Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft
File: np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft (raw, json)
Hash identifier: cZTmQZERhm1cItO9shoKpJIIlnYQQjO9HNqqfm9t+p8=
Subject key identifier: 67:D2:AE:8F:96:20:A0:00:B1:9F:D4:4B:F0:E4:81:B2:83:7D:A2:88
Authority key identifier: 9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54
Certificate issuer: /CN=9e9e6887ea7572a6411306c87b0cc089397a6354
Certificate serial: 0197602725AD6D834B93EAF53FEDC87C5AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft
Manifest number: 113E
Signing time: Wed 11 Jun 2025 18:01:07 +0000
Manifest this update: Wed 11 Jun 2025 18:01:07 +0000
Manifest next update: Thu 12 Jun 2025 18:01:07 +0000
Files and hashes: 1: YJ50MQnvVhHtjWvLvxqRLtfcQ7A.roa (hash: dYfbwzgf/ynRL4xNJih6ua1qw+Sw/CexFK1ACNOG+tc=)
2: np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl (hash: 1kBUvFvkZImyvEvzYw83JmMO5OOpX86OlhdjOl6tXng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:27:25:ad:6d:83:4b:93:ea:f5:3f:ed:c8:7c:5a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e9e6887ea7572a6411306c87b0cc089397a6354
Validity
Not Before: Jun 11 18:01:07 2025 GMT
Not After : Jun 12 18:01:07 2025 GMT
Subject: CN=67d2ae8f9620a000b19fd44bf0e481b2837da288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d3:a5:25:a9:9f:6c:85:3b:f1:68:ff:6d:2d:
00:d0:cb:19:8b:cc:2e:d6:02:8e:22:36:72:bc:8d:
6f:7d:67:b4:4f:b6:aa:01:64:a0:65:3e:d3:71:ab:
8f:a0:13:52:34:dd:16:de:5c:db:4e:8b:3c:b5:93:
22:2f:c0:a9:bb:21:04:bd:03:ce:0b:20:72:a0:67:
12:57:d9:d2:89:c1:a8:88:26:9b:e8:69:fc:fc:17:
65:99:b3:cf:3a:fa:48:91:86:76:a8:d7:56:a6:95:
1f:bf:25:a7:40:62:98:d5:f7:ec:ab:c0:48:6a:c8:
c8:40:5c:98:b0:ec:d7:33:06:b8:ed:0e:2a:eb:42:
b9:6b:bc:eb:29:71:1d:e2:21:16:75:8c:63:3c:e9:
a4:27:5b:6d:a1:fe:e6:8b:4f:ee:80:28:f5:f3:4c:
dc:ac:72:07:f3:f7:f1:f6:85:5e:f4:53:37:64:bb:
ca:24:5b:e6:08:34:a6:31:7d:58:98:c0:d6:18:1a:
10:4f:0f:4f:a1:e1:93:7e:2a:ec:7e:6d:0f:98:cf:
57:18:fc:32:54:f3:8c:9f:bb:44:3c:8e:b4:a7:16:
e1:9d:89:51:cf:7f:a3:04:04:74:a5:9f:3e:92:57:
84:32:8f:04:8d:f0:78:f7:f9:18:4d:d6:e5:6b:c6:
1b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D2:AE:8F:96:20:A0:00:B1:9F:D4:4B:F0:E4:81:B2:83:7D:A2:88
X509v3 Authority Key Identifier:
keyid:9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:35:04:86:b5:fe:6d:00:09:cc:bf:93:d7:3c:15:43:13:d6:
64:07:2f:a2:28:e4:db:cb:83:60:d0:5b:cf:99:58:04:4d:5b:
7e:7e:f4:e0:a8:4c:eb:91:94:f8:4a:92:48:81:1b:1b:08:65:
3c:71:2c:76:4f:64:2e:02:eb:2d:51:de:19:69:e7:23:56:bf:
9b:26:9e:7d:01:91:e6:23:f0:57:df:29:40:c7:68:9a:07:8e:
67:32:10:75:06:c0:f6:b9:10:a3:16:cf:41:b4:9f:c2:35:01:
1a:c5:16:47:77:8f:b5:88:67:11:1f:09:97:68:ed:8f:91:e5:
2b:9a:24:fc:41:66:72:ba:0a:a1:52:2d:90:29:41:82:8c:e6:
4f:d6:58:ee:6f:89:6d:f6:97:e4:53:8e:e0:1e:5a:9f:2a:95:
a6:5f:b8:4a:17:bc:15:14:04:6e:48:c8:54:6b:7f:f3:0d:f3:
5f:1c:83:08:46:77:24:31:67:26:f5:d6:e3:a9:e7:56:fe:da:
d8:e2:00:15:5b:51:2c:be:06:52:fc:5e:d1:46:4a:1a:7b:c2:
ef:b6:56:f0:56:55:b2:a2:97:a1:4e:c4:8e:4a:6f:62:0f:8c:
0b:3c:a7:b5:26:f7:af:57:95:17:f4:52:a0:17:7b:b8:d1:e7:
59:52:44:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 01:31:04 2025 by rpki-client