Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.mft
File: NPT7fWqMuH3Z2gbXZqCDjPNWBAI.mft (raw, json)
Hash identifier: 6da7+Iw0eB6jFiFTxSTmdP3T54lXqFYlVLU+IyU9qBk=
Subject key identifier: CD:D7:12:4D:4F:0F:0E:65:29:A4:E6:1E:3F:E7:11:32:88:9D:58:12
Authority key identifier: 34:F4:FB:7D:6A:8C:B8:7D:D9:DA:06:D7:66:A0:83:8C:F3:56:04:02
Certificate issuer: /CN=34f4fb7d6a8cb87dd9da06d766a0838cf3560402
Certificate serial: 019873E3E60BAECF06EEC6D6F5B26A047C14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.mft
Manifest number: 0163
Signing time: Mon 04 Aug 2025 07:02:52 +0000
Manifest this update: Mon 04 Aug 2025 07:02:52 +0000
Manifest next update: Tue 05 Aug 2025 07:02:52 +0000
Files and hashes: 1: BC_CdjOB6RULGEZF7J94_vrGJec.roa (hash: JFygJvgYc7Kvmd7DMd2rl7uXMvNHWTmTg/wiD9RDlO4=)
2: NPT7fWqMuH3Z2gbXZqCDjPNWBAI.crl (hash: PuvhSZ6Vi0TzFRNXpGxvfjPYzvYAXKMCgAEpKmzhvtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:e6:0b:ae:cf:06:ee:c6:d6:f5:b2:6a:04:7c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f4fb7d6a8cb87dd9da06d766a0838cf3560402
Validity
Not Before: Aug 4 07:02:52 2025 GMT
Not After : Aug 5 07:02:52 2025 GMT
Subject: CN=cdd7124d4f0f0e6529a4e61e3fe71132889d5812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f6:a6:00:8b:25:b3:5f:b3:d5:3c:48:79:04:
2a:44:5f:53:89:7b:d3:be:30:bf:3d:19:ee:29:50:
5b:98:0e:8f:af:6a:5d:23:7c:91:4e:45:aa:a2:fe:
67:27:b4:e3:f8:2c:a4:6b:92:6e:73:72:11:13:cb:
dc:c9:c6:70:6b:61:17:26:e8:fb:fc:29:0d:94:b3:
8e:c0:6c:63:92:0b:7a:77:49:79:d5:16:88:db:d8:
97:17:4c:fc:50:4a:94:03:ee:08:23:10:2a:5b:1a:
13:a2:39:5b:21:51:7e:9e:39:80:7e:06:f1:81:26:
5f:ea:f2:75:a4:67:b4:f6:41:45:d8:b1:6c:71:e4:
d8:3c:52:69:79:04:51:cf:5c:ed:8e:67:4c:11:7d:
e8:73:1c:9f:53:1b:53:2d:9c:14:b7:28:d0:32:cc:
d2:8c:1f:cd:85:f0:7b:28:01:0e:0d:de:ed:d0:9b:
3d:4f:86:1f:88:a2:05:8d:3f:4f:d9:bf:26:11:9a:
75:04:9c:7a:5c:42:95:d0:37:f5:88:7d:86:10:7a:
14:74:24:de:11:7c:8d:aa:92:53:fc:6b:6e:bf:7c:
23:44:29:76:ad:93:9c:2c:e0:ca:e6:d5:ea:38:5b:
3b:20:00:bf:08:88:1f:36:9c:70:73:95:a6:db:93:
34:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D7:12:4D:4F:0F:0E:65:29:A4:E6:1E:3F:E7:11:32:88:9D:58:12
X509v3 Authority Key Identifier:
keyid:34:F4:FB:7D:6A:8C:B8:7D:D9:DA:06:D7:66:A0:83:8C:F3:56:04:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:78:ec:60:3f:4a:79:98:3b:3d:ae:0b:53:8a:32:e5:22:ca:
9e:d9:ec:9d:97:4f:84:36:b9:8b:73:bb:a8:ee:c9:a0:85:c0:
ec:3e:72:37:5b:af:73:30:c6:fe:31:64:60:ef:84:8c:8e:e5:
c9:6f:6f:4a:cb:6a:21:e2:40:77:1e:42:6a:47:96:dd:16:07:
92:c7:cd:be:43:ac:99:f0:6f:72:ed:74:2c:f9:8e:31:65:40:
c7:b0:ae:a6:a2:c0:b0:66:43:70:60:d2:3b:f5:8c:2c:ed:16:
04:1e:4f:ed:62:71:b0:49:81:b4:c4:83:de:34:e8:5a:86:4e:
f2:4c:90:b4:29:d8:5b:50:ae:3c:66:c9:f9:a8:6c:f3:ed:27:
a4:d6:94:30:e5:10:55:fb:0e:f8:ab:7d:41:2f:b0:e6:8b:f2:
97:10:80:a4:b2:ab:a5:1d:b0:e0:aa:ab:8a:15:dd:0d:74:42:
a9:85:e5:d7:00:7e:ee:a0:bd:e5:02:8d:8f:75:59:96:b2:7f:
ae:2b:9c:43:80:e9:7d:39:19:5e:8d:36:6b:58:55:90:2c:49:
b9:06:06:00:d5:54:97:79:e7:bb:9f:2c:e4:40:ac:2e:47:5a:
b4:6a:d4:ab:78:fe:39:0b:82:e9:7e:a0:09:5e:20:89:44:ee:
c0:20:48:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:56 2025 by rpki-client