Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
File: NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft (raw, json)
Hash identifier: MUh0vvTpME6pf/I2SU20txmEW8laAdRVHKftYZ+9JDE=
Subject key identifier: CE:4E:D5:E6:0D:FA:FB:D1:48:3F:14:BA:71:77:B8:9B:3D:F6:05:77
Authority key identifier: 34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46
Certificate issuer: /CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346
Certificate serial: 0199FC5850AB2F87A0F560C13F1519D28905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
Manifest number: 144C
Signing time: Sun 19 Oct 2025 12:01:10 +0000
Manifest this update: Sun 19 Oct 2025 12:01:10 +0000
Manifest next update: Mon 20 Oct 2025 12:01:10 +0000
Files and hashes: 1: HXMlv9NxuKboyUtKNMBCZQbSjW0.roa (hash: mL85Iwg8ADnZv62S9C7eQgo7c8UTYuO4j6CsY6zppGQ=)
2: NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl (hash: 69xyLWQzCHgO3E61NP7EblK9EH36Tr4dzzDN8NUzJ7w=)
3: eJTJ2xXloI9cYA2PdEb7QzgzZMI.roa (hash: pJvyPt1aoxPTKu/5G35raZf6vtLPUO+Laz/ssfLJWrA=)
4: nyGwWtmUUenCuiNvi2rme3JvAnM.roa (hash: mv2iRNCUpphbjEmFj2ZluXSrRNCmkDp7k1nJS6ve48g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:50:ab:2f:87:a0:f5:60:c1:3f:15:19:d2:89:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346
Validity
Not Before: Oct 19 12:01:10 2025 GMT
Not After : Oct 20 12:01:10 2025 GMT
Subject: CN=ce4ed5e60dfafbd1483f14ba7177b89b3df60577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a7:8b:ad:04:7c:5e:16:22:3b:5c:dc:32:fc:
66:df:0b:49:89:4e:ee:b4:a3:2e:57:e6:4c:99:28:
bd:68:93:9d:5d:4f:92:f9:8f:e5:eb:3f:32:83:3d:
76:c0:46:6c:f6:c0:18:ff:2a:54:fd:77:6a:13:61:
87:89:b1:4a:1b:b6:49:b5:70:83:23:22:a6:08:76:
cb:df:3c:6b:be:95:7f:8d:5a:7e:1a:b7:ae:17:78:
ea:cf:3a:cf:fd:02:26:d6:72:8f:56:50:77:c3:6a:
51:07:6f:94:79:e4:f6:e8:da:d7:b7:e2:1d:de:9f:
ef:fa:bd:9c:6c:70:17:4b:c7:17:ed:35:1f:7f:4a:
7c:ac:0b:48:e5:6e:a2:ea:79:8f:9e:21:a5:82:ab:
a8:c0:f0:6c:4d:ad:19:e1:fd:09:f2:1e:1e:61:d6:
c6:88:b6:99:76:09:59:98:63:a3:10:11:64:42:13:
88:c4:a9:01:ab:7c:0d:e8:56:d7:f9:5d:c2:8f:41:
e0:81:cf:04:5c:00:16:aa:80:e5:bc:03:18:03:4e:
bc:43:6a:5f:20:3e:6b:14:4d:7d:9f:a6:52:5d:57:
fd:25:37:95:71:2f:e1:e2:68:83:88:b5:f1:37:d5:
e1:14:8d:45:10:73:7c:c0:8f:de:ca:fe:48:44:37:
0b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4E:D5:E6:0D:FA:FB:D1:48:3F:14:BA:71:77:B8:9B:3D:F6:05:77
X509v3 Authority Key Identifier:
keyid:34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:8e:4e:6e:e9:ea:55:d2:52:45:6f:7a:3f:30:cf:d4:5e:f1:
94:aa:6a:6b:fc:18:4c:1a:c1:80:a5:8d:6f:85:1c:cd:c0:20:
9e:a6:88:ac:d3:ab:67:3a:8d:92:cd:7c:24:2f:54:56:7a:8a:
28:c2:fc:2f:13:1b:83:cf:5c:9a:d9:cf:7a:6e:d1:66:17:ad:
50:73:46:73:18:78:2f:9f:fb:d5:7d:d6:74:c3:52:ea:70:3d:
59:f2:d3:1f:c6:d1:d5:7b:a8:6c:d2:db:3f:ea:72:73:7d:8c:
7b:fe:87:61:3e:4a:02:6c:10:41:9f:02:0e:a7:cb:9c:9c:ee:
49:66:ad:36:b8:f6:27:b9:aa:ac:8a:68:a0:ab:87:a3:e6:e6:
cc:58:71:dc:9a:aa:aa:9e:2a:17:b7:68:16:77:a0:c9:8a:fc:
9e:f4:7a:19:a3:10:c6:c7:85:13:0d:c4:0a:a4:2a:26:54:ce:
0b:2d:c8:2d:6f:1b:b6:51:e3:f3:c2:3a:3c:eb:3f:f9:fb:c9:
1f:bb:61:58:0c:33:9e:6d:a1:ec:02:e5:0e:2c:dd:27:50:5d:
f0:0b:70:e6:07:f1:5a:74:78:75:d4:6a:a6:36:ad:93:d3:58:
4c:52:a2:56:04:fc:d0:5f:25:0b:09:2a:cb:81:cf:b0:3d:ad:
84:c3:4a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:55 2025 by rpki-client