Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
File: t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft (raw, json)
Hash identifier: V6rS4hGVbuqyZ1L9WASGDxt52/xTKDdvSMFhP4opyM4=
Subject key identifier: 86:B5:A8:30:6B:97:8B:28:2B:6D:93:CB:06:73:33:93:3A:91:9C:FF
Authority key identifier: B7:E3:4F:57:D0:07:16:6D:EF:4D:D8:81:D8:F7:D5:B6:ED:95:E6:56
Certificate issuer: /CN=b7e34f57d007166def4dd881d8f7d5b6ed95e656
Certificate serial: 01992FA3BFED511102B1BF8419338F1A541B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
Manifest number: 0ADC
Signing time: Tue 09 Sep 2025 18:01:24 +0000
Manifest this update: Tue 09 Sep 2025 18:01:24 +0000
Manifest next update: Wed 10 Sep 2025 18:01:24 +0000
Files and hashes: 1: 7HgZFirs9to5YNlgGjCrLE4fFdw.roa (hash: gvtNC6tdiAxQLr0n4eBnmWFLLNsQSfj98rKVj8SvSuA=)
2: GFzeRaBmyIOkrDv5Yl4eeRJ9yBo.roa (hash: rZYvabv/j2AaljGdwS148ssayLuXys6DbuYJ6bJxVGw=)
3: t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl (hash: kvfgFLR/W5TAh1ElZ28xqwqrnpQAdTyiDOsFPLvM7E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:a3:bf:ed:51:11:02:b1:bf:84:19:33:8f:1a:54:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7e34f57d007166def4dd881d8f7d5b6ed95e656
Validity
Not Before: Sep 9 18:01:24 2025 GMT
Not After : Sep 10 18:01:24 2025 GMT
Subject: CN=86b5a8306b978b282b6d93cb067333933a919cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e4:5d:fe:cf:95:7a:0b:7e:ac:f0:53:73:bf:
48:0c:07:b2:d7:48:b2:b6:a7:b3:13:18:07:20:c9:
2c:20:4a:92:ef:25:e1:fd:81:64:aa:78:eb:b7:1a:
b0:68:d2:d4:5a:2a:26:76:e1:d2:36:84:1e:6f:a2:
fd:60:9c:da:03:e5:c6:80:c3:7e:24:3a:7e:5b:02:
35:73:a4:f5:7f:05:07:ac:38:7b:64:58:61:ba:8a:
98:13:31:a6:40:3a:48:1b:76:d0:6f:0b:a4:80:d4:
bd:e7:be:fe:89:bd:5f:ae:0d:cd:0b:bb:97:95:0b:
88:4f:74:0a:08:b8:5e:75:27:8d:61:30:1e:67:88:
c9:49:cd:6e:59:b2:92:81:37:dc:13:e6:83:96:bc:
11:a4:60:cf:6b:2e:bc:74:3f:ec:8c:de:07:6b:d2:
ea:e6:e0:68:0d:b8:7f:b6:af:3b:b8:10:b6:18:45:
22:7d:f1:ee:eb:b2:5e:5f:97:60:e5:e6:14:cc:0e:
93:3e:7e:bc:94:a0:51:79:3c:2d:e8:03:c7:20:ef:
53:0d:74:6e:e9:5e:04:c6:fc:9a:46:07:c8:99:a3:
15:bc:16:92:77:17:03:b8:46:e7:4c:28:63:ae:c6:
4d:8c:5e:0c:67:d3:11:6a:91:5b:ed:06:26:b2:99:
d7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B5:A8:30:6B:97:8B:28:2B:6D:93:CB:06:73:33:93:3A:91:9C:FF
X509v3 Authority Key Identifier:
keyid:B7:E3:4F:57:D0:07:16:6D:EF:4D:D8:81:D8:F7:D5:B6:ED:95:E6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f4:f9:75:f0:05:24:74:1e:a6:48:80:e8:48:56:ae:62:07:
62:cb:b0:e3:d7:1a:e5:0d:aa:98:ab:ac:ff:a7:73:cc:48:bf:
42:70:bc:16:ab:fd:be:05:b8:86:2e:8f:5c:37:4d:69:c3:42:
fc:ed:0c:91:21:ef:bc:08:d9:3e:0a:75:e7:91:16:77:9f:dc:
96:1d:90:6d:d2:1f:d3:df:81:d2:fe:06:3e:57:8d:a3:c7:93:
e4:f2:87:12:f8:43:c4:8c:d0:16:e4:eb:94:c6:f3:02:9f:3e:
8a:9a:6f:51:60:7a:a6:e3:90:d5:a9:da:9d:68:77:ed:13:9b:
fa:59:c3:f6:d8:9c:88:b4:69:48:c5:b2:ee:68:8b:c2:1b:eb:
f0:33:38:55:3c:3a:45:6b:b6:02:9b:7d:9a:3a:91:79:64:bb:
46:3f:81:31:8d:2c:ba:4f:3d:7a:6d:18:ef:d2:02:37:67:31:
5f:72:5f:ff:fe:e8:26:4d:c6:33:6b:62:94:69:67:70:8c:64:
07:1c:12:01:0f:62:18:ac:76:9c:38:72:42:43:94:70:76:26:
08:55:21:15:27:f4:68:58:13:10:8b:b6:34:01:ee:ad:82:e6:
5e:be:c5:fd:7d:09:82:de:6f:a7:a1:50:82:a0:ef:9c:1f:ac:
14:b9:b3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 00:42:56 2025 by rpki-client