Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
File: naTpXS9Mw0pzdrc8DwObPhWPUVI.mft (raw, json)
Hash identifier: IBv7yx4DeA/5tGvSILybW+lOLVV+5PIQ28jAkfSHf30=
Subject key identifier: 4F:AB:8C:8E:B9:29:9A:8E:3B:0F:57:6A:3D:28:5A:93:7A:4B:FF:DB
Authority key identifier: 9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
Certificate issuer: /CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Certificate serial: 0198D404B1EDC72A575E8CB91E563413BE52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
Manifest number: 1555
Signing time: Fri 22 Aug 2025 23:02:13 +0000
Manifest this update: Fri 22 Aug 2025 23:02:13 +0000
Manifest next update: Sat 23 Aug 2025 23:02:13 +0000
Files and hashes: 1: WYyFBT5nmwxFR4gPo5unCY2UhVc.roa (hash: Z4ZpbpPZKoHHj3yG0X2Ro2qP/JaWFIzV9WlYUI0Hg8s=)
2: j9lH8J7G3WobH4lsD15m-VsHfXA.roa (hash: qeHJX0Tapm1zxSb8XB+NF4p89KIeCYI5mpUGKGseBY0=)
3: naTpXS9Mw0pzdrc8DwObPhWPUVI.crl (hash: bvmt0GZ37EBmEfTUblokyrFNPuR7MfpvWXrB0X266Uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:b1:ed:c7:2a:57:5e:8c:b9:1e:56:34:13:be:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Validity
Not Before: Aug 22 23:02:13 2025 GMT
Not After : Aug 23 23:02:13 2025 GMT
Subject: CN=4fab8c8eb9299a8e3b0f576a3d285a937a4bffdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f1:97:14:04:5d:5e:44:f9:0e:87:18:16:4e:
d4:b7:4e:18:5e:51:9d:9b:49:b2:8e:8f:fd:48:76:
52:c4:42:b1:a5:40:a0:e9:b4:ae:a2:57:60:34:ad:
18:2a:b5:e8:df:8f:31:a2:95:67:a7:3c:0b:7b:87:
f4:26:c6:38:1c:23:c4:07:9c:e9:91:c1:22:fe:d8:
91:8e:b6:6d:9b:b8:2c:fe:35:6f:e9:28:77:4a:dd:
43:8c:f6:d6:bd:ef:17:09:bf:b9:24:1d:1c:78:72:
6c:92:cf:56:b3:33:18:ba:0e:33:ff:c2:78:ef:f4:
68:30:7e:6f:73:e2:cf:9a:5d:aa:b0:b2:7c:14:28:
01:5b:7e:a2:9f:22:f8:fb:e0:31:2d:e5:c1:60:96:
5b:e1:3f:ca:34:e1:a2:df:3c:a4:b0:79:48:7c:d9:
4d:9b:24:b9:4a:dd:0d:5f:e3:e3:88:aa:bc:1f:a2:
49:6f:35:52:92:a7:6b:6c:09:ff:f9:c8:eb:10:3c:
3f:c4:3e:b9:6d:13:9e:8e:ab:bc:10:34:44:45:41:
d1:d3:34:e9:d3:55:1a:f8:8c:c0:c4:6b:c5:bd:df:
71:2d:c1:76:27:9a:1f:e0:36:c6:f3:e4:aa:8d:98:
38:4b:be:1e:65:29:67:51:fc:96:3a:dc:5d:87:32:
01:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:AB:8C:8E:B9:29:9A:8E:3B:0F:57:6A:3D:28:5A:93:7A:4B:FF:DB
X509v3 Authority Key Identifier:
keyid:9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ae:e0:78:27:6b:88:7a:9c:9f:27:ed:06:71:86:2d:ce:cd:
56:99:f7:c6:99:18:bc:b2:b0:3b:09:34:74:7d:93:26:24:6a:
3e:f8:de:93:26:9c:92:36:a7:45:4c:99:26:69:58:38:fd:86:
56:23:a4:e3:0b:b0:38:40:e7:a6:39:30:7d:19:3f:b5:d9:55:
f6:25:55:4d:dd:c9:17:f9:0c:74:4e:db:55:93:b0:3f:b2:20:
69:c2:40:e2:c9:50:06:8a:16:7a:45:a4:a8:d0:20:63:05:58:
d9:d5:b5:98:47:ee:ec:4a:d0:d4:8b:a3:23:d7:4e:66:72:b4:
1d:8e:fa:13:33:9f:bb:50:90:e8:31:6d:c6:77:2a:28:6c:d5:
27:28:56:6a:a7:d0:46:0b:7e:e5:dc:a4:ee:cb:6a:cd:58:76:
94:eb:6e:c5:41:89:ba:63:61:65:ca:17:53:11:fe:78:c3:e6:
c6:b0:4c:e3:69:81:df:87:d8:53:c9:87:a3:cf:f2:17:82:9b:
b8:4d:a0:6c:7b:e8:24:85:e5:66:1f:7a:9a:6b:9f:84:87:ab:
dc:5f:32:f0:87:e4:2a:23:cf:54:ec:28:da:05:b8:ca:a4:ce:
4a:ab:e6:57:12:01:cc:da:de:38:fc:f5:5b:20:28:2c:7a:38:
32:9e:4b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:38 2025 by rpki-client