
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
File: nPYI_632AAge6SIpjksq6Wr_SOg.mft (raw, json)
Hash identifier: 5d7QW2KDaihZqYtm/ukSMWskhb/1W4aCx9sz1aTM9E8=
Subject key identifier: C3:2C:4A:00:7C:39:F0:24:9D:7F:E2:AC:D6:0F:A7:69:EF:50:BC:75
Authority key identifier: 9C:F6:08:FF:AD:F6:00:08:1E:E9:22:29:8E:4B:2A:E9:6A:FF:48:E8
Certificate issuer: /CN=9cf608ffadf600081ee922298e4b2ae96aff48e8
Certificate serial: 01988B0EFC2653CE750337B4B5EDC823AAEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
Manifest number: 1623
Signing time: Fri 08 Aug 2025 19:01:11 +0000
Manifest this update: Fri 08 Aug 2025 19:01:11 +0000
Manifest next update: Sat 09 Aug 2025 19:01:11 +0000
Files and hashes: 1: ObbHotU_QnvsulgBzQaW4wh0HAk.roa (hash: mbgTfoasS2/JRLVjEdWRajTXVRhnW7d5YvctUH9mztI=)
2: nPYI_632AAge6SIpjksq6Wr_SOg.crl (hash: n7WLr6Joe8XNsyrnsyEGqMFrJUfmOs4jgS7nWJpWbPk=)
3: sLdQOZGVUyb44hu-OktavwbL-fA.roa (hash: 61zdCvV2SZ1HoaLvCC14jhWwxqjS5pgyZuPOqRzMG/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0e:fc:26:53:ce:75:03:37:b4:b5:ed:c8:23:aa:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf608ffadf600081ee922298e4b2ae96aff48e8
Validity
Not Before: Aug 8 19:01:11 2025 GMT
Not After : Aug 9 19:01:11 2025 GMT
Subject: CN=c32c4a007c39f0249d7fe2acd60fa769ef50bc75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:51:51:0a:7f:5e:d6:f2:c9:dd:f7:47:da:bd:
ee:b2:ff:85:e6:a3:3f:3f:81:4a:fc:65:26:9e:3e:
3e:f8:8b:ba:62:f8:44:f0:cb:4f:ca:26:0c:f7:c2:
c9:39:4d:12:74:67:eb:10:4c:db:ca:c4:64:35:ee:
f7:b1:f8:cb:fe:d4:b3:79:50:d9:7a:7b:91:89:47:
f1:47:8b:93:3d:7e:fb:74:a4:c5:a1:50:a0:84:43:
9a:54:b6:31:23:55:8c:8b:54:8b:d0:62:1b:23:c2:
49:a0:5c:03:f3:f9:bb:26:29:ef:04:24:04:45:62:
2b:e3:ea:8e:ae:86:0b:80:a7:58:80:9f:43:e7:c7:
f2:48:aa:4a:c9:3b:db:12:ea:48:b0:44:c9:ce:69:
1c:ee:23:4d:c1:1e:1d:1b:0f:61:27:0a:a2:01:3e:
40:05:84:e2:df:bb:8f:38:d4:b1:7a:35:f8:a4:67:
67:16:10:11:82:22:39:b4:36:97:8a:5b:0d:e0:b0:
e1:00:03:d1:f1:de:44:a2:42:88:02:71:de:d3:f9:
b3:76:f2:75:4f:78:c4:b6:4a:91:75:24:b5:b0:e6:
cb:7d:89:de:8c:84:42:62:39:f8:f1:b6:8c:f5:63:
d7:f8:e9:73:88:00:0c:66:f2:b1:60:1c:68:fe:71:
56:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2C:4A:00:7C:39:F0:24:9D:7F:E2:AC:D6:0F:A7:69:EF:50:BC:75
X509v3 Authority Key Identifier:
keyid:9C:F6:08:FF:AD:F6:00:08:1E:E9:22:29:8E:4B:2A:E9:6A:FF:48:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:fb:f8:e8:57:94:ea:74:06:b9:a4:97:dc:d7:a9:6e:d3:57:
62:c0:06:68:ac:1e:33:8a:4e:d2:29:54:9a:25:e0:d6:9e:4f:
e6:e0:97:aa:65:dd:78:a9:bf:21:93:e5:01:44:9a:dd:86:56:
89:5f:f6:fc:a2:de:2f:fc:9d:ba:06:ee:92:f9:b9:7d:1c:00:
5e:81:52:62:c9:6f:c7:e6:59:d2:ba:c6:a7:f2:62:97:99:f0:
8c:e5:14:bc:6c:f9:f7:da:39:24:8f:0e:3a:07:31:23:14:f7:
f5:c1:ae:bd:6d:af:8e:11:f5:9c:03:5b:69:f6:0b:f8:43:b3:
f2:65:4d:7e:58:28:7a:93:72:05:40:0e:45:ad:af:8a:6c:f9:
96:b2:08:27:1a:ad:54:1c:d8:65:24:58:4f:be:18:ab:c3:23:
b5:c0:c3:93:a5:c9:69:2d:cd:d5:59:46:70:d5:1c:8d:4b:9d:
5d:69:86:73:3c:f1:40:8c:4f:71:9a:0a:95:a9:8b:d0:37:da:
f5:81:0b:d6:43:2f:f9:f6:d3:b8:a4:e6:aa:6a:d2:b0:f6:d0:
16:8b:96:a1:8c:2d:71:09:e2:21:ab:9f:22:02:26:f5:58:e1:
b8:a2:69:f8:d4:47:ae:79:2e:99:c0:1b:fb:fe:e8:2f:e2:9c:
7b:45:6c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:43 2025 by rpki-client