Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
File: NpgLSGOkwPwQnpM6n494kuQmIvg.mft (raw, json)
Hash identifier: F0cXgJ+NdiYi6+6CyMK0IujH4bBYECxVgC222wVVaSY=
Subject key identifier: F1:66:4A:E5:41:68:E7:40:8C:40:F4:C6:E8:96:A9:6C:B7:1B:69:98
Authority key identifier: 36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
Certificate issuer: /CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Certificate serial: 01977B304F6F150CE210F5AAA7B2D8E8A8C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
Manifest number: 1596
Signing time: Tue 17 Jun 2025 00:00:52 +0000
Manifest this update: Tue 17 Jun 2025 00:00:52 +0000
Manifest next update: Wed 18 Jun 2025 00:00:52 +0000
Files and hashes: 1: LuqTaLAIb1FyHM5wmPs1YLA-1NQ.roa (hash: qV1VopZp94X/gYFO14Dpzbo5vZkWKbjRJxqhcQk1sTY=)
2: NpgLSGOkwPwQnpM6n494kuQmIvg.crl (hash: wGhia3t1SvUJaFye7PvMMytCumEQsh6Oh6zLwXeB1qg=)
3: kBYkIoAwOTb1jZVoI-2IjKFmw9s.roa (hash: XJGvgivLL6yw0361zmrsd505aLJW4OPiGkt/w/pz35g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:30:4f:6f:15:0c:e2:10:f5:aa:a7:b2:d8:e8:a8:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Validity
Not Before: Jun 17 00:00:52 2025 GMT
Not After : Jun 18 00:00:52 2025 GMT
Subject: CN=f1664ae54168e7408c40f4c6e896a96cb71b6998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:08:47:1f:f5:52:8d:88:a4:9c:b3:73:d2:97:
92:ed:4e:5b:a9:c9:d5:0d:ab:72:e8:87:08:1c:7a:
b2:ab:bb:e7:cb:44:99:f9:8f:2a:56:0d:c0:63:11:
79:8d:fe:fc:be:59:56:f9:ff:dc:0f:88:a9:93:32:
8c:27:2d:3d:fa:57:61:49:55:90:fc:fd:c3:88:77:
85:a7:fb:56:7b:e2:f5:6a:16:3b:ac:1e:9d:43:30:
a4:8f:68:c9:d1:4d:ac:01:f8:5c:f0:f7:ed:c1:14:
36:34:f6:cd:0a:45:71:81:06:76:8f:c6:19:a6:c9:
4f:ae:c6:8d:80:1c:d4:ec:0f:8c:14:c8:ea:6f:a6:
2f:fc:05:9f:cf:0a:68:5d:49:e9:2a:a1:ed:b9:a3:
eb:3c:25:a3:19:37:e8:66:16:20:4e:dd:45:2a:3a:
ae:72:2f:f0:1b:27:45:4e:e3:af:7e:af:46:32:83:
3c:33:cb:2f:dd:d8:d9:73:74:98:0b:62:2c:be:42:
04:28:70:a8:ca:75:18:7c:6b:26:ff:54:88:94:8c:
e2:a1:07:46:0f:07:72:e0:63:d3:c0:b9:27:b2:ba:
02:05:16:3f:1b:f2:8d:ff:23:c3:ff:0d:ee:52:93:
69:92:bf:65:46:5c:1a:11:6b:8e:da:ea:0c:23:6f:
e2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:66:4A:E5:41:68:E7:40:8C:40:F4:C6:E8:96:A9:6C:B7:1B:69:98
X509v3 Authority Key Identifier:
keyid:36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:8f:b8:84:97:b6:ea:8d:5a:7a:a7:3e:9d:04:50:96:9d:85:
