Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
File: npWhGdnBpdbj8-Ifb6hj2HouSw0.mft (raw, json)
Hash identifier: 5U36Ss9msL9vkJJII3jjzd5CeaB/JYiWBya/2gh0fuI=
Subject key identifier: 3F:D5:8E:B5:56:EB:F5:4F:EA:3F:64:7C:0F:62:59:CD:EB:15:48:7A
Authority key identifier: 9E:95:A1:19:D9:C1:A5:D6:E3:F3:E2:1F:6F:A8:63:D8:7A:2E:4B:0D
Certificate issuer: /CN=9e95a119d9c1a5d6e3f3e21f6fa863d87a2e4b0d
Certificate serial: 01988957AB5715D261F01C05FB6DA5543BB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
Manifest number: 1223
Signing time: Fri 08 Aug 2025 11:01:20 +0000
Manifest this update: Fri 08 Aug 2025 11:01:20 +0000
Manifest next update: Sat 09 Aug 2025 11:01:20 +0000
Files and hashes: 1: npWhGdnBpdbj8-Ifb6hj2HouSw0.crl (hash: vD9Okaf4A20cDg3EkDxCKro2eEcQfbvplaElhZMwxNM=)
2: vk_GtFEXTwYRBCAgUHHv_ETb-i8.roa (hash: DTHAkp6w1RyDjKvGkhN1ETcfrpfufgrsq2OK7DZvW8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:57:ab:57:15:d2:61:f0:1c:05:fb:6d:a5:54:3b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a119d9c1a5d6e3f3e21f6fa863d87a2e4b0d
Validity
Not Before: Aug 8 11:01:20 2025 GMT
Not After : Aug 9 11:01:20 2025 GMT
Subject: CN=3fd58eb556ebf54fea3f647c0f6259cdeb15487a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6f:32:97:17:74:13:ce:43:f6:44:52:a9:51:
1f:98:c1:16:d8:02:b4:37:e9:7f:32:df:0e:b0:b0:
9f:c2:7d:f2:5b:ec:23:30:0e:6d:0e:77:18:6a:16:
06:f8:16:3b:eb:67:ca:28:2c:d4:8c:73:3b:43:5b:
08:f9:a3:55:26:35:66:32:ee:5f:6f:bc:1d:bb:99:
77:b0:45:bc:d2:86:47:4e:e7:39:99:25:5c:9f:e6:
29:2b:0d:02:6e:fd:42:a2:f2:48:16:f9:69:92:ea:
e8:a8:f6:46:c2:54:2b:d3:41:c6:07:f6:ec:d9:e6:
52:51:9a:11:2d:43:54:9a:e2:90:d2:da:a8:ca:92:
4a:72:ef:33:ac:c3:46:cf:57:15:a5:4b:0d:74:34:
44:9e:18:70:e9:4d:80:17:81:8d:7b:37:9d:bd:65:
b2:1d:6b:36:0b:61:ed:26:78:42:cd:d6:61:39:79:
5b:08:87:3d:01:d8:11:5e:6d:80:34:0f:78:65:9f:
ca:0a:c5:01:8b:09:5d:3b:5a:b7:f2:e0:47:d1:e8:
81:d4:f1:3d:eb:46:a0:de:17:8b:fb:83:be:29:71:
31:e9:d9:e3:d4:03:9d:f8:b8:f8:aa:2e:51:58:3e:
1e:b5:ba:48:64:96:01:8d:5a:6d:40:8f:41:9c:a4:
91:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D5:8E:B5:56:EB:F5:4F:EA:3F:64:7C:0F:62:59:CD:EB:15:48:7A
X509v3 Authority Key Identifier:
keyid:9E:95:A1:19:D9:C1:A5:D6:E3:F3:E2:1F:6F:A8:63:D8:7A:2E:4B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:92:9c:28:d7:04:d1:50:70:4b:60:50:69:3d:b8:34:33:9a:
5f:b1:ae:eb:6d:bc:d4:1f:cc:98:90:c0:6f:71:82:be:a2:86:
68:01:bb:f1:e3:16:20:b2:82:67:21:be:4f:b5:63:33:e1:24:
b7:15:06:84:5c:7e:3c:98:a2:3e:a0:1b:5d:22:30:2a:f8:31:
b8:a0:14:8e:a7:41:e5:d8:90:16:b3:5c:ef:16:51:6a:f4:61:
2f:d5:48:02:28:31:c7:83:9d:28:5d:87:cc:6b:af:b8:98:43:
ab:64:3f:f2:09:c5:1a:fa:6c:bf:17:fe:15:ea:89:b4:7e:76:
f3:4b:d0:59:42:fb:18:ae:da:70:3e:bb:97:82:84:0e:49:3c:
d8:38:01:8c:05:7c:ce:f8:3c:3c:69:a3:09:f4:3b:38:65:27:
99:91:db:30:02:bb:e5:b4:fb:7d:a7:45:73:b2:a4:6e:65:aa:
80:a7:a6:4a:f8:ee:df:2a:a3:b2:fd:cf:36:ee:73:3e:ce:a8:
97:25:88:1d:b3:f0:2c:10:ed:e3:66:20:1d:ab:66:9e:6a:01:
50:44:1a:fe:9b:d0:c4:04:7c:63:fc:73:58:4e:32:ff:7a:2a:
2d:5c:dd:4f:db:1d:8c:9c:fd:ff:0e:fc:4e:83:29:f1:68:05:
f8:bf:7d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:24:58 2025 by rpki-client