Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft
File: NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft (raw, json)
Hash identifier: CVzQIoeonnsFm6FCpV6hvoxZWVujXGTTnvG2jrKb77U=
Subject key identifier: 85:41:A0:8D:35:02:A3:78:D1:1C:69:74:3B:A5:85:2B:35:D0:79:21
Authority key identifier: 34:F4:7B:73:EE:8F:BE:DD:25:F4:1B:3B:17:B2:BE:08:F5:BF:65:63
Certificate issuer: /CN=34f47b73ee8fbedd25f41b3b17b2be08f5bf6563
Certificate serial: 019A7226714F2B724C8207FE7512AE2DBD69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 09:01:53 +0000
Manifest this update: Tue 11 Nov 2025 09:01:53 +0000
Manifest next update: Wed 12 Nov 2025 09:01:53 +0000
Files and hashes: 1: 94wGpzC6dKW4wCyBuNwgbCmu0YI.roa (hash: HmlUsbHYgnjwmvm0Ep06MITWSKS8pcY785u7DkFvmwU=)
2: N1_eJlCZb3ETGGXcyIle3qD0zxM.roa (hash: ZUSIabtzDxcJVnD57wreF1I3FajQaelaynE8r9qpwLA=)
3: NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.crl (hash: V58vL951VbtGwO/jcmiYkEuu99k48WQ8zIPOKnz2OB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:71:4f:2b:72:4c:82:07:fe:75:12:ae:2d:bd:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f47b73ee8fbedd25f41b3b17b2be08f5bf6563
Validity
Not Before: Nov 11 09:01:53 2025 GMT
Not After : Nov 12 09:01:53 2025 GMT
Subject: CN=8541a08d3502a378d11c69743ba5852b35d07921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:15:83:0c:1d:e3:82:4e:6a:64:df:31:f7:77:
fd:1c:ae:fa:0b:08:7f:c5:f3:e4:61:72:35:ae:b5:
5c:ac:ee:28:84:64:8d:03:7c:85:ae:a0:33:f2:ae:
bb:8a:66:db:e7:c5:e8:2e:53:d5:55:e9:5b:96:c5:
62:db:73:2a:98:55:01:4a:df:3c:11:41:68:06:6e:
90:aa:65:03:c6:ef:e1:6d:ed:5b:ab:cc:07:d1:10:
8a:aa:1b:e0:99:6b:51:a0:b2:63:9d:4b:c6:18:4a:
f0:80:81:68:2f:30:34:f6:e7:34:31:68:29:42:3f:
f4:83:70:0b:0c:be:fd:27:99:fd:6d:62:5d:59:79:
8a:b2:7f:70:b9:45:4a:9a:8e:3e:5e:e8:09:5d:bb:
86:fb:05:c8:89:fa:33:68:c0:5a:d5:be:cc:cd:1f:
f7:f1:59:8d:00:7d:32:3d:9e:b4:14:e2:02:ad:e3:
33:d8:84:9c:22:7f:85:ab:36:b6:bd:cb:b4:b0:8b:
91:2b:98:ed:1c:ee:24:21:70:06:12:e4:5f:9b:fb:
0f:05:52:6a:5c:58:97:da:34:07:4b:fc:72:4e:f9:
a1:10:8e:3c:97:71:74:2f:6f:2b:1e:4e:19:6a:60:
39:0d:2b:2b:d5:e2:da:31:66:e9:cd:df:e1:ce:2e:
9e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:41:A0:8D:35:02:A3:78:D1:1C:69:74:3B:A5:85:2B:35:D0:79:21
X509v3 Authority Key Identifier:
keyid:34:F4:7B:73:EE:8F:BE:DD:25:F4:1B:3B:17:B2:BE:08:F5:BF:65:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:cc:b5:12:ae:73:80:c4:ca:82:af:dc:80:3b:78:4a:6e:3b:
ca:44:b9:74:98:a0:b5:a2:27:d7:71:63:51:0c:84:e4:de:11:
dc:1e:0b:af:bf:c7:ec:52:c3:08:60:e2:e5:ef:2b:36:d4:1c:
ee:51:89:d0:c3:e8:45:5e:b7:9a:8c:fc:ca:71:5a:30:98:21:
ae:2f:01:c1:f1:29:27:68:af:da:94:5b:c2:5b:d1:9a:1b:dc:
24:51:e5:d0:7b:87:72:68:d4:74:17:b3:7d:22:31:61:65:13:
81:8b:c2:68:e1:95:eb:ba:6c:0a:40:66:1c:bc:78:eb:16:a9:
70:72:a3:b5:88:29:72:de:6b:7d:9b:8c:01:76:e5:c3:54:7c:
ab:e0:2d:ab:2c:dc:3e:da:7d:e5:6a:6b:d0:c4:8a:fd:b9:ed:
ef:e5:d6:6c:a6:2c:66:02:56:0f:7a:dc:af:84:fb:d3:7d:9a:
3e:e0:17:ab:82:02:72:61:cc:bb:79:17:76:3f:61:ed:f8:5a:
73:03:b5:7f:62:2e:ce:20:9a:69:2e:97:31:e9:46:bc:21:62:
c3:b0:ed:5c:2d:8b:03:be:c5:89:a4:46:2b:2c:aa:95:f2:c1:
00:47:bc:f0:34:8b:18:8d:63:97:20:66:db:0b:a6:e5:8d:5f:
b7:98:fe:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:44 2025 by rpki-client