Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft
File: NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft (raw, json)
Hash identifier: KV8mB8w3NAuG0eam4Yjfw8OIpWmlu2Httr5pjcmxL7k=
Subject key identifier: F5:B3:11:A5:43:E5:71:57:96:73:7C:7A:EA:EC:B1:C3:01:C0:63:CA
Authority key identifier: 34:F4:7B:73:EE:8F:BE:DD:25:F4:1B:3B:17:B2:BE:08:F5:BF:65:63
Certificate issuer: /CN=34f47b73ee8fbedd25f41b3b17b2be08f5bf6563
Certificate serial: 019A4F627321381692C244B245D82CDBB0FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 15:00:43 +0000
Manifest this update: Tue 04 Nov 2025 15:00:43 +0000
Manifest next update: Wed 05 Nov 2025 15:00:43 +0000
Files and hashes: 1: 94wGpzC6dKW4wCyBuNwgbCmu0YI.roa (hash: HmlUsbHYgnjwmvm0Ep06MITWSKS8pcY785u7DkFvmwU=)
2: N1_eJlCZb3ETGGXcyIle3qD0zxM.roa (hash: ZUSIabtzDxcJVnD57wreF1I3FajQaelaynE8r9qpwLA=)
3: NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.crl (hash: cPuG6jyznZTVZW1+6Y5/PhXKrlyoQAPulXAw3n8DHoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:73:21:38:16:92:c2:44:b2:45:d8:2c:db:b0:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f47b73ee8fbedd25f41b3b17b2be08f5bf6563
Validity
Not Before: Nov 4 15:00:43 2025 GMT
Not After : Nov 5 15:00:43 2025 GMT
Subject: CN=f5b311a543e5715796737c7aeaecb1c301c063ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5a:f5:ea:94:ac:34:2f:45:be:80:25:7f:2a:
f6:3d:e9:68:5f:e8:27:a4:93:3a:ae:e3:d8:9e:06:
c5:dd:63:7f:dd:4a:87:e5:89:83:f4:e3:d0:b7:94:
57:69:dc:93:da:f4:6a:e8:25:a2:72:e0:f3:58:0c:
28:81:0c:e1:67:36:68:7b:31:4e:c9:d8:f3:12:1f:
37:32:8b:5f:93:fa:92:a5:a5:21:76:61:d3:8c:a6:
fc:d3:fe:02:7f:21:98:ad:10:5e:46:26:2b:ac:aa:
99:3b:4c:d5:6a:8c:b7:43:d1:7c:4c:d5:f8:0b:23:
c8:63:d8:db:c3:b7:06:cd:9b:ab:ea:ed:5d:ec:ea:
a5:76:36:26:40:cc:c6:67:19:26:a4:74:c8:5e:64:
08:be:d9:00:77:fb:a7:a6:7b:32:04:77:83:a8:81:
d1:5c:f6:aa:d7:de:25:f4:64:eb:70:b9:97:69:ca:
e0:1e:73:b5:61:e3:35:b5:da:59:37:39:38:df:e5:
08:5e:6c:9c:37:93:a6:47:02:84:59:4d:f7:8d:72:
67:4a:76:16:c9:12:f5:a1:30:41:ee:2b:83:3f:0f:
b3:05:46:3d:19:2a:a4:6d:36:b0:23:e0:7e:83:54:
58:8b:e2:82:82:bf:3d:c6:61:79:36:91:11:5f:cc:
2a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B3:11:A5:43:E5:71:57:96:73:7C:7A:EA:EC:B1:C3:01:C0:63:CA
X509v3 Authority Key Identifier:
keyid:34:F4:7B:73:EE:8F:BE:DD:25:F4:1B:3B:17:B2:BE:08:F5:BF:65:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:3a:e5:87:e0:a0:3b:e2:f1:37:e6:a1:02:1a:7c:31:43:21:
88:3e:90:07:bc:b4:3a:c4:6c:a8:ca:bf:0e:bb:db:1b:cb:42:
e6:be:9b:4f:72:67:cc:12:c8:78:e0:93:74:53:18:d2:0b:c6:
2f:9e:0a:c1:01:59:30:56:1d:64:48:14:45:ff:2f:b0:71:78:
33:98:ff:69:68:3a:b8:6a:30:5d:46:ed:63:66:83:46:b4:fe:
43:6d:1e:c8:56:cb:98:db:81:25:e1:88:a5:0c:1c:48:94:10:
cf:1f:b2:4a:3f:1f:7f:14:2f:73:a6:3b:5a:38:00:1f:ef:c7:
07:a1:ca:b6:12:e3:ff:be:b5:81:e8:d8:3c:40:f6:41:da:a9:
43:77:64:25:87:ed:73:e8:a1:42:6e:54:ea:de:a0:4e:ce:2d:
12:d8:70:61:6b:04:e0:a5:09:6d:77:43:23:29:b9:3c:20:7a:
3a:d4:3c:a4:ac:0a:58:f4:30:34:27:67:84:b3:fd:df:b3:7e:
c7:56:b7:af:96:b6:1c:66:b5:f9:b6:7f:85:c1:01:42:6a:e6:
a6:7a:cb:98:de:c7:e9:28:12:54:22:52:6a:ae:08:c3:89:55:
08:33:8d:a6:4c:16:1e:b2:50:e1:63:96:4c:d2:e4:80:a3:06:
54:1a:c3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:20:45 2025 by rpki-client