Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
File: NpgLSGOkwPwQnpM6n494kuQmIvg.mft (raw, json)
Hash identifier: VThFXrAxSq/VtCyl3zZHJiwvy/Is2eIBSeOJK/vF2Kk=
Subject key identifier: 39:4D:0E:14:E0:93:4B:3B:12:F0:2C:DD:17:30:EA:9C:1D:0B:05:6E
Authority key identifier: 36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
Certificate issuer: /CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Certificate serial: 019A4F628B96F199A7D85589B2D9105BD31A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 15:00:49 +0000
Manifest this update: Tue 04 Nov 2025 15:00:49 +0000
Manifest next update: Wed 05 Nov 2025 15:00:49 +0000
Files and hashes: 1: LuqTaLAIb1FyHM5wmPs1YLA-1NQ.roa (hash: qV1VopZp94X/gYFO14Dpzbo5vZkWKbjRJxqhcQk1sTY=)
2: NpgLSGOkwPwQnpM6n494kuQmIvg.crl (hash: 7u55WJjaqK4tQ4K3yJdFnOEW+WUDGdXtkA0EQr/faio=)
3: kBYkIoAwOTb1jZVoI-2IjKFmw9s.roa (hash: XJGvgivLL6yw0361zmrsd505aLJW4OPiGkt/w/pz35g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:8b:96:f1:99:a7:d8:55:89:b2:d9:10:5b:d3:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Validity
Not Before: Nov 4 15:00:49 2025 GMT
Not After : Nov 5 15:00:49 2025 GMT
Subject: CN=394d0e14e0934b3b12f02cdd1730ea9c1d0b056e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d0:f5:ba:a8:8a:17:e7:3b:ae:6f:e6:5d:16:
89:9f:f0:2a:12:7e:37:7a:ac:f2:27:b5:15:62:72:
85:e0:20:62:19:48:b7:63:3b:a8:02:15:00:f3:d3:
09:da:a5:53:23:ee:dd:4a:1b:da:96:6a:f5:3f:44:
22:ba:96:cc:e5:55:49:18:c0:38:71:7b:13:82:8a:
6b:58:ae:42:b0:dc:20:4d:5b:df:ac:e4:ed:e5:6a:
8b:7c:19:c3:09:17:4a:83:a3:c8:0e:6a:56:d1:4e:
f6:ae:f8:94:7b:4a:6a:07:28:71:53:f2:25:d8:88:
fa:49:9a:4f:52:7d:65:17:6b:11:59:cc:fb:34:d6:
1b:64:cf:94:17:33:80:5f:2e:ec:34:5e:de:dc:5c:
49:47:6d:ea:f8:b0:c1:2d:a9:5b:fe:e6:58:77:03:
d6:78:c0:1c:a2:bc:94:51:9f:eb:b4:06:bc:b4:d8:
7a:08:c5:f5:27:f9:5f:52:03:28:d0:c8:ad:bb:2d:
7d:a3:5d:db:0f:cd:e1:08:21:09:ea:45:59:22:2b:
3f:a8:09:ab:fd:0c:3f:6d:56:8e:c8:8f:f1:51:45:
ee:8a:8b:12:cf:bc:a1:00:e1:c7:5d:91:a5:6d:ca:
98:16:93:d7:97:f6:39:2d:7a:99:6b:83:0d:b6:e1:
d5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4D:0E:14:E0:93:4B:3B:12:F0:2C:DD:17:30:EA:9C:1D:0B:05:6E
X509v3 Authority Key Identifier:
keyid:36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:c1:35:c6:1d:8f:d1:ff:7a:de:2a:1f:7e:b1:d6:d3:b8:36:
d9:5f:17:9d:48:b8:37:42:c1:e5:5c:11:31:81:0e:aa:49:26:
c2:18:9a:5c:70:c6:56:3a:3b:0e:ce:a8:ce:f5:82:0f:80:46:
9f:ff:83:59:0b:20:69:cb:99:e0:b1:85:94:de:df:96:94:83:
83:d3:d3:87:5b:22:41:b4:af:ee:37:42:c0:a2:7d:aa:81:9e:
87:fa:a6:a8:48:4b:e6:ab:c1:90:a3:ef:b8:15:b2:c0:a1:8a:
40:64:9d:28:05:d2:17:e6:a8:24:c9:c2:26:19:55:55:23:e6:
59:c7:89:c8:c2:b7:7c:7f:2f:b3:80:e3:a9:bb:d8:c9:c3:ab:
d3:cb:93:80:2d:11:be:7d:94:bf:ae:4e:15:42:ab:83:58:18:
77:36:2f:d2:5c:f7:79:5e:72:bb:73:73:78:c1:85:04:b1:73:
42:55:ae:0a:02:63:2a:c6:1d:e1:d1:c7:fd:51:7a:28:c3:ea:
29:d3:a9:0e:ab:5a:1c:87:ca:d9:8b:e9:1b:d6:c3:c9:a1:0b:
9c:ba:e3:34:03:58:f4:00:70:a8:ef:f9:38:14:d1:86:26:06:
0b:04:3b:b3:d2:ef:78:8f:ac:a5:a7:e0:b4:56:79:7c:52:8b:
19:0e:d2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:38 2025 by rpki-client