Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
File: NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft (raw, json)
Hash identifier: kN/N+DfSir666Iiasvo5JlGsktSzHdqCBRywSOe0lzg=
Subject key identifier: 6F:CE:66:16:A5:C8:2A:FC:F0:7B:E4:9C:FD:0D:3E:E8:21:7E:BD:90
Authority key identifier: 34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
Certificate issuer: /CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
Certificate serial: 01987562688A982A8F4049CAE4BE9995B0E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 14:00:40 +0000
Manifest this update: Mon 04 Aug 2025 14:00:40 +0000
Manifest next update: Tue 05 Aug 2025 14:00:40 +0000
Files and hashes: 1: NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl (hash: uniDseauGi+LXV+wK8a1MnTixnf3D26kDYHKgbdW0+M=)
2: n9slDOW816oCeV0oI8sGph9zEHY.roa (hash: qD/TRD91aBYWewYzdvChC8Edlu2GICT4uFezEduAc7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:62:68:8a:98:2a:8f:40:49:ca:e4:be:99:95:b0:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
Validity
Not Before: Aug 4 14:00:40 2025 GMT
Not After : Aug 5 14:00:40 2025 GMT
Subject: CN=6fce6616a5c82afcf07be49cfd0d3ee8217ebd90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:55:a5:81:13:a5:e7:c2:9c:29:9f:35:9a:8d:
1a:60:f0:0d:ad:dc:c5:0f:34:25:59:da:f0:8c:80:
65:15:1c:24:52:ec:ab:19:25:32:d3:b2:d5:25:03:
d0:da:34:d0:69:81:6f:0a:04:da:c7:3f:e0:ba:da:
31:7d:e8:3c:44:9d:4d:eb:13:f5:e7:a3:0c:61:08:
80:73:86:b0:c5:c0:f6:b0:6c:e8:17:3a:d6:dd:4d:
c2:52:92:e5:38:0e:ae:a2:98:bf:26:e8:dc:da:59:
21:9c:5b:3c:ef:f8:5a:55:be:29:67:92:33:01:23:
08:b5:4d:74:b0:60:4e:4a:69:6a:21:8f:2c:3e:07:
a4:fa:6f:17:08:cc:58:ce:f6:56:49:9b:6c:69:7f:
29:65:91:19:24:08:33:62:fa:92:0e:92:e1:29:68:
71:67:75:dd:fc:e7:cb:9f:79:ec:ef:ab:c9:37:a9:
32:5b:52:4d:71:c5:ad:1f:a1:d9:30:93:19:71:07:
9b:37:d6:5f:98:07:85:40:7a:ae:c5:8a:b3:b2:d5:
f6:a4:54:78:8c:cf:1b:d2:fa:ad:a7:89:09:c5:44:
3e:6e:6d:d5:0d:29:42:e3:c8:2f:9a:20:51:d7:c5:
f5:df:50:cd:85:07:f1:ae:75:a2:91:8d:71:6d:a4:
d3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CE:66:16:A5:C8:2A:FC:F0:7B:E4:9C:FD:0D:3E:E8:21:7E:BD:90
X509v3 Authority Key Identifier:
keyid:34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:88:a7:21:e0:78:f4:71:cd:dc:41:22:2c:76:a5:10:8c:55:
77:9a:b7:23:41:20:92:e0:c3:d1:3e:19:6b:7b:bc:bc:88:d6:
35:1b:ec:a8:b1:6a:10:b0:79:46:b8:d9:1b:41:8f:b8:bf:fb:
15:7d:74:5c:90:3e:83:4e:4e:b1:75:88:f2:a2:6f:e2:ca:6f:
dc:67:3c:4b:43:4d:c0:41:6c:e9:7c:bb:10:ee:aa:76:d6:ca:
d9:16:1f:16:23:54:ec:e8:51:4d:f3:7f:de:4e:a2:40:08:09:
80:e6:8c:a0:d8:63:69:49:47:c9:a7:88:65:34:8e:46:12:01:
39:b6:09:dc:30:ee:6a:d6:25:28:34:33:83:61:ca:bd:2f:55:
21:13:fb:2a:af:34:28:c7:32:28:0a:be:03:99:e9:e5:48:03:
cc:e3:7d:c7:9f:d8:72:cd:f3:3a:4d:96:cd:2d:d5:ab:51:b8:
f1:84:74:86:c8:8d:fe:5d:74:c7:42:fc:02:7e:d0:cf:9e:3f:
59:e4:b4:5e:73:83:03:7f:51:aa:10:67:08:c7:7d:c8:bd:f6:
af:e1:6a:0b:aa:d6:26:c4:f6:72:47:a8:5b:6e:f0:d6:ac:89:
b4:f4:4d:a2:69:55:12:19:b4:9f:9b:34:27:0a:40:61:7d:44:
e3:89:d6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:21:31 2025 by rpki-client