Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
File: npTVvz231nNNzxvmItX97i_sO48.mft (raw, json)
Hash identifier: s3EzgqOGP0Xs3xZwfonHjX4JZyDXiJCLqHwVkHgCsec=
Subject key identifier: D1:00:6C:4C:E5:80:6D:71:BD:7D:79:E6:CF:60:96:85:64:B4:64:9B
Authority key identifier: 9E:94:D5:BF:3D:B7:D6:73:4D:CF:1B:E6:22:D5:FD:EE:2F:EC:3B:8F
Certificate issuer: /CN=9e94d5bf3db7d6734dcf1be622d5fdee2fec3b8f
Certificate serial: 019765BAB1848541497D261473CF91406F27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
Manifest number: 0649
Signing time: Thu 12 Jun 2025 20:00:23 +0000
Manifest this update: Thu 12 Jun 2025 20:00:23 +0000
Manifest next update: Fri 13 Jun 2025 20:00:23 +0000
Files and hashes: 1: NixiWYmD-vroRsSm1dMfYuXBZWQ.roa (hash: CO9r6UJIKKxiHIlAzYOgJDFF6Cx5kTVMmonckxBJgDA=)
2: npTVvz231nNNzxvmItX97i_sO48.crl (hash: MbmqSFpzTwm56bR+h4rxm0AzLF25chyHA1TEgZ9DZcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 20:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:ba:b1:84:85:41:49:7d:26:14:73:cf:91:40:6f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e94d5bf3db7d6734dcf1be622d5fdee2fec3b8f
Validity
Not Before: Jun 12 20:00:23 2025 GMT
Not After : Jun 13 20:00:23 2025 GMT
Subject: CN=d1006c4ce5806d71bd7d79e6cf60968564b4649b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:92:f8:f8:d0:8d:e9:25:12:e7:09:bb:9b:65:
ba:77:ba:8f:f0:18:55:4a:2f:5d:c9:55:8c:98:ed:
ea:7f:a0:58:e4:ba:69:2b:f5:43:5e:a2:9b:aa:57:
8a:67:8d:6c:7d:18:1f:31:4d:df:aa:36:12:81:2e:
d3:bb:a9:74:34:d6:c0:41:47:17:70:da:c4:05:c9:
b6:cb:85:af:ab:a9:ea:0e:c2:b0:06:a7:ac:d5:98:
68:81:cd:3d:3f:9d:94:4f:76:a8:c5:41:e2:2d:18:
f0:20:e4:28:50:74:62:33:7a:c9:b5:07:5a:a6:e2:
ff:5e:fc:25:33:d2:71:5a:00:7d:0e:47:ab:24:f5:
17:9f:de:35:f7:9f:2e:5c:c3:d1:98:50:c6:17:d5:
1f:14:db:8a:7f:16:81:81:c4:3e:84:21:17:bc:bd:
dc:c7:b9:5b:48:1f:e8:1c:5b:cc:de:6e:41:09:3d:
fd:eb:21:02:22:bf:3a:a1:16:38:22:55:db:62:ed:
31:91:af:61:c9:7f:1f:9a:75:5a:d5:ca:0e:ec:d1:
46:b4:a0:67:ab:5a:32:4a:0b:30:9a:7c:f9:c9:de:
6b:8b:cc:64:b0:48:0f:40:94:a1:95:d1:9a:ac:ee:
99:57:4a:8e:93:0b:28:9d:10:4c:2c:94:8c:24:9e:
a6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:00:6C:4C:E5:80:6D:71:BD:7D:79:E6:CF:60:96:85:64:B4:64:9B
X509v3 Authority Key Identifier:
keyid:9E:94:D5:BF:3D:B7:D6:73:4D:CF:1B:E6:22:D5:FD:EE:2F:EC:3B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:56:a0:35:44:2e:78:a5:00:32:44:c2:2c:86:f2:d3:a3:55:
fb:09:5f:8f:9a:70:38:17:10:aa:5b:12:f2:f6:fb:83:d1:2a:
f8:8e:a5:33:01:20:2e:62:9e:55:27:1b:1d:7d:19:43:cf:6c:
05:8a:58:d2:71:b9:e7:4a:79:ff:54:00:d0:9b:64:e7:c9:8d:
fc:82:d4:62:cf:1e:00:11:99:7e:da:54:58:70:ab:fc:57:9d:
54:0c:eb:30:5f:3c:85:f8:ee:1f:ea:e8:9a:57:67:e7:4a:9c:
d9:b3:a2:4c:6d:a1:42:5c:78:11:ed:c6:0a:46:ed:6a:ec:30:
dd:47:8a:fe:57:7a:61:27:49:e7:6f:7c:42:48:62:03:ec:67:
57:d7:4b:3e:cf:4f:34:d7:ae:2d:c3:3a:fa:ef:d7:0a:a9:0a:
9d:c3:7e:d4:ea:d6:d0:cf:63:12:76:19:42:09:da:c6:38:b4:
2f:1e:09:2a:27:a2:3d:51:00:50:c9:c7:85:bb:15:bc:7d:69:
3e:af:5b:0e:80:e7:f2:e4:2b:a2:77:74:13:0c:33:e0:e1:1b:
82:bd:28:85:14:23:74:21:55:08:01:34:63:4b:3e:67:bf:c9:
1b:55:a1:4a:5e:c3:50:8e:a3:b0:db:14:25:a1:5e:94:c0:6f:
db:8b:15:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 01:38:32 2025 by rpki-client