Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.mft
File: NPWeovpHqdYxGxyMxahqW5oOR6c.mft (raw, json)
Hash identifier: 7i4eCTyP6atF67k5uYSudLKL2qWrwVZEEwGSAW/1nE8=
Subject key identifier: 27:D5:C3:8B:4A:7E:EA:84:FF:63:8A:31:D8:D4:2C:13:78:31:DB:6D
Authority key identifier: 34:F5:9E:A2:FA:47:A9:D6:31:1B:1C:8C:C5:A8:6A:5B:9A:0E:47:A7
Certificate issuer: /CN=34f59ea2fa47a9d6311b1c8cc5a86a5b9a0e47a7
Certificate serial: 019A72CA591BA3DD42B7D0BBA89F53DA3C1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPWeovpHqdYxGxyMxahqW5oOR6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 12:00:54 +0000
Manifest this update: Tue 11 Nov 2025 12:00:54 +0000
Manifest next update: Wed 12 Nov 2025 12:00:54 +0000
Files and hashes: 1: NPWeovpHqdYxGxyMxahqW5oOR6c.crl (hash: 1rhpnXQUTmknz73Tlkz3Cjk91WhMXXz557DA9zUycXY=)
2: ugIdAnD72uDX1xk6AnCHQeEOh1Y.roa (hash: QffGW9BNMmaT3r0VD1GTXNsWErI53h66jEjYScdrUso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPWeovpHqdYxGxyMxahqW5oOR6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:59:1b:a3:dd:42:b7:d0:bb:a8:9f:53:da:3c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f59ea2fa47a9d6311b1c8cc5a86a5b9a0e47a7
Validity
Not Before: Nov 11 12:00:54 2025 GMT
Not After : Nov 12 12:00:54 2025 GMT
Subject: CN=27d5c38b4a7eea84ff638a31d8d42c137831db6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4b:10:00:10:5c:b5:78:4b:48:7c:06:fe:88:
da:47:09:af:d1:b8:85:14:22:7c:85:9e:b8:10:84:
d2:9d:13:00:fe:38:b4:3d:64:f5:11:92:da:b4:b0:
71:ed:68:f9:51:5f:ad:1e:a5:2c:46:24:4f:92:78:
a1:a4:ef:10:bd:12:d5:71:d2:89:6a:b3:e5:d5:b0:
f2:5d:30:1e:01:1a:6c:f7:96:e2:aa:45:89:9f:22:
c8:9a:e5:14:ab:49:de:f5:9b:ac:b4:15:5f:8b:aa:
9c:ec:20:89:ca:fa:a9:fa:83:81:ab:60:38:c9:c6:
c5:c0:34:71:f8:b3:b2:6f:84:58:5a:4c:8f:4c:d8:
75:f2:94:c8:77:db:fa:17:7f:0f:9e:e0:cd:f8:5e:
6e:11:14:5d:8c:94:a0:5a:c8:0e:bd:18:80:f9:1e:
15:c1:ed:b7:38:ba:3d:71:e8:46:6e:88:33:4f:26:
4f:5a:a8:6e:30:37:7a:ae:02:1a:95:b2:e4:e9:38:
07:74:a8:6e:69:27:0e:cf:65:bf:6f:bc:87:a8:7f:
6a:d8:87:2b:fd:7e:b8:98:a8:ef:ad:0f:2d:52:fd:
99:42:21:97:62:e2:cf:2e:0f:a9:24:20:c4:64:2b:
10:50:42:05:65:b8:30:fd:18:8a:4c:57:94:ec:83:
b2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D5:C3:8B:4A:7E:EA:84:FF:63:8A:31:D8:D4:2C:13:78:31:DB:6D
X509v3 Authority Key Identifier:
keyid:34:F5:9E:A2:FA:47:A9:D6:31:1B:1C:8C:C5:A8:6A:5B:9A:0E:47:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPWeovpHqdYxGxyMxahqW5oOR6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:08:5b:5a:06:e9:d3:41:47:b6:eb:62:5d:de:50:a9:d0:67:
d9:97:b7:69:d2:e1:de:ea:94:d0:52:72:4e:3c:f5:db:09:90:
b8:21:4e:22:be:9f:82:6a:18:1b:4c:db:42:87:b2:7c:e3:a8:
c3:55:bf:dd:e4:f6:54:73:8c:57:ec:19:60:a7:99:f2:95:6f:
cd:41:88:19:98:cb:32:e8:a9:d5:2b:76:91:26:51:9e:4b:9a:
e0:17:9a:ca:bd:21:49:94:cf:12:2d:ec:ba:5c:52:7f:c1:ca:
f2:f7:d8:98:d0:d6:35:56:c3:d8:12:af:6b:a0:8e:45:bb:91:
16:dd:84:ce:dc:85:26:ed:45:9a:f5:d8:45:c5:c9:25:1e:37:
e8:b9:c3:34:46:99:b8:c4:5e:a7:05:a0:43:d3:63:3c:fe:ed:
51:7c:4a:07:5e:19:b4:56:d2:8d:69:ba:6c:01:78:4f:de:2e:
8c:54:76:7c:0c:22:80:d9:db:f6:41:5b:5f:5e:33:85:17:d8:
fd:e3:5d:17:a0:6c:a7:09:50:70:44:2a:88:22:a3:09:b2:32:
a4:48:e3:49:a3:20:63:76:77:4d:88:c0:82:4c:d6:94:df:69:
4c:18:84:f6:10:e8:07:9e:05:21:26:c8:3f:17:e2:b2:c8:9f:
f6:ce:41:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:38:03 2025 by rpki-client