Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
File: NpgLSGOkwPwQnpM6n494kuQmIvg.mft (raw, json)
Hash identifier: 4Sa3MyRJJBxsKfp+so164nzv0FRIRVTa5uZOxz8MY0I=
Subject key identifier: EE:47:EE:69:ED:CE:B0:6C:80:FF:B9:CC:2F:FD:01:88:CA:17:16:A6
Authority key identifier: 36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
Certificate issuer: /CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Certificate serial: 01974AE8B10E81416E6E20F062B463ED5125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 15:00:52 +0000
Manifest this update: Sat 07 Jun 2025 15:00:52 +0000
Manifest next update: Sun 08 Jun 2025 15:00:52 +0000
Files and hashes: 1: LuqTaLAIb1FyHM5wmPs1YLA-1NQ.roa (hash: qV1VopZp94X/gYFO14Dpzbo5vZkWKbjRJxqhcQk1sTY=)
2: NpgLSGOkwPwQnpM6n494kuQmIvg.crl (hash: U7W00quqdOKxhQU2sqs37EVedKqJZev1TLlz0/8BUbM=)
3: kBYkIoAwOTb1jZVoI-2IjKFmw9s.roa (hash: XJGvgivLL6yw0361zmrsd505aLJW4OPiGkt/w/pz35g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:b1:0e:81:41:6e:6e:20:f0:62:b4:63:ed:51:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Validity
Not Before: Jun 7 15:00:52 2025 GMT
Not After : Jun 8 15:00:52 2025 GMT
Subject: CN=ee47ee69edceb06c80ffb9cc2ffd0188ca1716a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:de:a9:01:4d:bf:e2:a7:9d:82:da:76:b2:dd:
ff:6e:ad:75:4e:c2:55:dd:59:67:ee:5e:0a:95:2d:
ec:59:c8:d9:4c:e0:e8:62:df:c7:4b:0d:17:c8:f1:
ff:43:28:44:c6:66:ac:cf:84:7d:18:ff:c0:1c:60:
7e:5f:07:c0:7d:2e:f7:fb:f2:51:4a:a0:b1:18:41:
59:8b:22:8b:55:00:f9:fd:84:9f:91:cf:bf:44:0e:
f5:fe:97:cd:36:46:22:47:8a:d6:cb:0f:9f:ad:06:
a7:a5:fb:e9:39:8d:be:f1:90:57:c2:a2:86:3d:af:
15:eb:59:b0:f8:bf:e6:d1:02:98:58:eb:a3:1d:7e:
2b:9a:86:20:19:d4:2f:f9:19:55:95:ec:b6:7d:c2:
ae:fe:ea:93:bd:99:ac:8f:8c:ee:17:21:76:9d:38:
bb:44:ab:81:d5:5d:91:0d:bd:6d:46:e7:02:8f:6a:
e1:cd:ee:5f:1e:58:ed:a4:30:13:54:e8:28:24:c8:
32:4e:bb:72:3f:e2:84:06:cc:2e:94:da:20:7a:cb:
d1:1d:ad:bd:0b:7e:4b:32:67:62:4c:0b:fe:35:e4:
37:7e:94:f7:03:d8:17:08:c1:76:02:62:79:f3:d2:
df:82:49:1d:33:9d:6e:ec:0e:fa:6b:53:34:00:01:
85:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:47:EE:69:ED:CE:B0:6C:80:FF:B9:CC:2F:FD:01:88:CA:17:16:A6
X509v3 Authority Key Identifier:
keyid:36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:07:b7:2d:2d:32:38:b4:4a:de:64:f1:07:e9:21:e6:14:bb:
c5:c4:00:e3:4c:9f:1c:93:99:37:90:0f:20:fd:11:95:2a:e9:
