Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
File: NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft (raw, json)
Hash identifier: OsFf14m0gFo5RaeLBeyGT3UDic3NwllS1bfGZ+a6Ldo=
Subject key identifier: C8:0B:45:38:A8:53:73:50:37:08:90:CD:25:B6:6F:83:A3:DC:02:20
Authority key identifier: 34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
Certificate issuer: /CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
Certificate serial: 01976CCF96C88C87A22A6F1050653269C3B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 05:00:33 +0000
Manifest this update: Sat 14 Jun 2025 05:00:33 +0000
Manifest next update: Sun 15 Jun 2025 05:00:33 +0000
Files and hashes: 1: NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl (hash: Mu4GgjnVyPldXc6gltyXYJzhlAgIT6301QBIIr0XHXM=)
2: n9slDOW816oCeV0oI8sGph9zEHY.roa (hash: qD/TRD91aBYWewYzdvChC8Edlu2GICT4uFezEduAc7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:96:c8:8c:87:a2:2a:6f:10:50:65:32:69:c3:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
Validity
Not Before: Jun 14 05:00:33 2025 GMT
Not After : Jun 15 05:00:33 2025 GMT
Subject: CN=c80b4538a8537350370890cd25b66f83a3dc0220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9f:4e:ac:9b:37:d9:16:98:b1:10:74:6e:28:
fe:b5:b9:53:f6:21:25:46:9a:f4:62:79:c5:c1:ce:
31:00:e7:24:23:f6:fd:21:cf:41:8b:b0:d5:a5:26:
a0:a2:77:d8:07:9c:d9:0c:2f:79:e8:fe:f7:06:19:
82:df:1a:0a:4d:74:d0:f9:3a:f1:cc:59:27:57:df:
6f:ec:fe:22:c4:db:e3:1f:f8:c1:aa:f2:d6:6b:d9:
fa:00:1b:87:6a:14:e3:5f:4a:ba:1c:57:81:36:09:
d0:07:0b:22:67:11:09:0d:d2:cd:82:bf:12:63:43:
e6:1d:50:81:51:98:c3:72:50:d9:3b:95:d6:09:f4:
39:a8:bd:a8:61:6a:26:2d:88:25:03:5a:30:2b:ca:
76:e4:f1:10:5f:00:e9:19:aa:e2:a7:d9:fb:01:b0:
19:20:8d:7d:8e:64:c8:f5:c5:04:c0:70:d7:82:f1:
5b:44:9c:6f:1e:cb:ec:e6:a7:1b:17:8f:b8:37:3e:
27:4f:2a:5c:f4:f3:5a:00:8f:91:96:7b:d7:bc:9e:
b5:1c:17:cd:29:c2:f4:f1:e1:61:3f:79:86:91:f2:
e3:79:05:35:81:5e:f9:69:53:98:27:53:7f:bb:f4:
94:df:9c:c3:e2:2e:cd:4f:e3:89:fb:c7:41:b2:30:
4d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0B:45:38:A8:53:73:50:37:08:90:CD:25:B6:6F:83:A3:DC:02:20
X509v3 Authority Key Identifier:
keyid:34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:da:10:a3:c6:2c:49:19:ce:af:bc:66:c1:37:dc:1d:99:a5:
fb:3a:02:4f:cc:00:16:b0:71:8a:af:e6:32:0f:5a:84:40:16:
78:79:3e:87:7e:13:da:16:e7:a1:9d:63:82:1d:dd:eb:6b:83:
32:97:ff:19:02:0a:2c:a7:29:9b:42:40:4b:f3:b5:64:81:cb:
5f:39:9e:1e:29:da:00:dc:75:7d:53:59:64:00:79:5b:10:ff:
85:43:a7:67:6d:0d:77:38:7c:39:b0:97:54:3d:af:7d:18:31:
1f:6e:1f:84:c3:59:ed:47:bf:c4:61:28:be:9a:3f:61:f6:e4:
eb:e2:03:a3:cd:3d:07:84:dd:e5:e6:87:ce:bc:28:e5:74:5f:
85:df:a2:3d:f6:c2:cb:86:77:2d:ab:68:19:2d:25:e3:ba:45:
f4:c2:ea:3c:ca:39:40:a1:40:68:8a:c3:35:3c:13:d9:2e:7f:
e8:ef:0b:66:3d:6c:eb:49:83:9a:b3:06:7d:95:7d:7f:19:e5:
87:a4:c5:b7:3f:cf:8c:a8:9a:b6:3b:bb:9a:99:87:0d:23:bb:
44:b6:ea:ae:18:2c:93:47:19:71:48:54:75:0e:62:4a:46:ac:
50:a0:d8:99:97:15:a4:58:b9:5a:7c:60:b9:a2:bc:75:29:dc:
19:76:66:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:19:52 2025 by rpki-client