Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
File: NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft (raw, json)
Hash identifier: +yLiTBLAH8l6JLUVnXqwuL4e3hjtCV7a+KhZAmeXGi0=
Subject key identifier: DF:B3:43:AA:49:F4:CB:B0:F0:6C:E1:C9:3E:F9:E1:52:1E:81:48:68
Authority key identifier: 34:F7:83:61:A0:77:B0:D7:89:13:5C:CD:68:B1:26:1D:B1:38:F9:50
Certificate issuer: /CN=34f78361a077b0d789135ccd68b1261db138f950
Certificate serial: 019873E3463C16E8D3578009739737CE7569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
Manifest number: 1012
Signing time: Mon 04 Aug 2025 07:02:11 +0000
Manifest this update: Mon 04 Aug 2025 07:02:11 +0000
Manifest next update: Tue 05 Aug 2025 07:02:11 +0000
Files and hashes: 1: BT-QKLCE4MZ0YtWA2nAk6qpxv6g.roa (hash: t+OljMW5uOHxrHIlucZj5mZPbb09wnIuaUx+FWzOywc=)
2: NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl (hash: VHEZS2BgZ7H/ztDLpx72cLH/SsdhqCk/hbJXj9vtyFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:46:3c:16:e8:d3:57:80:09:73:97:37:ce:75:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f78361a077b0d789135ccd68b1261db138f950
Validity
Not Before: Aug 4 07:02:11 2025 GMT
Not After : Aug 5 07:02:11 2025 GMT
Subject: CN=dfb343aa49f4cbb0f06ce1c93ef9e1521e814868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e5:eb:18:06:fa:8d:98:03:1d:1a:56:ec:e4:
2f:7f:2d:ab:da:ab:b3:8c:38:cf:11:13:b8:30:24:
5d:f5:65:77:e9:be:f3:12:51:90:6c:48:59:97:41:
09:c5:8c:27:b3:78:f7:78:16:ca:72:ea:ce:75:fc:
fb:02:e8:d5:75:b4:41:66:a1:66:d4:81:90:fc:a8:
63:49:a8:2a:40:74:d7:a8:3c:6e:7a:28:8b:18:d0:
e0:1e:37:9c:b9:07:d9:33:f4:99:a2:7c:47:bf:04:
9d:41:80:7f:08:ea:1d:d4:bb:ec:c1:75:bd:15:0b:
43:bb:14:85:81:04:5e:e8:22:cc:ec:0b:e5:72:eb:
f4:bd:1c:82:c1:a3:7e:25:1f:61:b2:30:e0:7b:de:
e5:6f:5f:56:b4:10:a5:5e:3e:52:6f:e8:f9:70:92:
ed:2e:39:99:a8:26:6f:a2:8c:32:c2:87:d0:52:ce:
b2:51:8d:bd:c9:05:9e:78:24:62:89:a9:b1:c0:7e:
b7:0a:44:77:08:f8:01:95:f0:8c:81:35:c5:07:84:
f3:56:ac:16:f7:8c:ed:f0:f0:87:20:bd:aa:a5:cc:
b7:fa:d5:51:06:d8:4f:ca:96:26:98:e4:e8:d9:42:
36:87:4a:a3:1e:9c:67:44:69:ec:d5:1b:db:e3:c4:
8f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B3:43:AA:49:F4:CB:B0:F0:6C:E1:C9:3E:F9:E1:52:1E:81:48:68
X509v3 Authority Key Identifier:
keyid:34:F7:83:61:A0:77:B0:D7:89:13:5C:CD:68:B1:26:1D:B1:38:F9:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:bf:ad:0e:6c:53:e0:8d:e8:03:61:c6:d6:54:9c:d4:46:90:
75:3b:21:44:62:69:98:0c:6e:36:91:86:7c:8a:c5:08:0e:82:
72:5f:c9:b1:5e:a5:d0:b1:63:45:1f:a7:8d:a8:93:27:b0:26:
42:2e:26:c2:c6:b5:c7:8b:92:fd:4f:4b:23:a3:a2:5f:d8:64:
67:cd:27:4a:d0:6c:c8:7d:ac:1e:63:ad:32:85:5f:c6:63:ac:
7a:8a:90:4d:a5:ff:7e:10:8b:9c:84:ac:04:0d:42:7f:ec:ca:
92:74:fb:0c:d4:01:e5:31:a2:20:e9:17:94:16:a4:bb:ea:e3:
05:94:92:74:aa:c7:7e:2e:87:4e:d6:e5:9b:e8:3d:ba:eb:18:
21:f1:f5:e8:b4:8c:f5:d2:cc:80:4b:de:28:d5:98:36:88:df:
b5:5c:87:c7:c5:ff:1d:ea:c6:a4:84:09:e3:6a:83:de:9c:81:
5e:ae:df:a4:c5:b8:4e:53:61:10:c4:8c:9d:eb:ff:15:4e:83:
d0:2c:b9:2e:01:5d:97:83:42:d8:51:be:7a:c5:41:20:a0:01:
2b:a8:70:c2:ed:32:aa:1d:3d:5d:4a:06:52:1d:d2:fa:6a:81:
0e:99:95:f1:ff:8f:3f:96:b1:69:30:14:ac:b8:7c:f6:75:da:
dc:8a:17:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:36 2025 by rpki-client