Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.mft
File: NPwYIZBVFuYYMg6eRxoTsqqslv8.mft (raw, json)
Hash identifier: ZYpd5c47AsFiuC9mc97KYHN7l2tYq0JRsU58jhXVdXE=
Subject key identifier: 98:F8:D3:D6:5D:A7:A1:88:F3:42:72:D0:F8:08:0E:ED:D5:12:61:AD
Authority key identifier: 34:FC:18:21:90:55:16:E6:18:32:0E:9E:47:1A:13:B2:AA:AC:96:FF
Certificate issuer: /CN=34fc1821905516e618320e9e471a13b2aaac96ff
Certificate serial: 01987A1C0948F0F3956CE4C568A094893C5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPwYIZBVFuYYMg6eRxoTsqqslv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.mft
Manifest number: 1619
Signing time: Tue 05 Aug 2025 12:01:54 +0000
Manifest this update: Tue 05 Aug 2025 12:01:54 +0000
Manifest next update: Wed 06 Aug 2025 12:01:54 +0000
Files and hashes: 1: NPwYIZBVFuYYMg6eRxoTsqqslv8.crl (hash: Xkkij++cBhT2HyuPHlJ+L4Zcw/GJ6aGiGgIkHgafjcU=)
2: rYKTx0nL3KpouO_aEG54Y81fax4.roa (hash: U8k6Z6wFvQxh2jmlJpmKkiKIDJ2daF7abfgpCSFD+Kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPwYIZBVFuYYMg6eRxoTsqqslv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 12:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:1c:09:48:f0:f3:95:6c:e4:c5:68:a0:94:89:3c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34fc1821905516e618320e9e471a13b2aaac96ff
Validity
Not Before: Aug 5 12:01:54 2025 GMT
Not After : Aug 6 12:01:54 2025 GMT
Subject: CN=98f8d3d65da7a188f34272d0f8080eedd51261ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:54:84:9e:68:fb:6a:8b:8f:56:4f:ef:cb:0d:
4e:30:64:4d:4d:7d:24:2c:2f:fc:d5:23:c3:1a:59:
bd:d0:8a:f0:7b:8f:d7:53:45:fa:87:fc:7e:e0:a9:
42:69:cc:cc:25:a5:d2:98:91:a9:fb:ad:9d:e2:20:
08:ce:73:ad:96:0c:8e:16:bb:90:3c:39:53:cd:36:
8f:e5:cc:8e:7f:5f:c6:4c:54:ea:f2:ea:b7:a0:3e:
40:9e:36:21:f0:69:cd:b4:0e:c1:b5:fe:45:86:bd:
37:62:b3:85:f8:04:b1:10:02:b2:29:36:8f:31:20:
37:a8:09:96:a6:0b:ce:37:7c:39:16:01:3f:63:3e:
11:55:65:79:aa:b3:f0:91:c5:af:56:3e:6c:4a:21:
4b:7d:4c:c1:ad:fa:0e:33:f1:63:db:0c:74:f1:0b:
50:4d:41:49:ec:19:81:09:05:90:9d:cc:d5:f8:22:
21:c4:54:44:8a:c4:58:e5:bb:37:cb:1b:80:77:6a:
3b:d5:d2:dc:02:54:49:4d:64:41:31:95:83:30:06:
0a:33:d1:7d:26:d3:8e:fd:8d:bb:4d:1a:e8:10:23:
b0:77:22:5e:e6:5d:1a:2b:b0:a5:9f:e6:e7:ba:dd:
c5:bf:49:ee:40:9c:fc:1d:f8:84:78:1f:10:72:a6:
02:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F8:D3:D6:5D:A7:A1:88:F3:42:72:D0:F8:08:0E:ED:D5:12:61:AD
X509v3 Authority Key Identifier:
keyid:34:FC:18:21:90:55:16:E6:18:32:0E:9E:47:1A:13:B2:AA:AC:96:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPwYIZBVFuYYMg6eRxoTsqqslv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:f2:b2:b4:4b:4c:83:40:68:ac:07:03:cc:cd:63:7a:98:f2:
84:e8:c2:e8:02:f8:bd:16:ac:4a:ef:08:8d:7b:a3:cb:f6:0a:
cc:9a:f2:25:4c:e5:84:0f:e8:d6:26:1a:22:a2:55:9d:7b:04:
7c:a6:59:93:cd:d7:d6:76:3e:e8:67:f3:92:1d:e7:39:f4:4e:
5a:a1:f7:d3:86:98:2b:df:b1:96:47:86:a9:42:0c:d6:38:07:
86:98:3d:18:38:64:1a:fe:ad:7e:71:8e:b3:d5:b8:d4:0e:c5:
3a:70:91:9c:7f:90:ea:09:e4:0b:58:95:49:e8:15:bf:37:a9:
0f:ff:9f:8b:5b:8f:0a:52:55:21:08:0a:62:10:6f:49:ea:dd:
c6:6e:87:0b:3d:f2:87:79:5e:79:ab:a2:c5:70:50:a7:fa:e3:
9c:57:36:a2:94:47:90:98:e4:df:e6:fb:c8:39:c7:fe:24:16:
82:08:a6:33:e5:af:f3:4f:92:82:04:d1:ab:60:01:31:9e:19:
8c:c6:cf:9c:e0:6b:88:47:40:8d:c7:86:ad:7a:c8:cc:a5:e3:
8d:24:44:27:65:8b:58:81:36:4f:e4:6e:a1:db:50:a2:e1:a9:
29:8b:1d:18:62:01:2e:18:7b:87:64:3e:94:ac:2a:df:6a:e4:
03:b9:52:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:14:30 2025 by rpki-client