Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
File: NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft (raw, json)
Hash identifier: o7CuB9lqJZzijjGtNfNgIqMDyoJTTaf3a7Sn+3WThJk=
Subject key identifier: A6:45:D7:5F:3A:FF:27:6F:56:C6:E9:C0:DF:12:3B:29:B6:71:48:40
Authority key identifier: 34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46
Certificate issuer: /CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346
Certificate serial: 0199240DB6C289F906BA4F7C42454B8D958D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
Manifest number: 13DC
Signing time: Sun 07 Sep 2025 12:01:42 +0000
Manifest this update: Sun 07 Sep 2025 12:01:42 +0000
Manifest next update: Mon 08 Sep 2025 12:01:42 +0000
Files and hashes: 1: HXMlv9NxuKboyUtKNMBCZQbSjW0.roa (hash: mL85Iwg8ADnZv62S9C7eQgo7c8UTYuO4j6CsY6zppGQ=)
2: NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl (hash: YSlgjNZ9Lr725tJWCZWBMIf15UKLhvFh9PpzDDzJuCc=)
3: eJTJ2xXloI9cYA2PdEb7QzgzZMI.roa (hash: pJvyPt1aoxPTKu/5G35raZf6vtLPUO+Laz/ssfLJWrA=)
4: nyGwWtmUUenCuiNvi2rme3JvAnM.roa (hash: mv2iRNCUpphbjEmFj2ZluXSrRNCmkDp7k1nJS6ve48g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:b6:c2:89:f9:06:ba:4f:7c:42:45:4b:8d:95:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346
Validity
Not Before: Sep 7 12:01:42 2025 GMT
Not After : Sep 8 12:01:42 2025 GMT
Subject: CN=a645d75f3aff276f56c6e9c0df123b29b6714840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b6:5a:73:5b:9d:41:05:cc:46:35:45:5d:19:
05:78:ab:75:e2:30:b7:44:10:94:de:06:cb:46:01:
7d:f0:60:d0:6f:f1:79:a8:62:0f:78:7f:88:8a:6f:
b2:f9:b6:55:bb:14:34:92:96:17:8c:3d:28:6e:bb:
98:0b:96:e7:ac:10:3d:cf:fc:48:5d:06:f8:61:11:
76:98:2c:0a:8e:e2:66:21:b2:a8:87:b7:df:75:99:
ff:4a:d1:1e:d8:cb:98:2d:d9:5e:62:ce:12:4f:03:
b6:b4:e9:e4:53:b8:b7:21:15:8f:8b:15:6b:00:40:
3d:eb:ed:5a:93:a4:69:03:8d:34:76:28:74:77:a4:
95:b1:eb:cf:ac:f9:22:8b:c7:45:16:00:14:2a:66:
1a:a1:0c:b9:37:a9:e4:5e:37:1c:68:4c:b5:fe:1f:
44:34:5e:ae:3b:be:1a:0d:43:1f:a9:ba:c4:68:6b:
d6:7a:1d:90:3c:d6:e2:b8:05:07:38:8f:f9:7f:d6:
46:c4:4c:7d:09:96:4d:3c:69:f0:f3:51:16:dd:33:
48:4b:fc:e4:7d:cb:e1:1e:2a:68:08:eb:4e:86:85:
a5:eb:80:9f:9e:09:f3:2d:64:ec:d0:99:52:bc:bc:
f4:ca:50:57:ea:03:5f:28:3c:89:16:bc:1d:e9:ee:
19:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:45:D7:5F:3A:FF:27:6F:56:C6:E9:C0:DF:12:3B:29:B6:71:48:40
X509v3 Authority Key Identifier:
keyid:34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:3c:db:e1:01:75:0c:0f:43:e2:7e:29:f7:a6:88:85:e4:29:
b1:c1:20:3f:ae:8e:8b:2f:c2:57:5f:c6:94:43:0f:cb:79:3a:
3c:ff:7d:80:76:f7:58:99:3e:36:22:ff:0f:1a:09:45:36:28:
7b:d8:55:2c:28:66:53:4d:7f:9d:ec:31:b4:b4:fb:93:e7:c8:
08:5a:75:8e:6b:ed:93:1f:ac:68:00:74:9f:cb:57:08:3a:1a:
14:e7:88:ce:8f:cb:c6:f5:ac:23:92:ae:c9:cc:56:88:0f:0b:
f5:69:51:d0:7e:b1:62:78:f4:81:d6:8b:65:c9:9c:4e:04:6b:
82:6b:d5:ce:7f:46:9b:4c:ad:41:43:99:f2:75:48:36:f8:4a:
2e:0d:f4:a8:88:4b:1a:88:84:1b:f4:6b:82:8c:ef:99:ed:e3:
ec:ef:1b:2f:cd:0e:b9:c6:73:96:26:a0:cd:1a:5a:5f:c8:b6:
41:94:b5:02:9d:a5:e1:a0:7b:a6:30:eb:8f:78:20:7e:bf:e5:
b6:ff:a0:cb:c3:c2:ce:6a:b2:d6:07:11:12:e7:b0:2a:43:c0:
0f:b9:43:51:8a:ca:eb:9c:cc:6d:f5:bd:08:28:0c:b2:8b:6e:
58:b9:f2:33:bf:56:27:7d:49:e9:d2:be:02:35:7a:d6:db:34:
23:a4:0e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:51:00 2025 by rpki-client