Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
File: npWhGdnBpdbj8-Ifb6hj2HouSw0.mft (raw, json)
Hash identifier: sC6wiE7OewZxRWHKtxyP9xuR9j7fez+vOVJsTDB1A4s=
Subject key identifier: 8A:DC:D5:4C:2B:E8:94:0F:1F:71:71:52:EF:A2:B5:1A:61:01:DF:24
Authority key identifier: 9E:95:A1:19:D9:C1:A5:D6:E3:F3:E2:1F:6F:A8:63:D8:7A:2E:4B:0D
Certificate issuer: /CN=9e95a119d9c1a5d6e3f3e21f6fa863d87a2e4b0d
Certificate serial: 01974EC589E28DE3CB74E09A32E4F7E5F165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
Manifest number: 1180
Signing time: Sun 08 Jun 2025 09:00:58 +0000
Manifest this update: Sun 08 Jun 2025 09:00:58 +0000
Manifest next update: Mon 09 Jun 2025 09:00:58 +0000
Files and hashes: 1: NZjfqu9x3wDiLJo6GWe02XnKyKc.roa (hash: qGIOcPlEtKKS51xxkiaAUzuK860Uixd+cejLEfWAaRA=)
2: npWhGdnBpdbj8-Ifb6hj2HouSw0.crl (hash: cOAm4nu5WqACmxlTiBhW/CAk7t0MbG8dUK9AwGXfERE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:89:e2:8d:e3:cb:74:e0:9a:32:e4:f7:e5:f1:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a119d9c1a5d6e3f3e21f6fa863d87a2e4b0d
Validity
Not Before: Jun 8 09:00:58 2025 GMT
Not After : Jun 9 09:00:58 2025 GMT
Subject: CN=8adcd54c2be8940f1f717152efa2b51a6101df24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b0:d0:34:6f:cd:2f:ce:15:66:84:2b:a0:87:
1e:56:a3:9f:5b:a1:e2:02:e5:ed:85:af:42:11:19:
a1:99:05:16:86:9c:9f:80:85:1b:4d:2e:09:f7:48:
41:3f:b4:99:ad:7d:14:a1:b5:38:ab:f9:c1:9c:d2:
de:7b:fe:b0:94:12:88:1b:df:ea:50:b7:89:e3:8e:
b0:91:d2:f8:2f:0b:9e:f4:5c:25:4d:41:c9:7f:8a:
a8:32:29:7a:10:a6:99:68:2d:ee:c7:f7:8d:4c:4c:
b8:d2:37:d0:9a:fc:8e:33:40:e6:ce:1c:28:26:f7:
e1:de:6a:ce:33:42:14:91:aa:fc:db:3f:b1:82:98:
55:75:b3:0c:73:6e:cc:2a:ae:53:24:49:a7:90:8a:
71:f1:ee:7a:1d:3f:5d:8f:95:41:d3:21:fb:ff:e3:
6e:94:0d:57:b8:6c:dc:2a:a0:03:a3:2d:cb:36:2d:
47:0f:1f:37:b2:bb:4b:35:57:c8:d9:96:f5:d0:a9:
9a:23:5f:16:2a:52:5e:20:e1:e1:50:78:ee:84:3a:
5c:aa:50:8f:8a:dc:ba:0b:52:83:6f:be:3f:00:d0:
af:8d:bd:11:f2:2d:02:fc:90:8c:94:b3:67:1a:b9:
a3:a3:0c:43:7d:0c:de:da:3f:2a:7a:34:c5:55:9d:
b1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DC:D5:4C:2B:E8:94:0F:1F:71:71:52:EF:A2:B5:1A:61:01:DF:24
X509v3 Authority Key Identifier:
keyid:9E:95:A1:19:D9:C1:A5:D6:E3:F3:E2:1F:6F:A8:63:D8:7A:2E:4B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:4c:64:eb:26:e4:82:e9:d8:0f:da:f9:59:86:4c:07:c1:df:
00:92:8c:2e:c6:cc:b6:cd:88:e3:81:3a:2a:78:9d:7c:0d:d6:
67:ff:67:73:92:ed:1d:ec:3e:ea:d2:12:35:a4:ec:e3:3f:ee:
f6:fc:cf:33:05:d3:d8:01:7d:f9:3e:c2:3c:2c:68:2e:a1:2a:
9f:10:6a:db:ab:7a:93:e9:aa:19:59:49:5e:8e:53:38:83:cb:
f4:ab:5d:03:0f:80:d4:f0:39:67:c6:1d:78:b9:61:cb:8d:b3:
7f:e5:5e:d3:76:7f:cc:3c:3a:6c:73:92:1b:a8:52:0b:21:32:
4d:94:65:93:bc:93:ac:c1:3c:1a:a2:0a:72:a1:ad:54:18:ae:
85:16:5b:34:32:66:c0:ef:d1:c5:b2:fa:fa:e6:92:71:41:31:
b5:1a:69:5c:87:02:23:d5:3e:93:a6:12:cd:56:a4:6f:97:89:
64:11:30:84:2d:c7:6c:30:09:2d:2e:3c:bd:2b:b2:9f:16:10:
c5:35:e7:6b:cc:63:40:c2:94:fa:3b:ab:0a:c7:36:df:fc:5b:
5f:7d:65:78:14:a8:51:b5:28:a0:7d:15:9d:00:0d:ae:ed:e1:
15:00:97:b5:40:0d:81:d3:c2:1e:3e:5a:47:6e:b4:bc:1c:5c:
aa:9d:08:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:48:03 2025 by rpki-client