Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
File: naTpXS9Mw0pzdrc8DwObPhWPUVI.mft (raw, json)
Hash identifier: +jPM5mLBwUtqfQKrudOhl9ZHkTs+k/93vH7TR/qsvtk=
Subject key identifier: B7:0C:E4:2A:7F:7A:4C:A2:D5:97:0C:AD:6A:F0:D1:BA:23:D8:BA:D5
Authority key identifier: 9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
Certificate issuer: /CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Certificate serial: 019888B2805F63B6536269B4480C49676405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
Manifest number: 152E
Signing time: Fri 08 Aug 2025 08:00:56 +0000
Manifest this update: Fri 08 Aug 2025 08:00:56 +0000
Manifest next update: Sat 09 Aug 2025 08:00:56 +0000
Files and hashes: 1: WYyFBT5nmwxFR4gPo5unCY2UhVc.roa (hash: Z4ZpbpPZKoHHj3yG0X2Ro2qP/JaWFIzV9WlYUI0Hg8s=)
2: j9lH8J7G3WobH4lsD15m-VsHfXA.roa (hash: qeHJX0Tapm1zxSb8XB+NF4p89KIeCYI5mpUGKGseBY0=)
3: naTpXS9Mw0pzdrc8DwObPhWPUVI.crl (hash: D+e9Y8xAIggtdJ1byANnMnctqxSETDSXu0+y+q3h57A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:b2:80:5f:63:b6:53:62:69:b4:48:0c:49:67:64:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Validity
Not Before: Aug 8 08:00:56 2025 GMT
Not After : Aug 9 08:00:56 2025 GMT
Subject: CN=b70ce42a7f7a4ca2d5970cad6af0d1ba23d8bad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:47:2e:79:88:76:27:9c:57:a0:3d:9e:2e:d3:
5f:f2:76:03:6b:a7:5d:70:64:9a:50:38:4e:ca:e9:
ce:d5:e4:fe:58:ef:b4:b0:86:95:c6:18:04:3f:74:
97:d9:42:73:f6:60:23:e4:16:22:4c:4d:a4:e7:9a:
0c:44:df:f7:42:0c:c7:a3:af:c6:b5:36:8e:79:62:
92:2d:5b:28:0f:b7:0d:5d:f5:f3:6d:a8:1c:cd:72:
9e:b8:2d:77:1c:d1:40:92:cf:88:65:67:65:e1:7e:
7f:3e:cf:d3:d3:46:d5:db:0f:c6:43:5a:c2:d3:ab:
54:7c:4c:d6:19:f0:5c:ef:07:a0:d2:7f:d2:11:39:
fb:bc:1f:12:89:fc:a5:be:3f:c4:c8:44:1e:8e:47:
92:b7:c7:75:6b:53:27:45:e4:62:8a:f3:85:52:e1:
05:55:6c:23:d5:00:8e:de:0e:45:43:05:67:30:c1:
ca:dc:8e:aa:04:cc:c8:81:c3:72:82:b6:3f:2a:fe:
30:e9:1a:d5:67:69:72:fe:17:5b:99:21:e2:ae:76:
a6:5e:4a:0b:f5:8c:79:ee:79:55:db:67:73:e8:65:
4c:9f:f1:4e:cf:2a:2c:38:49:f8:e0:75:83:a9:d8:
d9:91:74:82:cd:8b:d2:e3:f1:2a:79:14:48:a1:dc:
67:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:0C:E4:2A:7F:7A:4C:A2:D5:97:0C:AD:6A:F0:D1:BA:23:D8:BA:D5
X509v3 Authority Key Identifier:
keyid:9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:9c:c9:ee:64:6b:2d:9f:1e:40:7f:49:b7:6a:ca:52:f1:ad:
0a:55:fd:77:d1:28:4c:da:76:ab:20:fd:ec:82:ae:a5:9e:51:
92:9a:56:63:32:91:52:7c:69:64:f7:19:6b:b7:ea:97:1c:7f:
71:4b:68:e3:69:07:48:05:dd:8b:41:5e:d7:df:23:20:9d:a3:
61:ea:a3:1a:6b:f1:ec:7a:fa:a5:9b:8c:f7:7c:9f:e0:0c:55:
0a:cc:db:25:32:67:41:40:4d:e0:41:b1:4e:18:ea:73:25:bf:
fa:cb:37:e2:4a:5f:e6:0c:bf:2b:1f:e0:27:1d:a0:d4:1f:dc:
63:b7:9e:8d:42:9a:74:23:5b:88:85:21:89:a1:2b:65:d9:bf:
83:73:21:5c:4e:de:45:6c:3b:f5:ed:cf:1a:f7:64:f5:a3:45:
59:e6:8d:35:b5:32:fc:0e:93:ae:27:b5:6b:9c:d5:7b:56:58:
3d:25:bd:ab:a7:40:24:fb:30:fa:46:d1:91:0d:9a:a7:3f:3e:
74:13:fb:be:90:ff:f4:36:bc:76:86:2a:37:32:5b:4e:c9:de:
02:d3:71:f0:a7:42:a2:68:fc:97:4d:cb:4b:e5:a0:87:ba:f3:
96:04:52:1f:c5:2b:82:96:35:fb:80:84:17:e1:2c:01:04:29:
2f:bb:9d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:14:53 2025 by rpki-client