2d:09:90:c2:c2:3e:c9:96:86:36:9e:7e:45:8e:53:e7:29:a5:
fa:1e:25:2b:b3:fe:29:54:d5:3f:be:4a:e8:e7:61:de:6c:1a:
16:bb:af:00:64:71:7f:4b:5e:92:db:b9:43:f5:9b:f5:4e:1f:
22:58:b9:0e:33:ad:0c:5d:78:7b:96:d7:ec:b5:a2:29:2a:72:
ea:af:b6:1d:a1:66:da:07:d2:db:de:d7:85:6e:7a:5e:c4:af:
33:99:e4:9f:ee:f5:e3:6d:28:41:cf:a3:b3:cb:69:79:8b:2f:
63:8a:23:c4:fa:f0:14:51:4f:68:34:d9:58:13:27:55:39:bf:
2b:af:5c:9e:58:c4:4e:86:1d:05:07:93:e5:d5:3a:d7:77:9c:
95:95:8b:7f:85:e7:d2:bb:d8:b6:61:1a:2e:90:9e:0e:27:9f:
34:a8:f7:c9:65:2c:f4:34:f2:e2:1e:7a:e1:e2:da:ee:34:6c:
c5:43:12:76:68:32:67:3b:06:4c:69:e1:51:17:9b:40:79:4f:
54:0f:df:b3:15:2c:d2:80:85:e0:20:01:d8:6e:0c:e4:58:b0:
05:4f:8c:ef:f6:aa:b1:95:50:db:e1:83:0c:f8:5c:72:35:fe:
53:c7:81:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd7ME9vFQziEPWqp7LY6KjHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OTgwYjQ4NjNhNGMwZmMxMDllOTMzYTlmOGY3ODkyZTQy
NjIyZjgwHhcNMjUwNjE3MDAwMDUyWhcNMjUwNjE4MDAwMDUyWjAzMTEwLwYDVQQD
EyhmMTY2NGFlNTQxNjhlNzQwOGM0MGY0YzZlODk2YTk2Y2I3MWI2OTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwhHH/VSjYiknLNz0peS7U5bqcnV
Daty6IcIHHqyq7vny0SZ+Y8qVg3AYxF5jf78vllW+f/cD4ipkzKMJy09+ldhSVWQ
/P3DiHeFp/tWe+L1ahY7rB6dQzCkj2jJ0U2sAfhc8PftwRQ2NPbNCkVxgQZ2j8YZ
pslPrsaNgBzU7A+MFMjqb6Yv/AWfzwpoXUnpKqHtuaPrPCWjGTfoZhYgTt1FKjqu
ci/wGydFTuOvfq9GMoM8M8sv3djZc3SYC2IsvkIEKHCoynUYfGsm/1SIlIzioQdG
Dwdy4GPTwLknsroCBRY/G/KN/yPD/w3uUpNpkr9lRlwaEWuO2uoMI2/i6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFmSuVBaOdAjED0xuiWqWy3G2mYMB8GA1UdIwQY
MBaAFDaYC0hjpMD8EJ6TOp+PeJLkJiL4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnBnTFNHT2t3UHdRbnBNNm40OTRrdVFtSXZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82OGY0NGItMzY3NS00YWQ4LWEwY2Et
NzRiYTI2YWFmMWY2LzEvTnBnTFNHT2t3UHdRbnBNNm40OTRrdVFtSXZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82OGY0NGItMzY3NS00YWQ4LWEwY2EtNzRiYTI2YWFmMWY2
LzEvTnBnTFNHT2t3UHdRbnBNNm40OTRrdVFtSXZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiY+4hJe2
6o1aeqc+nQRQlp2FLQmQwsI+yZaGNp5+RY5T5yml+h4lK7P+KVTVP75K6Odh3mwa
FruvAGRxf0tektu5Q/Wb9U4fIli5DjOtDF14e5bX7LWiKSpy6q+2HaFm2gfS297X
hW56XsSvM5nkn+71420oQc+js8tpeYsvY4ojxPrwFFFPaDTZWBMnVTm/K69cnljE
ToYdBQeT5dU613eclZWLf4Xn0rvYtmEaLpCeDiefNKj3yWUs9DTy4h564eLa7jRs
xUMSdmgyZzsGTGnhURebQHlPVA/fsxUs0oCF4CAB2G4M5FiwBU+M7/aqsZVQ2+GD
DPhccjX+U8eBQA==
-----END CERTIFICATE-----
Generated at Tue Jun 17 07:54:32 2025 by rpki-client