Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
File: NpgLSGOkwPwQnpM6n494kuQmIvg.mft (raw, json)
Hash identifier: shqA2L9xsLCSuGozXuPgEiRl2DrG4q5MHuKtUrFncDA=
Subject key identifier: FC:C0:09:C5:D7:81:15:25:27:05:6C:D7:B1:0A:B2:87:3C:64:42:10
Authority key identifier: 36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
Certificate issuer: /CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Certificate serial: 0198D4E0AA273958003E98FA3384A055994B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:02:29 +0000
Manifest this update: Sat 23 Aug 2025 03:02:29 +0000
Manifest next update: Sun 24 Aug 2025 03:02:29 +0000
Files and hashes: 1: LuqTaLAIb1FyHM5wmPs1YLA-1NQ.roa (hash: qV1VopZp94X/gYFO14Dpzbo5vZkWKbjRJxqhcQk1sTY=)
2: NpgLSGOkwPwQnpM6n494kuQmIvg.crl (hash: VtOZ6bRYSQPte6rCuaROpuXWVCcLxN543Q0CzlxDXVI=)
3: kBYkIoAwOTb1jZVoI-2IjKFmw9s.roa (hash: XJGvgivLL6yw0361zmrsd505aLJW4OPiGkt/w/pz35g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:aa:27:39:58:00:3e:98:fa:33:84:a0:55:99:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Validity
Not Before: Aug 23 03:02:29 2025 GMT
Not After : Aug 24 03:02:29 2025 GMT
Subject: CN=fcc009c5d781152527056cd7b10ab2873c644210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8f:ae:c3:3e:38:b9:45:b0:51:81:07:8f:4c:
f5:1c:e7:da:82:d8:b4:2e:38:11:8b:8b:4f:16:0b:
98:0f:17:bc:4c:d8:a7:4e:68:79:6c:1d:f3:0d:94:
fe:e2:82:d3:1a:60:1e:ae:aa:38:4f:93:a0:10:e8:
1a:81:09:6b:9c:dc:2b:ea:a3:19:b3:33:e8:86:0d:
83:7e:82:03:6f:09:2b:c2:bb:e7:4d:ab:99:59:22:
19:d4:19:2a:ff:fd:95:b6:18:9e:b7:c0:d4:06:c3:
39:3a:b7:af:b5:aa:4f:15:36:61:6c:b5:e8:2f:f4:
22:36:1b:d1:88:cd:d7:a6:97:c2:c8:ba:61:80:a8:
fc:ad:3a:e6:ef:b7:fe:56:4f:84:c7:cc:33:b3:5d:
8b:6c:d5:5c:8f:de:07:de:38:8f:96:78:f3:1f:21:
16:21:c9:4d:7f:d2:63:ba:ec:b1:33:49:5a:5d:63:
e4:66:2f:fa:57:46:16:e8:06:0b:af:94:8e:ba:10:
80:a8:12:2c:0e:90:56:96:f7:e4:d7:b1:04:13:66:
4a:7c:e0:c2:ca:d7:e7:ae:5d:b5:21:6c:07:19:b2:
a5:59:5f:b8:03:36:40:7c:46:41:ec:50:5d:63:00:
a1:b5:dc:7f:ca:f4:f2:73:11:70:ce:f3:c6:f7:4a:
f1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C0:09:C5:D7:81:15:25:27:05:6C:D7:B1:0A:B2:87:3C:64:42:10
X509v3 Authority Key Identifier:
keyid:36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:21:95:37:de:ae:7c:80:6c:4e:86:3f:55:1b:a6:f7:c6:84:
04:92:ae:db:56:4d:2c:a9:a9:84:39:2e:4a:4c:7b:19:10:df:
1d:0d:ad:b7:f1:99:70:19:ba:fd:f8:38:81:b8:d8:86:1b:ab:
4e:6d:fd:7c:3e:2d:f4:10:6f:aa:4d:ba:2d:fe:9e:a9:13:18:
7a:d8:69:a8:fe:21:54:b8:fa:85:57:7c:ea:cd:5d:67:0d:0b:
cb:66:18:68:48:30:d7:1c:9d:20:9c:71:12:e9:ca:cc:ff:be:
6e:74:cc:ef:e7:c2:e1:14:46:f7:03:64:a4:4f:23:1d:71:0e:
23:8f:93:ff:e9:99:b0:21:f6:3e:5a:d5:e0:26:10:fd:f0:11:
14:1c:5a:6b:a7:e5:6c:ea:d8:82:83:59:a8:1d:b4:bd:37:1b:
68:55:c0:a5:3a:00:a3:42:21:25:80:1e:8b:40:d8:28:9f:4b:
2c:7d:d1:8d:3e:33:3b:44:a2:a6:d3:44:5e:bf:16:e0:4a:42:
f0:cf:2b:81:36:6b:2b:37:4b:05:36:d8:5c:5b:08:fd:bf:0b:
88:78:df:49:a1:e1:ed:a5:13:9d:29:1c:a7:24:0d:65:59:7c:
e4:cd:e9:f6:7a:2c:32:97:97:d7:02:25:2b:8f:a7:be:40:af:
fd:fd:14:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:50 2025 by rpki-client