0000
Manifest this update: Sun 20 Jul 2025 09:01:06 +0000
Manifest next update: Mon 21 Jul 2025 09:01:06 +0000
Files and hashes: 1: HXMlv9NxuKboyUtKNMBCZQbSjW0.roa (hash: mL85Iwg8ADnZv62S9C7eQgo7c8UTYuO4j6CsY6zppGQ=)
2: NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl (hash: Cxy0lYhk2Oy3PHz3iXqNrA0ZB8UdSHiM7W/La1aK4bQ=)
3: eJTJ2xXloI9cYA2PdEb7QzgzZMI.roa (hash: pJvyPt1aoxPTKu/5G35raZf6vtLPUO+Laz/ssfLJWrA=)
4: nyGwWtmUUenCuiNvi2rme3JvAnM.roa (hash: mv2iRNCUpphbjEmFj2ZluXSrRNCmkDp7k1nJS6ve48g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 09:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:10:c3:4b:67:33:bd:17:62:f1:5c:e7:a8:ce:cf:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346
Validity
Not Before: Jul 20 09:01:06 2025 GMT
Not After : Jul 21 09:01:06 2025 GMT
Subject: CN=67bf97c76e53ff1152452b410f507975f7023b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:88:8e:a5:5b:35:aa:ce:da:9c:a1:f1:b2:68:
a6:67:e5:f9:ab:83:4c:c4:ea:3a:56:91:f4:c3:7e:
18:5d:65:e9:72:e9:d2:14:79:1e:0c:de:1e:12:30:
50:11:bc:d0:64:8f:bc:9b:88:54:7e:be:c4:b9:e8:
32:1b:de:9c:2b:cd:d6:a3:b2:09:22:fb:2a:ae:d9:
26:5f:a5:8a:33:f2:62:13:56:fc:31:32:8e:f7:39:
01:25:50:ca:93:e4:76:16:c3:09:8c:85:76:43:21:
18:61:21:49:bb:f9:96:ca:88:47:36:83:4d:32:2a:
8b:cf:34:8e:ca:44:a7:f9:63:f6:61:1e:be:05:87:
1b:b0:c7:89:eb:9e:ed:d6:49:a8:ce:aa:cb:a5:ac:
89:7f:24:d6:c8:72:ac:95:6f:b9:83:d6:2f:17:33:
9d:5e:f8:65:2e:3a:90:69:94:38:d8:72:11:87:ae:
15:c3:40:10:d7:e0:19:ce:cc:5d:88:36:46:1a:c4:
2f:8c:25:e6:ab:7a:94:2a:fb:83:f8:42:40:31:78:
c4:ae:96:5d:29:78:a5:70:3e:ef:50:3c:11:d9:23:
aa:aa:00:b1:46:8e:50:a7:56:7c:31:65:0a:3a:4e:
3a:22:a6:9a:33:42:06:4a:73:16:2d:aa:30:84:b6:
a2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BF:97:C7:6E:53:FF:11:52:45:2B:41:0F:50:79:75:F7:02:3B:2E
X509v3 Authority Key Identifier:
keyid:34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:c5:5a:6a:f9:50:e1:69:06:a3:82:9f:07:d5:d0:73:10:bc:
c1:51:29:52:a2:45:b6:14:70:05:83:90:59:9c:7b:81:f3:0f:
64:7a:50:55:f9:37:0f:90:b6:c7:9d:62:00:1c:6a:28:d7:86:
13:1f:ca:a2:2d:0f:2b:f3:f1:7b:35:1b:f6:6d:5a:b8:5a:dd:
d4:16:e9:70:51:41:90:a9:3d:7c:08:c9:48:40:89:6b:cb:03:
9b:d2:56:dc:59:36:6c:04:2c:dc:a3:70:6d:b6:13:a5:71:96:
38:cc:5f:5f:a4:18:3d:62:40:e7:c6:fa:56:74:fa:89:0e:88:
b0:01:6a:7c:05:bd:59:b6:3d:0c:50:52:be:9f:34:94:84:5e:
11:a4:91:09:3e:28:0b:81:40:e2:58:eb:50:ce:73:7b:99:04:
83:99:5c:2c:b2:54:ba:85:d1:93:58:6a:63:13:99:d5:81:23:
60:66:fe:37:55:ff:36:c1:eb:85:47:a7:ed:b9:ca:64:86:3c:
59:dc:85:ce:16:2a:54:ca:25:fa:4a:d2:98:8c:26:84:43:f4:
7c:d7:07:b7:84:3a:ea:62:b0:22:94:fa:44:ce:e3:37:50:0d:
7d:4b:3e:9e:8c:83:07:9f:6f:df:b4:5f:63:0a:71:2f:c0:24:
1e:11:26:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:31:49 2025 by rpki-client