Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
File: npTVvz231nNNzxvmItX97i_sO48.mft (raw, json)
Hash identifier: bgAK5nhy2s6/24iXO8ZIy57TDh5gaFk1lfa3/sj+x+Y=
Subject key identifier: 93:95:8A:BD:D8:60:A3:1F:12:E4:BD:89:70:F7:B4:21:64:99:B8:ED
Authority key identifier: 9E:94:D5:BF:3D:B7:D6:73:4D:CF:1B:E6:22:D5:FD:EE:2F:EC:3B:8F
Certificate issuer: /CN=9e94d5bf3db7d6734dcf1be622d5fdee2fec3b8f
Certificate serial: 019756478EABAC463579E0CAAE4511A7C055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
Manifest number: 0641
Signing time: Mon 09 Jun 2025 20:00:19 +0000
Manifest this update: Mon 09 Jun 2025 20:00:19 +0000
Manifest next update: Tue 10 Jun 2025 20:00:19 +0000
Files and hashes: 1: NixiWYmD-vroRsSm1dMfYuXBZWQ.roa (hash: CO9r6UJIKKxiHIlAzYOgJDFF6Cx5kTVMmonckxBJgDA=)
2: npTVvz231nNNzxvmItX97i_sO48.crl (hash: 96zhdxAovemlBjnRieBNMtcL4s961RotjQ0Uz524ciE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 19:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:47:8e:ab:ac:46:35:79:e0:ca:ae:45:11:a7:c0:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e94d5bf3db7d6734dcf1be622d5fdee2fec3b8f
Validity
Not Before: Jun 9 20:00:19 2025 GMT
Not After : Jun 10 20:00:19 2025 GMT
Subject: CN=93958abdd860a31f12e4bd8970f7b4216499b8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:0e:2b:7b:ab:35:c9:0e:2f:48:72:d3:6f:b2:
0b:a9:bb:ba:6d:18:77:c2:4b:00:ab:26:70:f2:70:
e3:ae:96:06:e2:90:c0:e2:9f:0a:a5:ab:77:3f:97:
7a:a8:06:d9:60:c0:0b:95:b6:0d:25:c0:70:b7:24:
3c:f9:a2:d6:7b:8e:23:f6:a7:36:06:fc:d4:f6:dc:
11:6d:0d:1a:c2:fb:43:9a:b5:3e:0d:26:57:aa:6a:
c6:6a:4f:51:b0:b5:fd:73:60:ea:2a:9f:7e:85:25:
3f:2a:ab:21:f0:89:7f:df:66:ca:59:dd:75:6d:d4:
d0:1b:69:91:0f:5a:21:b1:16:ac:a2:ad:70:47:8b:
6d:a1:43:3b:76:4f:a7:6f:b0:5b:d8:fb:76:94:ca:
e3:be:ab:a0:61:fa:76:00:b3:73:cf:ea:ac:36:cb:
5c:6f:06:59:4b:ff:d0:31:91:3d:c4:8b:40:6c:cd:
6c:06:cb:27:3e:bf:b0:26:12:ba:d2:19:ea:01:69:
9e:66:a8:4b:71:56:55:d6:ee:81:9d:73:7a:d0:b4:
af:bd:fa:e8:06:17:77:25:37:04:21:d3:cf:08:1f:
35:e1:02:12:f4:1a:bc:ee:c6:e0:ad:d8:bd:9e:4f:
cc:f2:15:42:2e:93:52:6d:3b:36:56:8a:5e:e1:cc:
6f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:95:8A:BD:D8:60:A3:1F:12:E4:BD:89:70:F7:B4:21:64:99:B8:ED
X509v3 Authority Key Identifier:
keyid:9E:94:D5:BF:3D:B7:D6:73:4D:CF:1B:E6:22:D5:FD:EE:2F:EC:3B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:4b:6e:8f:ba:81:c9:5a:a7:67:23:41:66:fa:24:23:7e:35:
ff:83:07:fe:f6:b0:3c:b2:89:ca:20:b9:c2:d2:9b:e2:c8:44:
a9:df:d0:b6:62:6d:bd:36:00:ff:01:79:39:a8:ef:06:2e:08:
df:85:fc:b8:a9:85:78:39:f2:ef:d6:9e:81:2d:4b:42:31:05:
ca:54:25:15:38:df:e7:c1:23:78:ba:37:f4:e6:9f:31:5a:cc:
bb:fb:d8:4a:41:85:1c:4f:04:de:d9:03:ca:6e:c3:65:46:92:
2c:e6:e0:53:96:16:63:93:87:22:cf:38:14:ea:83:5b:8b:c3:
00:21:2e:06:14:b2:3b:b9:57:29:b9:2d:5d:f7:0e:f6:99:25:
c1:fa:4d:0b:de:b2:4c:ba:e1:55:2c:dc:6f:46:c9:27:32:50:
fe:9f:17:ed:14:88:9f:33:7a:7e:3d:a2:64:89:45:d5:76:95:
c8:c8:54:fb:96:3e:c1:46:b7:85:ce:68:51:65:b0:37:af:2e:
3c:02:b0:6e:e4:10:4c:ef:6a:8f:ba:34:72:6b:e4:28:dd:73:
57:2f:73:12:7d:12:e8:ac:1f:00:5f:c1:80:9d:69:2c:9b:66:
59:10:ca:17:46:5c:60:3c:67:cd:05:12:17:cb:64:b7:99:44:
aa:c1:89:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 03:37:26 2025 by rpki-client