Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
File: nPYI_632AAge6SIpjksq6Wr_SOg.mft (raw, json)
Hash identifier: oxxlxQOD7V28T7L90WbhhM3kNoeYs70dbpM4LxFmUr4=
Subject key identifier: 99:7E:8D:EE:86:3E:EE:A4:42:EB:9E:D5:11:90:FC:C0:B7:D2:3C:D7
Authority key identifier: 9C:F6:08:FF:AD:F6:00:08:1E:E9:22:29:8E:4B:2A:E9:6A:FF:48:E8
Certificate issuer: /CN=9cf608ffadf600081ee922298e4b2ae96aff48e8
Certificate serial: 019936EEAD1159BC1C968C9D2190843C7079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
Manifest number: 167C
Signing time: Thu 11 Sep 2025 04:00:35 +0000
Manifest this update: Thu 11 Sep 2025 04:00:35 +0000
Manifest next update: Fri 12 Sep 2025 04:00:35 +0000
Files and hashes: 1: ObbHotU_QnvsulgBzQaW4wh0HAk.roa (hash: mbgTfoasS2/JRLVjEdWRajTXVRhnW7d5YvctUH9mztI=)
2: nPYI_632AAge6SIpjksq6Wr_SOg.crl (hash: 6qMQ1plACbSo5LB4ThNVFFsd5Umo5mUYathxvWR4XsU=)
3: sLdQOZGVUyb44hu-OktavwbL-fA.roa (hash: 61zdCvV2SZ1HoaLvCC14jhWwxqjS5pgyZuPOqRzMG/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:ee:ad:11:59:bc:1c:96:8c:9d:21:90:84:3c:70:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf608ffadf600081ee922298e4b2ae96aff48e8
Validity
Not Before: Sep 11 04:00:35 2025 GMT
Not After : Sep 12 04:00:35 2025 GMT
Subject: CN=997e8dee863eeea442eb9ed51190fcc0b7d23cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:75:25:e3:4c:ca:bc:61:1c:5a:77:4f:95:08:
1e:31:97:53:22:b0:1a:aa:7e:b7:8f:e7:ce:24:35:
f6:43:3f:c1:38:db:1b:3e:98:1a:b4:87:12:30:bb:
4a:74:b0:35:d6:07:f2:7d:68:ef:01:42:65:6a:73:
03:ca:f5:61:c3:d9:53:23:e5:24:53:27:17:c2:28:
9a:00:03:0a:e1:9f:46:ef:84:c2:93:38:af:59:5d:
c6:9d:40:69:e2:44:95:40:95:56:a0:c3:0c:3a:3a:
e1:9c:d8:99:ef:08:ab:bb:d4:df:36:04:1d:ef:ec:
6c:70:4c:e4:b1:1c:b6:b8:1a:19:3f:ef:33:a6:7d:
d5:59:8e:dd:99:b1:3f:58:20:9a:b7:5f:09:2a:8a:
2b:43:69:a6:77:ff:0a:f1:44:e1:fc:73:12:9f:b2:
1c:10:52:ce:42:8d:21:1a:88:91:93:a8:ed:b3:1e:
8a:5b:64:94:82:15:3b:41:05:11:b5:e5:32:31:c2:
5c:c5:42:b2:fd:3d:b2:03:f8:1f:af:a1:4b:fd:e7:
3d:61:ce:05:83:42:87:b8:12:b3:fb:bc:51:95:42:
6a:50:4a:58:19:60:19:cd:fa:94:4e:6f:b8:d6:05:
ab:d2:ec:65:22:6d:09:ae:af:db:dd:c6:14:d3:fd:
52:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7E:8D:EE:86:3E:EE:A4:42:EB:9E:D5:11:90:FC:C0:B7:D2:3C:D7
X509v3 Authority Key Identifier:
keyid:9C:F6:08:FF:AD:F6:00:08:1E:E9:22:29:8E:4B:2A:E9:6A:FF:48:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:0a:5d:f6:2c:66:53:93:5b:31:ac:6c:68:bb:75:ce:69:ee:
34:0c:f0:2c:b4:55:e4:ce:08:66:ed:8c:9d:7a:11:9e:89:a9:
c3:fd:48:a4:9e:84:f9:0e:7a:b1:3e:29:2d:b8:d9:65:86:9c:
40:e5:f3:d6:03:6a:95:02:50:ce:6a:69:ad:74:0d:7e:83:ba:
b0:65:f5:cc:0a:45:0f:c0:d1:bc:39:fd:63:19:84:4f:55:8b:
08:eb:60:35:cd:00:11:80:18:8a:de:2e:36:c7:7a:54:c6:de:
b6:12:55:9d:7f:d0:75:38:30:5f:34:cc:3f:3c:4b:dc:dc:71:
3a:cd:ac:08:3c:8c:30:eb:52:e5:93:a1:6f:6d:e2:ca:4f:82:
4b:30:26:da:5c:5c:33:37:c0:96:d1:19:1d:aa:ca:32:bf:f3:
c5:4a:12:fe:8d:dd:9a:0d:61:b6:14:d3:92:cb:99:ac:40:e8:
92:c2:1a:a8:8f:18:56:17:5e:f7:d5:48:04:33:79:d8:ca:d3:
50:2b:4f:2a:6b:5c:fe:f5:7f:37:57:93:75:ef:cd:f9:83:a7:
26:a2:13:e8:f2:81:ff:95:a4:b1:57:92:a0:50:ce:72:3b:38:
41:2b:08:51:21:9c:8f:ea:d7:46:32:bb:82:d1:dc:55:38:04:
9b:00:db:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 12:45:39 2025 by rpki-client