89:32:25:41:a9:22:44:27:03:6a:15:bc:a4:13:a9:9a:f8:53:
69:02:a1:94:94:1d:1c:91:5f:98:86:c3:5c:7b:b7:2b:e4:ff:
4e:bf:af:d4:8e:9e:71:94:fc:4e:1e:04:3f:7f:1a:ec:d0:bb:
36:58:10:28:5c:9d:f6:42:4f:80:0c:a5:97:22:e1:17:0e:da:
f7:b7:6d:56:5b:21:a5:3b:73:19:32:27:31:ec:29:aa:dc:15:
e6:5d:66:26:7b:fe:bc:27:13:96:b7:22:fa:bf:b0:c8:81:44:
3c:5a:fe:96:07:51:63:38:fa:92:46:f2:e1:62:68:17:e5:4f:
f5:3f:16:0f:a6:43:96:16:53:19:bd:cf:11:6c:a7:77:ef:32:
49:3b:4c:73:96:5f:65:10:b2:52:aa:ce:dc:29:96:94:a8:c8:
c3:e9:61:05:92:19:76:41:6b:69:5c:17:f0:19:9c:f6:ff:ca:
6b:60:64:46:eb:83:57:2f:40:8d:7e:9a:7f:df:31:ea:d4:2c:
90:09:57:81:ae:2a:5d:9f:0b:2b:65:65:95:d8:ca:49:7c:9a:
b3:00:bc:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdK6LEOgUFubiDwYrRj7VElMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OTgwYjQ4NjNhNGMwZmMxMDllOTMzYTlmOGY3ODkyZTQy
NjIyZjgwHhcNMjUwNjA3MTUwMDUyWhcNMjUwNjA4MTUwMDUyWjAzMTEwLwYDVQQD
EyhlZTQ3ZWU2OWVkY2ViMDZjODBmZmI5Y2MyZmZkMDE4OGNhMTcxNmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd6pAU2/4qedgtp2st3/bq11TsJV
3Vln7l4KlS3sWcjZTODoYt/HSw0XyPH/QyhExmasz4R9GP/AHGB+XwfAfS73+/JR
SqCxGEFZiyKLVQD5/YSfkc+/RA71/pfNNkYiR4rWyw+frQanpfvpOY2+8ZBXwqKG
Pa8V61mw+L/m0QKYWOujHX4rmoYgGdQv+RlVley2fcKu/uqTvZmsj4zuFyF2nTi7
RKuB1V2RDb1tRucCj2rhze5fHljtpDATVOgoJMgyTrtyP+KEBswulNogesvRHa29
C35LMmdiTAv+NeQ3fpT3A9gXCMF2AmJ589LfgkkdM51u7A76a1M0AAGFSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5H7mntzrBsgP+5zC/9AYjKFxamMB8GA1UdIwQY
MBaAFDaYC0hjpMD8EJ6TOp+PeJLkJiL4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnBnTFNHT2t3UHdRbnBNNm40OTRrdVFtSXZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82OGY0NGItMzY3NS00YWQ4LWEwY2Et
NzRiYTI2YWFmMWY2LzEvTnBnTFNHT2t3UHdRbnBNNm40OTRrdVFtSXZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82OGY0NGItMzY3NS00YWQ4LWEwY2EtNzRiYTI2YWFmMWY2
LzEvTnBnTFNHT2t3UHdRbnBNNm40OTRrdVFtSXZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABAe3LS0y
OLRK3mTxB+kh5hS7xcQA40yfHJOZN5APIP0RlSrpiTIlQakiRCcDahW8pBOpmvhT
aQKhlJQdHJFfmIbDXHu3K+T/Tr+v1I6ecZT8Th4EP38a7NC7NlgQKFyd9kJPgAyl
lyLhFw7a97dtVlshpTtzGTInMewpqtwV5l1mJnv+vCcTlrci+r+wyIFEPFr+lgdR
Yzj6kkby4WJoF+VP9T8WD6ZDlhZTGb3PEWynd+8ySTtMc5ZfZRCyUqrO3CmWlKjI
w+lhBZIZdkFraVwX8Bmc9v/Ka2BkRuuDVy9AjX6af98x6tQskAlXga4qXZ8LK2Vl
ldjKSXyaswC8kg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 20:04:13 2025 by rpki-client