Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
File: naTpXS9Mw0pzdrc8DwObPhWPUVI.mft (raw, json)
Hash identifier: Brw/AQbdKjD6gCt1bY+1rRxQY/327Fhry9tCs3qOPPs=
Subject key identifier: 94:02:AC:E0:F6:50:01:1F:E7:12:36:BD:B3:C0:B8:0F:7B:61:29:3B
Authority key identifier: 9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
Certificate issuer: /CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Certificate serial: 01992EC786E3B0216657B6EF201B1008FD6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
Manifest number: 1584
Signing time: Tue 09 Sep 2025 14:00:52 +0000
Manifest this update: Tue 09 Sep 2025 14:00:52 +0000
Manifest next update: Wed 10 Sep 2025 14:00:52 +0000
Files and hashes: 1: WYyFBT5nmwxFR4gPo5unCY2UhVc.roa (hash: Z4ZpbpPZKoHHj3yG0X2Ro2qP/JaWFIzV9WlYUI0Hg8s=)
2: j9lH8J7G3WobH4lsD15m-VsHfXA.roa (hash: qeHJX0Tapm1zxSb8XB+NF4p89KIeCYI5mpUGKGseBY0=)
3: naTpXS9Mw0pzdrc8DwObPhWPUVI.crl (hash: GBk6e0HaK89PWQtB8iKJfvn9XZEq6RkWhbuFSHFoNMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:c7:86:e3:b0:21:66:57:b6:ef:20:1b:10:08:fd:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Validity
Not Before: Sep 9 14:00:52 2025 GMT
Not After : Sep 10 14:00:52 2025 GMT
Subject: CN=9402ace0f650011fe71236bdb3c0b80f7b61293b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f6:fd:f2:68:90:b9:c6:61:cf:ea:e7:88:d9:
a8:ef:04:82:f1:51:de:c3:5a:c6:f4:3c:e4:70:9f:
f4:cb:85:8e:35:f7:01:e2:0e:14:0c:30:2f:70:99:
72:87:75:26:48:8e:b2:98:1b:48:00:69:ea:0f:67:
cc:92:05:b4:8b:c2:fe:27:e4:ed:f8:e2:64:70:4d:
fc:2a:6c:28:65:b9:9f:df:eb:cd:27:aa:a3:fc:7e:
25:22:b9:12:99:17:d7:1c:96:61:76:20:b1:9f:ad:
e7:e4:94:08:62:23:8c:e0:03:c3:7e:e6:6b:7b:83:
d1:92:93:1c:72:ed:cd:a6:f3:39:ee:e3:69:fe:26:
ce:2a:71:8f:a5:b7:fa:63:35:c9:a7:b2:0f:2a:75:
8b:59:1f:2c:5d:9a:47:65:44:e9:08:d8:4d:f0:0b:
71:cb:d1:d8:f0:09:13:fd:2e:83:78:f7:18:63:cf:
28:5e:73:7c:ea:30:51:c4:35:d9:4d:85:18:a0:3c:
dc:12:53:d2:3f:b6:46:13:97:09:05:6d:d0:4c:fd:
6f:a6:70:be:84:87:49:c6:58:b3:1c:67:d3:68:b6:
1d:9d:cd:14:4c:2b:a1:08:7f:ec:4e:7e:a2:c3:cb:
2d:e9:75:5a:67:3e:1b:f5:a6:f4:bc:c0:d9:e0:f3:
48:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:02:AC:E0:F6:50:01:1F:E7:12:36:BD:B3:C0:B8:0F:7B:61:29:3B
X509v3 Authority Key Identifier:
keyid:9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:4c:1e:10:29:89:4d:ae:16:68:b1:18:7e:e6:79:b1:7a:e3:
4e:ce:7b:a4:ff:7e:05:ea:7c:02:64:6e:71:b6:12:4d:83:b8:
e7:3f:4c:57:9d:86:ff:a4:24:c8:b0:51:bf:0a:7c:d9:df:12:
cd:9c:96:f0:dc:d6:e3:6f:cb:f7:e8:c4:7a:ec:e0:3c:63:79:
6e:85:1a:c9:b6:f8:fc:16:69:49:fa:7d:3b:c6:21:ed:bf:a7:
99:3d:cb:3c:44:c1:e9:29:e2:e5:58:53:3c:3a:17:63:a9:ff:
5d:fb:e4:92:6d:74:37:1f:4c:a6:8f:b9:61:b1:05:2e:39:90:
4b:c9:f8:31:63:46:ee:90:99:22:c4:c5:e9:26:e3:ed:a3:2f:
6f:df:7f:bb:e3:e8:7e:80:bf:e9:9f:d2:12:88:19:c5:5a:aa:
2a:34:43:ed:78:e3:33:85:a3:1c:03:5a:0a:27:b0:1a:20:a4:
f7:4f:75:c0:91:40:40:80:36:6e:5d:e0:ec:04:4b:68:e6:2f:
4e:d2:71:dd:d5:c5:e9:3b:fc:bc:5d:f0:f6:52:5d:a5:58:a9:
a7:07:5e:2f:3c:21:f3:2e:d1:47:eb:ee:5c:99:35:b0:a8:a6:
a0:91:ec:3d:3e:2a:77:a2:75:b4:d9:82:15:1a:f2:1d:bf:f9:
1a:78:f2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:15:21 2025 by rpki-client