Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
File: nPYI_632AAge6SIpjksq6Wr_SOg.mft (raw, json)
Hash identifier: dNK/ESQXZrdhgm3eVZI9baxLJkvOvkZCzLxFpkXkzXo=
Subject key identifier: 52:3F:DC:35:40:26:A6:FE:F7:F4:66:D8:D0:56:E5:31:44:3C:04:91
Authority key identifier: 9C:F6:08:FF:AD:F6:00:08:1E:E9:22:29:8E:4B:2A:E9:6A:FF:48:E8
Certificate issuer: /CN=9cf608ffadf600081ee922298e4b2ae96aff48e8
Certificate serial: 019A71EEB0A887F01F26B343DFA027FE9EB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 08:00:59 +0000
Manifest this update: Tue 11 Nov 2025 08:00:59 +0000
Manifest next update: Wed 12 Nov 2025 08:00:59 +0000
Files and hashes: 1: RvXB7TupJSt9FEkzNNElWKNqWuk.roa (hash: yijhlw1vumObJvF+OXDbjNPPtftfHa2fND852vV46Co=)
2: nPYI_632AAge6SIpjksq6Wr_SOg.crl (hash: drtSdgidSoShyWFkQ2FQuFTmxgv63/MxpD7hZzkzORo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:b0:a8:87:f0:1f:26:b3:43:df:a0:27:fe:9e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf608ffadf600081ee922298e4b2ae96aff48e8
Validity
Not Before: Nov 11 08:00:59 2025 GMT
Not After : Nov 12 08:00:59 2025 GMT
Subject: CN=523fdc354026a6fef7f466d8d056e531443c0491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:61:c8:9d:3d:f2:70:80:bf:17:56:fb:86:58:
54:76:95:c6:d8:bd:c4:c7:33:d2:56:3e:34:b7:4e:
91:8d:92:ba:a0:71:ed:c3:a3:79:df:ea:02:78:64:
c7:c5:47:dc:ea:26:3f:fd:ad:b8:4a:cd:44:91:8e:
db:19:da:81:2f:c4:ce:19:b5:d8:4f:62:7b:8c:cb:
3f:55:8e:89:18:2a:bd:78:62:00:19:d7:74:e0:81:
c4:73:b1:7a:4e:02:0b:f0:cd:c1:cf:26:28:e3:77:
c1:d7:fd:d5:6e:7f:5b:20:d4:fa:47:71:ef:63:7b:
c9:47:e8:2a:df:87:bb:53:4f:71:8e:54:95:54:80:
0b:70:6b:a0:c4:5e:75:ad:09:71:69:2b:13:8c:df:
f3:4a:74:51:1c:c5:9e:13:25:68:fa:10:49:a3:82:
f4:a1:45:c1:22:86:18:ef:94:91:47:e3:53:28:44:
d8:c7:7e:81:8e:fc:f5:e9:e1:bb:01:c6:46:37:0f:
45:f8:b4:2c:38:ad:5b:e6:f7:20:53:6c:89:04:f2:
d1:46:28:c6:45:5d:ec:6b:49:eb:fb:2a:99:5a:da:
77:ae:1c:f0:e9:fe:8f:81:89:68:6c:c0:59:d6:3b:
41:a8:94:cd:03:24:e5:2d:4b:91:dd:71:60:40:3e:
02:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3F:DC:35:40:26:A6:FE:F7:F4:66:D8:D0:56:E5:31:44:3C:04:91
X509v3 Authority Key Identifier:
keyid:9C:F6:08:FF:AD:F6:00:08:1E:E9:22:29:8E:4B:2A:E9:6A:FF:48:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:18:a3:51:c2:77:85:c8:bd:0a:97:d3:23:6c:27:82:d6:f6:
fe:ef:a9:e8:e1:f5:aa:f4:88:cf:a5:cc:22:08:83:3b:ff:a2:
77:d2:93:6b:f5:a7:77:bb:96:60:66:e4:68:cb:c1:3e:e2:10:
7e:fa:81:8a:63:90:42:73:fe:f6:c6:46:77:7b:5d:3d:d6:2c:
09:df:73:af:94:6f:88:ca:4f:ea:74:8f:75:51:1e:d9:a7:65:
38:62:0f:7e:2c:a8:07:12:57:e0:0f:de:5c:14:cf:f7:61:7b:
9b:4c:98:ad:3b:81:27:41:dd:66:91:12:72:20:6b:e3:f8:48:
a6:0b:62:e9:f9:32:ae:78:3f:c4:61:1b:2b:89:94:29:5a:50:
c6:1e:fb:1d:98:fd:b5:6c:a2:0e:22:d6:da:3a:b8:40:b6:d2:
1a:a8:03:20:bc:f6:3e:65:9f:b5:66:75:b6:43:d1:3c:74:d9:
8a:48:9a:06:8b:2d:ff:ea:5b:af:e0:e0:f5:13:72:9d:5d:e3:
01:57:d7:ca:bf:88:63:a7:c4:95:b7:a3:40:24:ea:1d:42:29:
a3:62:af:0a:a6:4e:43:50:d0:a0:c3:6f:22:eb:5f:37:9e:e6:
48:bc:6c:4a:4a:4d:e9:a2:92:ac:b4:17:5f:39:3e:a1:b3:d4:
b5:12:9d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:49 2025 by rpki-client