Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
File: NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft (raw, json)
Hash identifier: 9QXN6ob2TVZkum2wau0wfBQPIq4GseJdu45RM9KuFhI=
Subject key identifier: 1D:80:65:74:CB:B7:D4:73:1A:2C:ED:1C:57:96:01:0E:2C:C1:C4:CA
Authority key identifier: 34:F7:83:61:A0:77:B0:D7:89:13:5C:CD:68:B1:26:1D:B1:38:F9:50
Certificate issuer: /CN=34f78361a077b0d789135ccd68b1261db138f950
Certificate serial: 01984B54AFD2BC944C698502D9BA3C954C30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
Manifest number: 0FFD
Signing time: Sun 27 Jul 2025 10:01:37 +0000
Manifest this update: Sun 27 Jul 2025 10:01:37 +0000
Manifest next update: Mon 28 Jul 2025 10:01:37 +0000
Files and hashes: 1: BT-QKLCE4MZ0YtWA2nAk6qpxv6g.roa (hash: t+OljMW5uOHxrHIlucZj5mZPbb09wnIuaUx+FWzOywc=)
2: NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl (hash: 4CoEyjGIUfAkO2OhHDHvnzGhADKMBVMG1lwXTKTny6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:af:d2:bc:94:4c:69:85:02:d9:ba:3c:95:4c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f78361a077b0d789135ccd68b1261db138f950
Validity
Not Before: Jul 27 10:01:37 2025 GMT
Not After : Jul 28 10:01:37 2025 GMT
Subject: CN=1d806574cbb7d4731a2ced1c5796010e2cc1c4ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c8:66:cc:17:cd:7b:fd:3f:47:9c:54:a5:50:
dd:59:11:62:56:b6:8d:d7:03:d4:c9:ae:ec:c8:d3:
20:27:73:dd:d1:66:3a:d8:d0:cf:dc:b3:1f:ec:40:
0c:bb:f1:19:b5:f6:f5:cf:e5:64:47:e9:01:8d:7f:
1f:44:1d:2c:1e:0e:c9:48:9e:64:48:10:7c:d1:a7:
19:c1:7b:67:37:fb:25:1e:1f:2f:54:33:95:5d:7c:
28:5f:40:a9:a4:fd:38:30:a4:cd:3e:53:3a:c7:22:
73:58:bc:55:79:72:83:df:c3:5e:8a:bf:6e:54:ab:
10:20:7c:2f:30:27:ae:ff:63:c4:71:81:43:66:da:
09:b3:bf:48:34:93:81:b5:f6:e5:58:51:42:4c:76:
59:8f:30:ff:56:61:6f:55:53:e2:d2:d0:71:66:57:
78:56:f5:23:26:3c:3f:a9:fe:4e:25:33:7f:94:aa:
5f:c8:f2:33:d9:82:d7:6c:0f:4f:46:54:70:2f:c7:
cb:f7:80:a1:0b:95:00:eb:e6:f0:53:54:d3:09:ef:
e9:3a:5d:dd:68:ed:a7:32:57:b4:c7:e4:92:16:44:
79:0d:2c:1c:32:dc:d6:58:78:d7:d9:09:94:ef:df:
1c:08:e5:9a:67:87:6e:e5:a5:24:ea:49:90:16:ec:
c5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:80:65:74:CB:B7:D4:73:1A:2C:ED:1C:57:96:01:0E:2C:C1:C4:CA
X509v3 Authority Key Identifier:
keyid:34:F7:83:61:A0:77:B0:D7:89:13:5C:CD:68:B1:26:1D:B1:38:F9:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:2f:79:28:ce:cc:fe:aa:d2:e1:b7:f9:87:43:a3:eb:3f:42:
bd:be:8d:89:f9:e6:a9:93:a2:c3:1c:2d:b2:09:55:3c:01:8a:
ff:a1:9a:b8:9e:27:1b:a4:3d:08:04:09:37:e5:ac:68:19:07:
0b:77:3d:ec:13:42:ea:b2:c3:f6:77:df:dd:0f:12:da:55:a1:
e2:55:c2:13:b5:31:50:36:4b:7b:95:ab:b2:df:31:01:66:f8:
3a:f4:73:3f:58:58:05:99:7b:0c:23:bb:af:21:2e:da:97:35:
fc:38:69:ea:68:86:be:7c:6a:73:96:07:cb:3c:11:47:89:4e:
3d:6e:b3:6b:58:fa:79:ce:77:68:bb:d7:cf:e6:25:8a:d8:db:
39:5a:d6:29:fd:a4:28:27:02:f2:c7:d5:03:15:1c:6e:e9:54:
04:44:49:2c:cd:74:ea:88:d8:d2:1f:ee:1a:93:9c:ee:22:a1:
f1:be:8b:c0:2c:2a:d7:29:60:61:85:f5:5c:e3:a6:12:ce:ec:
19:15:b7:4b:96:84:d7:38:02:26:84:73:b6:44:ed:8d:d1:48:
d4:03:7b:bc:16:8e:c4:f2:60:48:cb:60:d5:be:67:41:1d:40:
4c:ef:a7:f6:fa:0a:2e:0c:dd:db:b4:1f:fe:23:2c:4a:78:1d:
72:85:8f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:21:09 2025 by rpki-client