Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
File: nPYI_632AAge6SIpjksq6Wr_SOg.mft (raw, json)
Hash identifier: pgI2Zb2bzaYTGLrla/nTTuEVO7LUcnzi6yQKfwy9vfI=
Subject key identifier: 79:9E:83:6B:B0:EA:EF:EC:CA:B3:D1:E2:0D:94:6C:34:C4:79:C6:DB
Authority key identifier: 9C:F6:08:FF:AD:F6:00:08:1E:E9:22:29:8E:4B:2A:E9:6A:FF:48:E8
Certificate issuer: /CN=9cf608ffadf600081ee922298e4b2ae96aff48e8
Certificate serial: 0199FC219A1312BC6589DC8A181266BBBF6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 11:01:24 +0000
Manifest this update: Sun 19 Oct 2025 11:01:24 +0000
Manifest next update: Mon 20 Oct 2025 11:01:24 +0000
Files and hashes: 1: RvXB7TupJSt9FEkzNNElWKNqWuk.roa (hash: yijhlw1vumObJvF+OXDbjNPPtftfHa2fND852vV46Co=)
2: nPYI_632AAge6SIpjksq6Wr_SOg.crl (hash: RVuufmUDSmjXUA2dt1c9foYy0IHwe0ZzjgDhlTKLkJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:9a:13:12:bc:65:89:dc:8a:18:12:66:bb:bf:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf608ffadf600081ee922298e4b2ae96aff48e8
Validity
Not Before: Oct 19 11:01:24 2025 GMT
Not After : Oct 20 11:01:24 2025 GMT
Subject: CN=799e836bb0eaefeccab3d1e20d946c34c479c6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f6:81:11:73:49:db:57:48:2c:26:ca:42:f5:
a5:0c:dd:c4:22:0d:07:fb:dd:31:e5:d5:84:60:fc:
89:6e:6d:b9:22:c6:03:f8:32:03:f9:c9:cc:b1:b3:
c7:a5:48:fe:b9:d7:4d:34:2e:08:11:73:75:ca:fe:
6a:14:89:d1:54:da:21:de:19:44:79:fc:40:4c:4d:
be:cb:3f:04:9e:ac:c5:47:e2:cb:b4:55:34:c7:0a:
76:8c:bc:c4:06:74:a7:47:3c:c1:49:86:1c:08:a7:
d7:63:d9:13:09:93:3e:b3:89:11:8e:76:8d:2b:84:
47:be:7a:f2:39:67:d0:f2:a9:16:f4:1f:79:ae:62:
dd:99:2f:ec:ff:3b:97:e7:26:20:66:18:41:33:ac:
56:15:c5:46:cd:53:b2:3a:ed:0a:f7:2a:59:41:b7:
0b:b6:df:7f:7a:0a:15:2d:f6:2c:b3:36:c8:be:13:
66:3a:7c:47:94:30:cd:22:16:dd:73:45:08:11:94:
2e:d4:b8:b2:b0:d2:60:8f:b9:26:0d:f9:c9:4e:af:
16:a0:40:5c:94:01:09:11:e8:23:e8:45:f4:54:4f:
84:42:2c:98:f9:1d:1a:0e:70:20:55:92:9e:6c:72:
58:42:35:0b:b5:f8:62:5b:54:7c:c3:a0:57:ee:1e:
56:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:9E:83:6B:B0:EA:EF:EC:CA:B3:D1:E2:0D:94:6C:34:C4:79:C6:DB
X509v3 Authority Key Identifier:
keyid:9C:F6:08:FF:AD:F6:00:08:1E:E9:22:29:8E:4B:2A:E9:6A:FF:48:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e6:95:ce:eb:4b:df:ad:f0:c2:48:c8:71:f3:45:0f:c9:91:
83:e2:be:c8:d1:98:85:ac:c0:db:ee:f6:ab:54:5a:ab:e0:ff:
b5:78:00:28:54:91:39:c6:98:bd:82:70:ba:b2:72:f3:5e:ea:
e3:81:1c:7f:40:37:7e:69:56:1e:18:d1:3e:74:44:71:49:7d:
ce:96:0d:14:2a:91:e5:8e:7b:4e:de:b9:15:52:14:7f:e4:db:
21:a3:99:53:83:8e:41:24:85:f2:b5:c5:fe:f7:e5:28:d0:06:
1f:6c:64:94:a8:b4:fe:2b:98:04:b5:48:c9:43:6b:fc:ff:c2:
4f:93:a8:8c:5f:b2:27:0e:00:09:81:e1:b9:9a:83:be:f3:25:
12:e8:bb:09:30:e1:a0:8b:02:19:37:63:71:d8:53:32:c4:d5:
6c:65:e4:48:78:94:d8:21:6d:50:73:c3:aa:64:9d:36:fe:49:
4b:0a:bd:89:dc:c8:52:0b:e4:ec:49:d2:55:7e:4c:e1:ee:b1:
4d:1c:3b:b4:bc:ef:11:12:7d:55:d5:13:82:df:4e:a3:73:9b:
f5:cc:1b:51:51:52:29:71:26:2a:30:86:18:cd:43:6b:d3:09:
da:a3:8c:b1:95:75:b6:07:54:29:c1:5e:cf:12:78:ed:d4:5d:
d3:9c:a3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:29 2025 by rpki-client