Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
File: NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft (raw, json)
Hash identifier: efcviTi9Hrw1kl2aIJ8jekopMk2asErYMig4+W03dJE=
Subject key identifier: 9A:E7:EC:D2:5D:54:81:B1:DF:D7:D5:C3:9F:A1:0C:46:FD:6D:2C:DC
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 0199209E232D81BFDD4A75A203404408E514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
Manifest number: 168E
Signing time: Sat 06 Sep 2025 20:00:58 +0000
Manifest this update: Sat 06 Sep 2025 20:00:58 +0000
Manifest next update: Sun 07 Sep 2025 20:00:58 +0000
Files and hashes: 1: 1eZC9enfXbKkbChbya2s-NBXR10.roa (hash: K8gL7gYOdUPnWfON7y82NF9djuzcQAO7yPjvMnV4HWA=)
2: 4C1hs3Awu1pUWnx11isTd7urO8g.roa (hash: NHlupIJQHDTwRScv0dlfz2lFTerJ3fgzUZ9KeBTbFHo=)
3: 4aaliOpCta1xxwdPdgm9XgmQVe4.roa (hash: 50PVROIOCSd7qW0XXvFqQMxjDosAhVmRwG7IVPmy7ik=)
4: LNJOsnr56BpDhx0zCSJoGF_8kg4.roa (hash: ipKdM/rgGFJqpM5XZ1watukNv4jI5z2rHAUKNiP8l9M=)
5: NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl (hash: wPDaDfqlIzHoDopsuv42Pev5mladR+GJoXtMG/ZA2tU=)
6: P4RQICIsv2ynDFNy1pTdbhvIXok.roa (hash: 3BspGo/InWWElD0+8Z5QOqYWItS4j6gIXyuD2KZuZ58=)
7: ibQsYiMOU1D97Z6dBw2Z2nuJoA0.roa (hash: paBGRr0SKtx93/jOWaEGPMAan4qkVxtM/IYXrSHwl6Y=)
8: jBgv17Pl-Vh_L1PF3KmB8kI2bak.roa (hash: yIwLWwTP6qcl+lhvdLDbXrkIo53nDQZcaNGlgxGXrqE=)
9: xlTjepejuGlW3CGUnuf8jiI_Sb8.roa (hash: xnJVidZPq3qTfXPcYiZGHTVkjYmciZFHEO03/ve53hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 20:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:20:9e:23:2d:81:bf:dd:4a:75:a2:03:40:44:08:e5:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Sep 6 20:00:58 2025 GMT
Not After : Sep 7 20:00:58 2025 GMT
Subject: CN=9ae7ecd25d5481b1dfd7d5c39fa10c46fd6d2cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a9:d0:f3:71:3c:f1:42:ab:41:a4:d7:79:90:
56:e0:08:e2:5c:b6:2e:9a:38:d8:c3:e6:27:18:93:
8e:7e:d3:0b:fa:61:3b:91:68:e7:65:a0:bd:e4:38:
a5:6b:13:cf:3e:ab:10:33:d7:64:ca:5f:46:02:2d:
0f:61:c1:0d:ed:09:c0:de:4f:47:ba:fd:5b:11:28:
e3:85:6e:fd:77:a5:8a:11:83:65:6a:bf:74:8c:5b:
81:f5:ae:43:cf:96:89:4c:07:3b:d1:2c:16:92:3c:
43:9f:19:e2:2c:ba:cb:65:ed:9b:8c:5f:fb:f1:3d:
81:f7:61:97:6f:17:9d:8a:f1:21:52:0b:79:14:2a:
23:64:f7:45:b2:a0:bd:fe:ce:33:14:66:71:b1:7b:
eb:32:66:07:f7:a7:c6:22:bd:dc:93:a5:16:db:08:
5a:3e:f9:8a:dd:6b:ee:ca:1d:d1:21:83:f1:75:2e:
60:62:a6:87:58:ed:cb:39:a3:49:a8:dc:36:0a:68:
a2:99:2e:1a:cb:0d:b3:4c:8c:9e:a0:b8:fd:e5:c5:
0c:d0:1d:63:63:2b:ea:97:85:f0:d9:91:a6:31:26:
a3:7e:ea:93:06:f3:36:de:a1:bb:5b:5e:1b:ae:b7:
0e:08:81:1e:31:2b:48:45:cb:e9:dd:e1:08:f5:28:
7e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E7:EC:D2:5D:54:81:B1:DF:D7:D5:C3:9F:A1:0C:46:FD:6D:2C:DC
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:a1:6d:b6:32:49:36:c7:86:be:ec:66:35:25:76:ec:bb:4c:
59:7d:91:6d:fd:ef:bb:54:09:d1:06:06:4f:be:78:5c:2a:bd:
af:66:72:2d:a3:5c:7d:86:3e:52:3d:f0:91:f3:16:60:35:a1:
09:a0:10:3b:d7:15:9d:f3:73:48:a5:54:9a:05:df:4c:5c:4d:
af:3f:79:e1:34:f4:aa:59:fc:99:94:02:7e:cc:a5:f0:da:4a:
c3:18:17:17:13:79:63:79:7c:fa:10:09:11:ff:3a:fc:45:b6:
97:80:65:0c:69:7a:f6:24:13:de:6e:e9:27:ea:3d:d7:bb:b8:
a8:d8:2e:c0:70:2f:69:7a:46:4e:96:ce:1a:21:90:a3:a4:51:
6f:a0:40:cd:f9:fa:5e:15:ad:98:ba:66:63:7a:5e:cd:e2:4e:
3b:f9:b1:6c:7e:b6:6b:b7:b1:fd:4a:0b:fc:93:d7:cf:6a:d6:
30:7f:ee:61:33:fe:c9:a5:af:94:99:ce:a2:f3:05:53:fe:a9:
a4:a8:13:ee:5c:6c:48:18:44:1a:ea:88:e1:e6:3a:5c:e5:50:
5c:2a:3f:4d:4e:83:6d:bb:b3:b4:98:49:2d:46:87:b7:88:08:
bd:9d:ff:ce:75:b9:be:d3:73:3f:d3:fc:58:85:89:5f:f2:04:
2a:5e:29:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 02:26:09 2025 by rpki-client