
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
File: NpgLSGOkwPwQnpM6n494kuQmIvg.mft (raw, json)
Hash identifier: pfLNh+PAoanef3s8kyVWQIEadX2pMszZgkZtDhVSeb8=
Subject key identifier: 78:76:5E:8C:C4:7F:3E:88:29:19:DA:EB:25:A5:F7:F3:96:FF:6E:E3
Authority key identifier: 36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
Certificate issuer: /CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Certificate serial: 01988B7CAD4A8A30A392DFCA5021B4DBDF97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
Manifest number: 1623
Signing time: Fri 08 Aug 2025 21:01:00 +0000
Manifest this update: Fri 08 Aug 2025 21:01:00 +0000
Manifest next update: Sat 09 Aug 2025 21:01:00 +0000
Files and hashes: 1: LuqTaLAIb1FyHM5wmPs1YLA-1NQ.roa (hash: qV1VopZp94X/gYFO14Dpzbo5vZkWKbjRJxqhcQk1sTY=)
2: NpgLSGOkwPwQnpM6n494kuQmIvg.crl (hash: BOCNMYxT4W4stNI15Sp0rB1tt+n5hDMEdICYATxM1fw=)
3: kBYkIoAwOTb1jZVoI-2IjKFmw9s.roa (hash: XJGvgivLL6yw0361zmrsd505aLJW4OPiGkt/w/pz35g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:ad:4a:8a:30:a3:92:df:ca:50:21:b4:db:df:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Validity
Not Before: Aug 8 21:01:00 2025 GMT
Not After : Aug 9 21:01:00 2025 GMT
Subject: CN=78765e8cc47f3e882919daeb25a5f7f396ff6ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2d:f3:95:ad:75:dd:e8:43:5b:02:c0:b0:43:
e7:39:89:c7:48:3b:e2:aa:b8:19:8e:78:2e:8c:19:
dd:7b:1e:01:b2:4d:3f:38:36:0a:89:d1:c5:3d:48:
c7:d9:ad:4d:3e:b9:52:17:5d:b9:a1:e0:4c:10:d3:
64:9f:a2:d9:14:19:ce:d2:9c:f2:44:3d:b9:0f:40:
47:25:04:1d:ec:fb:aa:20:c4:dd:53:ec:06:56:6a:
52:9a:bb:5b:ff:a2:f0:dd:1c:a7:12:eb:a5:af:8a:
bd:0e:e0:49:f3:21:0a:ef:70:72:45:ac:10:0d:1f:
1f:91:bc:fc:d4:22:26:3b:99:d2:d8:23:de:8d:c4:
9d:37:51:8e:e8:38:d9:49:ab:b4:c5:69:62:50:65:
17:d0:a8:29:c7:28:78:20:33:8f:22:c1:09:d1:1b:
f4:3a:1b:bf:42:11:05:a6:ab:be:3a:c5:b7:d3:ae:
73:ed:b9:3c:e4:95:2a:10:b5:6e:67:b9:ab:93:bc:
a1:96:11:fb:a5:68:90:e5:4a:4d:17:66:d4:2a:f5:
49:45:f6:94:af:09:fe:d3:5c:16:eb:c9:77:98:fb:
d4:1b:3b:e0:62:a0:c0:07:2e:bc:b4:09:e2:39:84:
23:b6:54:d6:4f:a4:48:64:12:62:71:ed:e3:16:0d:
c8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:76:5E:8C:C4:7F:3E:88:29:19:DA:EB:25:A5:F7:F3:96:FF:6E:E3
X509v3 Authority Key Identifier:
keyid:36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:fe:88:ce:a0:2e:0a:8b:0d:27:b8:59:a0:84:7c:4b:c5:b1:
e0:8f:e4:f5:a6:9a:1c:78:c3:89:65:16:4a:b8:c8:80:19:46:
39:92:7a:50:31:6b:b0:39:ef:f1:f3:be:f9:62:a5:70:93:38:
e4:be:6b:16:32:3b:b6:10:9a:d1:00:ad:90:5f:71:e1:0a:4f:
7f:30:6f:39:fc:f4:f9:b8:01:56:95:f1:5e:96:00:5f:6a:89:
e9:7c:25:3d:cc:83:82:39:fc:ec:20:fa:1e:6c:f7:ef:6c:df:
c9:6a:14:55:05:55:f5:3a:1c:ed:55:d1:1f:99:03:8e:cf:51:
72:51:05:e0:ae:e0:78:dd:88:6b:f1:e2:4a:1a:64:4d:cf:de:
23:67:99:97:f3:c0:94:8d:26:19:8d:b7:92:24:c1:17:05:f9:
54:ed:77:e7:8d:20:99:78:3b:99:c9:4b:27:50:8f:94:10:1b:
45:7b:f0:2c:31:55:1f:60:08:f3:7b:88:dd:69:a6:e9:28:f1:
11:83:a1:6c:75:ed:19:8e:8b:ac:ef:5e:bf:35:44:48:7c:3b:
c3:94:bf:3d:31:37:a6:e3:ad:5c:ec:c4:7b:93:e2:d2:10:9f:
fd:01:08:d0:e2:c8:44:55:d7:6c:4c:f1:57:69:3b:c6:d3:d4:
c7:f6:04:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:05:31 2025 by rpki-client