Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
File: npWhGdnBpdbj8-Ifb6hj2HouSw0.mft (raw, json)
Hash identifier: 1grYvKgYtc81cCrJ162zT7cDsEox9zfRia1vNR7rir8=
Subject key identifier: 3A:1C:FA:77:A3:9D:4C:97:2C:EE:4C:A6:47:AD:C1:66:E6:3C:ED:E6
Authority key identifier: 9E:95:A1:19:D9:C1:A5:D6:E3:F3:E2:1F:6F:A8:63:D8:7A:2E:4B:0D
Certificate issuer: /CN=9e95a119d9c1a5d6e3f3e21f6fa863d87a2e4b0d
Certificate serial: 019A10833BB96FEB4A82578115E59477E2DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
Manifest number: 12EE
Signing time: Thu 23 Oct 2025 10:00:27 +0000
Manifest this update: Thu 23 Oct 2025 10:00:27 +0000
Manifest next update: Fri 24 Oct 2025 10:00:27 +0000
Files and hashes: 1: lLvMNzQqc08rBnqIaGJCkVSk_Lc.roa (hash: C4csVeC5+fBJXsccVAtKbPNOr2pnHhs7Nw+vsJd23mE=)
2: npWhGdnBpdbj8-Ifb6hj2HouSw0.crl (hash: zpXcTLyD76OmRDVZgUyRc9M/K6gv+DmIWr4naB/me0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:10:83:3b:b9:6f:eb:4a:82:57:81:15:e5:94:77:e2:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a119d9c1a5d6e3f3e21f6fa863d87a2e4b0d
Validity
Not Before: Oct 23 10:00:27 2025 GMT
Not After : Oct 24 10:00:27 2025 GMT
Subject: CN=3a1cfa77a39d4c972cee4ca647adc166e63cede6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8b:f9:c9:45:49:5f:b8:12:d6:5e:93:44:74:
8e:ff:f4:02:c9:1a:99:20:91:ab:9e:ba:5a:04:3b:
ce:68:c5:aa:60:2c:f8:07:df:1e:4b:52:81:c5:5f:
c7:c9:e4:da:16:83:cc:76:9e:da:7b:28:1e:ce:32:
45:0c:21:66:6c:b5:b5:2a:2e:13:f3:db:27:c0:da:
69:56:99:c1:68:9d:d9:b9:ac:4e:27:43:80:ed:b4:
37:5e:6c:9e:1b:c6:d4:5c:5c:c3:26:55:74:03:a7:
1a:32:d5:00:62:b3:3e:1a:70:c2:06:39:98:4c:d4:
22:75:d7:e1:7e:09:40:e4:d8:91:72:63:74:e8:4e:
7c:f6:f6:35:c9:02:62:56:02:6d:57:8b:0e:b4:69:
89:2b:50:87:dc:d1:3d:21:91:8d:48:cd:68:41:b4:
dc:94:68:0b:dd:d6:c8:67:41:c9:80:db:26:02:23:
25:c3:ba:df:ae:a2:3b:63:e0:06:4e:fd:56:88:4b:
25:fd:e8:61:58:9a:87:19:2f:15:57:be:3f:e4:59:
76:4f:6f:a9:c1:3d:df:aa:90:8c:be:a9:07:dc:b1:
43:30:55:f1:48:e1:67:4b:fa:6e:55:a8:4c:f9:b3:
6a:43:2f:70:37:83:aa:23:a3:55:95:10:fa:2c:81:
2f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1C:FA:77:A3:9D:4C:97:2C:EE:4C:A6:47:AD:C1:66:E6:3C:ED:E6
X509v3 Authority Key Identifier:
keyid:9E:95:A1:19:D9:C1:A5:D6:E3:F3:E2:1F:6F:A8:63:D8:7A:2E:4B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:cb:03:c5:33:fd:01:49:b6:34:2b:6c:ed:e8:7f:16:82:3a:
d3:7b:54:76:c8:3e:26:9d:28:8b:b2:d9:27:cb:95:ba:07:63:
0c:18:a5:4e:02:7f:5b:12:e4:58:dd:1f:f0:1e:44:ed:94:2f:
8f:a8:3f:ef:6c:70:cd:1a:63:a9:b0:23:4e:99:69:5b:34:8f:
d3:5a:37:8b:de:b8:7c:fd:a7:76:e2:87:20:03:73:63:56:8c:
44:9c:2f:8b:6f:a1:9f:f0:ef:c3:69:16:be:de:a5:a7:03:bf:
6b:a5:b0:e5:48:30:b0:76:a0:f2:1a:b7:bb:b5:7c:87:ac:2b:
ff:60:e4:e1:a6:c6:c6:73:7c:b4:29:78:ec:01:88:0b:26:1a:
f7:89:aa:3f:0e:47:4e:9f:bb:30:d6:66:c2:e5:8e:26:05:27:
c4:bc:85:4e:ba:30:4c:1c:03:2c:15:08:4a:47:2b:0f:01:d2:
bc:42:05:ed:fd:e9:f5:85:00:16:31:93:69:c2:ae:0c:35:ae:
ff:54:37:cc:0d:09:a8:d4:dc:a0:5c:b0:5a:00:f6:7e:c7:f0:
89:c8:b4:de:b0:b4:bd:17:3f:8a:a0:9a:43:bb:f3:15:e2:43:
7b:58:db:92:35:4b:16:09:9c:62:56:8a:15:07:5c:6d:0e:3d:
e5:a2:5f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 16:37:49 2025 by rpki-client