Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.mft
File: NpxxPFGYfh_6VIInf18cjLci9Es.mft (raw, json)
Hash identifier: fEPI0r02MbC0/OMlMO0P3IpIGcO+X6kdSH0/3QQD414=
Subject key identifier: B4:1C:EF:0A:42:1A:1A:EB:C3:EB:70:65:AC:CE:A8:14:E5:4B:12:23
Authority key identifier: 36:9C:71:3C:51:98:7E:1F:FA:54:82:27:7F:5F:1C:8C:B7:22:F4:4B
Certificate issuer: /CN=369c713c51987e1ffa5482277f5f1c8cb722f44b
Certificate serial: 019849667DD25548AC033C09CE264E6F6B56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpxxPFGYfh_6VIInf18cjLci9Es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.mft
Manifest number: 0A04
Signing time: Sun 27 Jul 2025 01:01:50 +0000
Manifest this update: Sun 27 Jul 2025 01:01:50 +0000
Manifest next update: Mon 28 Jul 2025 01:01:50 +0000
Files and hashes: 1: 6dTT-rARhT9SKaU0Q5LyIvW6cuU.roa (hash: AGsDOWQR4BMJI4oi03KYaFPz/MqqxHtOCzcXxJU+zUU=)
2: 9fxVVEARajC-2ASXFi0_DFGSBc8.roa (hash: hXfrG37neyCRh8L2PA4JPhumP6PxcdmlSO8PbLD9FY4=)
3: FW_JqLhHC7LyHZmaeSFALgStml0.roa (hash: pWsELGWJQyn59BiBQF9FnS772zDDCwVPNTG6tAAe2Fg=)
4: NpxxPFGYfh_6VIInf18cjLci9Es.crl (hash: k9r2hAMpVCoPE+c1ov1t2I80adJuOUpgQllZvD6s81w=)
5: rwCQmNOuZE_kryjC8QIDqyzBek8.roa (hash: OHzMcdBam5j/wfHUyz5DszdE5+OjpxcpG78RADThpWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpxxPFGYfh_6VIInf18cjLci9Es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:7d:d2:55:48:ac:03:3c:09:ce:26:4e:6f:6b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=369c713c51987e1ffa5482277f5f1c8cb722f44b
Validity
Not Before: Jul 27 01:01:50 2025 GMT
Not After : Jul 28 01:01:50 2025 GMT
Subject: CN=b41cef0a421a1aebc3eb7065accea814e54b1223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:37:a1:44:07:a2:dc:00:a1:01:b3:96:01:24:
58:dd:f6:bf:cd:70:92:ed:ff:74:6e:f4:19:06:47:
e5:a2:f2:06:67:58:db:f7:2b:d2:33:6a:52:95:58:
14:49:b1:f9:99:07:fa:7a:f7:8c:35:96:32:5e:1e:
35:d6:35:c9:dc:ab:2d:4a:9b:dc:ff:83:4c:de:ee:
4b:89:eb:6c:56:5d:6f:27:23:24:96:62:57:66:93:
7f:b4:88:17:dd:e6:6b:50:d0:11:a1:02:7d:d1:de:
aa:80:5c:10:38:56:f8:e3:62:9d:3b:52:92:09:3f:
4c:ab:58:ac:2f:f6:3d:74:84:9f:42:f0:17:8e:8d:
ba:5f:a9:f1:ce:18:0c:2e:aa:4c:df:90:8b:5c:9a:
ab:9c:32:2a:13:fb:6c:01:df:87:7e:48:54:32:e9:
4e:63:43:82:0c:ef:20:75:68:62:8f:53:3f:e1:21:
11:9b:da:7b:56:83:7d:a7:eb:7b:7c:cf:6c:5a:14:
a2:c6:ca:d9:93:2c:8d:98:e2:33:37:f6:c0:a1:a1:
20:c4:12:95:73:03:00:4d:ca:4e:87:a8:4b:48:4b:
a9:68:b1:84:8a:8d:cc:16:16:bb:53:bb:6d:01:09:
f6:07:a5:53:b0:80:85:46:49:2e:b9:aa:7d:27:76:
ff:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1C:EF:0A:42:1A:1A:EB:C3:EB:70:65:AC:CE:A8:14:E5:4B:12:23
X509v3 Authority Key Identifier:
keyid:36:9C:71:3C:51:98:7E:1F:FA:54:82:27:7F:5F:1C:8C:B7:22:F4:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpxxPFGYfh_6VIInf18cjLci9Es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c0:9f:f7:39:7d:4a:83:b2:a0:56:b7:97:42:b8:c1:6a:a1:
77:f9:8b:3a:71:83:45:d8:28:f1:e2:3b:34:04:15:87:f7:e8:
17:38:67:d3:8c:e7:25:ae:97:79:42:fe:c7:6c:53:52:a0:ab:
39:30:73:5a:2f:30:be:9e:6c:6b:1f:71:32:06:09:33:fe:35:
08:4c:87:8e:5f:81:17:a0:af:ff:bf:85:65:b0:37:18:16:29:
1a:03:9f:92:5e:d0:5d:90:e0:24:41:60:5d:5d:1a:12:03:e3:
1e:41:4b:ec:69:f5:db:96:c5:d4:de:e5:3a:ca:f2:ba:91:c5:
0a:56:6b:f1:47:54:8f:e8:23:17:04:7d:97:58:21:73:45:11:
12:f5:aa:ae:08:65:ea:81:c3:78:77:cd:ee:4e:7f:34:82:eb:
6e:e7:18:9a:43:06:66:49:a6:c3:ef:7c:af:d6:69:2d:4b:73:
55:ec:a5:ad:87:dd:55:b0:7c:14:46:90:01:2b:7a:63:30:4a:
a9:24:85:0c:ed:61:dc:49:11:06:6a:42:8d:ef:00:a8:59:ca:
81:00:43:2b:97:8e:c1:de:88:5e:05:09:ad:58:b2:25:9f:90:
17:65:0b:06:47:45:a7:3b:f8:f9:a5:e7:25:a1:c6:db:da:af:
b4:37:be:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:17:39 2025 by rpki-client