Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft
File: np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft (raw, json)
Hash identifier: 8tK/pdxv5rcOxsv2on9MteW6iD3pyZPp1S3dr9tr5/I=
Subject key identifier: DF:50:58:C5:02:78:2D:F6:EE:EA:BD:C8:BE:34:98:A9:DF:31:CA:71
Authority key identifier: 9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54
Certificate issuer: /CN=9e9e6887ea7572a6411306c87b0cc089397a6354
Certificate serial: 0199221EF94160D4846A600566C3A397CF90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft
Manifest number: 1227
Signing time: Sun 07 Sep 2025 03:01:19 +0000
Manifest this update: Sun 07 Sep 2025 03:01:19 +0000
Manifest next update: Mon 08 Sep 2025 03:01:19 +0000
Files and hashes: 1: YJ50MQnvVhHtjWvLvxqRLtfcQ7A.roa (hash: dYfbwzgf/ynRL4xNJih6ua1qw+Sw/CexFK1ACNOG+tc=)
2: np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl (hash: jcDHR5FHSL6MxjW+S8t0bS92vMpRGbsZRL0totaxqPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:f9:41:60:d4:84:6a:60:05:66:c3:a3:97:cf:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e9e6887ea7572a6411306c87b0cc089397a6354
Validity
Not Before: Sep 7 03:01:19 2025 GMT
Not After : Sep 8 03:01:19 2025 GMT
Subject: CN=df5058c502782df6eeeabdc8be3498a9df31ca71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ad:a9:ef:d8:e5:8b:19:c3:9d:2e:53:17:28:
64:37:65:09:c3:dc:a2:00:62:2a:8e:af:3f:52:5d:
2f:36:72:e6:a3:f5:db:ae:eb:b4:cb:be:24:6a:d9:
e9:22:38:46:03:d2:77:26:db:1e:da:13:c7:b7:91:
bb:f7:ea:d4:53:ef:3a:b6:95:9c:11:e7:6e:db:47:
e0:e0:11:e4:9c:8f:f7:2d:d2:37:3e:e1:31:5d:ea:
50:d5:04:e5:54:d8:e6:02:fd:4c:c3:28:ba:86:c4:
fa:79:82:e1:f9:7b:a2:33:a1:e0:0f:71:52:e0:14:
f0:8c:7a:62:cf:2e:c2:62:90:54:13:51:97:ed:e3:
e3:28:61:40:17:14:aa:bb:66:ad:b6:06:f9:cd:da:
f8:76:e8:ab:5c:e6:6f:5a:71:24:9a:84:e4:77:1c:
96:78:6a:5e:78:53:c4:32:2d:2b:2c:5c:1d:a5:f9:
a8:1c:8e:de:37:95:e4:bf:35:70:1b:fa:a6:a5:d5:
ac:77:cd:60:07:0f:12:fe:38:56:b5:d3:0c:50:83:
fa:89:f4:e5:c9:b5:b0:a2:58:b7:32:b3:01:49:7d:
40:90:b7:b9:34:27:a8:cd:27:7a:05:cb:42:43:f7:
48:5e:a6:dc:0f:0d:48:81:2c:0a:71:31:44:d2:52:
5f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:50:58:C5:02:78:2D:F6:EE:EA:BD:C8:BE:34:98:A9:DF:31:CA:71
X509v3 Authority Key Identifier:
keyid:9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:c4:8b:7d:7e:c3:ca:7d:43:21:60:05:72:a1:12:b4:ec:05:
f7:9b:54:36:60:41:9f:be:29:cc:7f:ee:cf:ec:27:b9:69:3d:
16:e3:26:f1:69:5b:28:4e:d3:64:a6:19:4e:0c:e4:6a:64:c6:
3f:21:d3:d6:d8:56:61:a9:af:9b:fd:ad:48:54:c4:85:3f:b8:
ae:cf:35:51:8f:fc:05:4b:72:44:6c:64:14:79:49:7f:9d:4a:
3b:96:99:01:88:a2:89:33:18:14:1f:d6:65:76:af:db:43:55:
f0:ef:5c:ed:18:44:d7:51:70:47:4f:f4:42:98:c4:4b:d4:06:
3d:8c:39:ba:64:e5:7b:19:63:36:b3:d1:3f:9d:90:35:64:93:
38:20:eb:ad:78:84:4e:9e:33:5e:f9:43:a2:0c:25:ca:c2:64:
2c:bf:3c:47:67:82:ef:be:1f:0c:d3:56:e2:b8:4f:1b:72:37:
f9:af:6a:4c:42:4c:ee:b7:6a:6a:a0:e0:be:42:8b:58:77:c9:
0b:10:77:da:57:9b:29:dc:d9:7c:fe:6c:5c:4d:b7:a0:07:ea:
a9:30:ec:82:c0:c3:27:e7:86:12:72:df:d4:dd:e2:fc:d6:15:
10:55:73:af:68:77:35:29:f5:97:18:ab:96:f5:77:fb:1a:ca:
14:89:59:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:23:14 2025 by rpki-client