Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft
File: NpL-31nGDTJU43qcjs3hHJuhKCo.mft (raw, json)
Hash identifier: kJHepLBLEnLUwzDco5LLZXWRCryFN/CRZf1wlpSi4ZU=
Subject key identifier: DA:15:0F:49:F1:20:6C:36:C5:3F:E6:63:CD:E2:B1:DF:42:09:26:30
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial: 019A725CAB9BEB237183B3B24CD9C10500EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft
Manifest number: 17CA
Signing time: Tue 11 Nov 2025 10:01:07 +0000
Manifest this update: Tue 11 Nov 2025 10:01:07 +0000
Manifest next update: Wed 12 Nov 2025 10:01:07 +0000
Files and hashes: 1: 1-GJhYiuUUrP8RhmBh0USv-VEBfA.roa (hash: yv0HSZPQLPjAOK0Qjg6MUOpe4+d1qLZAv2u1ddULbTs=)
2: 8zzToX2_MSbXjPU6GvHQQ_9Dvvk.roa (hash: wilJSEirQsqEx26ndpfgfkDVvj+zVkzSkCh5uXU9fHI=)
3: NpL-31nGDTJU43qcjs3hHJuhKCo.crl (hash: XxcKLiG2Ml1I1MBytUcM1HBWGVYswaCOna+RvEVKEMc=)
4: bHL_tTznnHPbHP4F0hJKIReYm6M.roa (hash: R72+H7qsqTY9GklcA/NGuJeZ8wkSyMWhn933bwOHpJE=)
5: q8AP7H93ZbNKPWz_Zh0y6fK8m7g.roa (hash: Jd2YHA+NTHYb6+qWLH1KGDGjnXW6xUSmZVAZe2REuGQ=)
6: rf6L0TwRlHBLPhVKaPDEKnbqT_w.roa (hash: AzTZWJBoZdwqFymIdorc82U7WjpDv54tYnTW1K3fl6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:ab:9b:eb:23:71:83:b3:b2:4c:d9:c1:05:00:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Validity
Not Before: Nov 11 10:01:07 2025 GMT
Not After : Nov 12 10:01:07 2025 GMT
Subject: CN=da150f49f1206c36c53fe663cde2b1df42092630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ef:52:ea:ac:34:5c:07:04:59:06:13:ac:4f:
46:0b:4c:e9:8f:bd:b5:60:67:cf:84:ea:1a:89:bb:
62:87:fd:fa:fe:30:1f:7e:6a:da:b6:15:00:cd:34:
d1:e4:11:21:8a:a7:c7:17:3b:b4:f8:c1:82:58:80:
37:02:76:31:81:16:22:23:67:b8:d7:41:aa:ec:71:
56:5f:f5:db:fb:f5:53:3c:db:b9:83:51:b9:6a:70:
00:f0:9d:04:97:27:b0:7e:96:86:a7:64:3a:fa:6d:
c5:40:98:44:18:5b:ff:82:7d:28:f1:40:34:43:bf:
a4:5e:62:cb:b2:d8:c9:62:a7:62:6d:e3:c8:c4:d4:
62:75:8f:f2:d8:98:c9:9c:ab:6f:9b:47:cd:ae:a2:
b8:34:4f:75:44:c7:89:fb:f4:ca:32:11:aa:04:37:
14:ca:0f:aa:37:09:88:2c:53:64:5c:33:2b:20:11:
68:88:cb:64:40:6f:56:31:45:2c:da:78:f2:1f:cb:
e4:33:a7:5c:58:5e:c8:8e:c6:55:58:d5:c6:48:14:
c8:b7:a9:9b:4e:16:ee:bf:16:f9:3e:fd:1c:3b:19:
25:77:61:49:32:74:a4:f9:f4:48:e4:22:92:96:86:
96:ed:ed:01:88:51:73:9b:0d:58:9c:38:08:ed:65:
f8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:15:0F:49:F1:20:6C:36:C5:3F:E6:63:CD:E2:B1:DF:42:09:26:30
X509v3 Authority Key Identifier:
keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b1:d1:91:d5:4b:b8:92:2e:7c:af:35:e9:e3:6c:e9:b4:b5:
20:a2:a9:38:ba:9b:ef:5d:58:5d:4f:b5:d5:6d:76:11:c1:af:
60:c8:ec:50:4c:1a:15:67:55:d7:22:74:13:a4:6b:2a:b6:fc:
ed:c4:d9:95:0a:a3:7c:11:8d:59:f4:6f:67:50:12:f2:9f:f8:
8b:a9:11:69:9f:45:33:c8:bb:6c:96:87:9a:c3:26:c3:a8:2a:
04:0f:0a:03:27:db:b5:b8:80:e0:cc:ce:c1:f5:d9:3e:99:13:
ee:e3:e5:e1:58:b7:b8:a3:bc:22:a4:80:3a:64:61:e2:75:7e:
80:53:b1:ad:6a:ab:48:07:f8:a3:42:30:e0:79:eb:6f:77:da:
77:75:a2:99:57:ca:1c:db:95:bc:c6:10:f1:7d:29:15:04:7b:
86:c6:f4:76:b2:cb:db:a0:7c:08:58:7c:e1:5c:d6:0b:f3:42:
29:96:cd:2f:e0:76:13:9c:94:0f:1d:c3:80:b5:05:7a:5e:96:
16:55:22:03:7d:f3:5b:d6:05:a9:4d:20:31:dc:7f:08:3a:f7:
1d:93:0d:d5:b9:26:15:6a:f7:dc:c1:47:a0:81:4b:df:d4:c5:
ec:92:dc:b0:a6:5b:e7:c4:05:00:45:6f:f7:1e:f8:2a:c6:41:
e9:45:6e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:45 2025 by rpki-client