Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
File: NpgLSGOkwPwQnpM6n494kuQmIvg.mft (raw, json)
Hash identifier: myVUrJLNu/UzK3NtFb0DveR/wBlQnkMc8NcsAjjaL7I=
Subject key identifier: 6B:E4:7C:28:E0:3C:B3:DE:DD:84:A4:F4:FB:9B:95:5E:14:1C:8B:AA
Authority key identifier: 36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
Certificate issuer: /CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Certificate serial: 0199FC5866C0D69364C34F835796BE813E70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 12:01:15 +0000
Manifest this update: Sun 19 Oct 2025 12:01:15 +0000
Manifest next update: Mon 20 Oct 2025 12:01:15 +0000
Files and hashes: 1: LuqTaLAIb1FyHM5wmPs1YLA-1NQ.roa (hash: qV1VopZp94X/gYFO14Dpzbo5vZkWKbjRJxqhcQk1sTY=)
2: NpgLSGOkwPwQnpM6n494kuQmIvg.crl (hash: zRKo+ADBf3gvonwqGnmnEWNDCAC94fpPLQBiggpXOEc=)
3: kBYkIoAwOTb1jZVoI-2IjKFmw9s.roa (hash: XJGvgivLL6yw0361zmrsd505aLJW4OPiGkt/w/pz35g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:66:c0:d6:93:64:c3:4f:83:57:96:be:81:3e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Validity
Not Before: Oct 19 12:01:15 2025 GMT
Not After : Oct 20 12:01:15 2025 GMT
Subject: CN=6be47c28e03cb3dedd84a4f4fb9b955e141c8baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:27:80:86:d1:39:61:50:28:09:6b:d4:49:72:
1e:4b:83:d6:d0:cb:26:d4:60:d0:bd:4c:1e:7b:d3:
5f:64:aa:70:43:1f:69:73:38:5f:c9:88:2a:4c:7c:
09:eb:ef:27:2d:fa:98:62:03:eb:28:0a:a9:4a:92:
da:45:a1:46:9e:5e:63:ea:85:02:e6:a1:cc:45:91:
3f:ec:ef:9d:79:e9:af:f8:80:c6:53:28:e9:54:e9:
29:e8:72:06:a2:ed:2a:8b:59:22:89:6d:b7:ce:85:
a5:b4:32:66:64:19:0a:1a:f5:3b:af:bb:19:fe:11:
e2:ce:de:15:8d:f8:28:18:07:65:15:59:90:f3:e5:
3e:0f:a0:8f:39:98:70:b4:33:be:f6:bf:d2:86:fd:
94:00:2b:55:4c:69:8e:80:11:7e:71:27:3e:bc:e3:
28:ec:b9:cc:8f:91:a4:e5:73:28:cf:06:73:43:d0:
7d:0d:e1:34:2a:99:10:04:05:4a:f5:c4:ee:2f:e5:
f1:d0:2d:4d:40:ba:d1:79:b9:17:c1:3f:66:97:75:
56:4d:e0:96:22:88:63:cf:da:15:2c:d3:25:ae:fc:
99:6e:1e:4a:cf:3c:61:e8:4e:1e:69:16:31:2d:52:
e7:21:d6:e4:6e:a6:d1:14:76:2f:25:c6:52:ae:c2:
7f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E4:7C:28:E0:3C:B3:DE:DD:84:A4:F4:FB:9B:95:5E:14:1C:8B:AA
X509v3 Authority Key Identifier:
keyid:36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:f8:0f:59:2e:fe:57:6c:9c:b2:1c:ab:9b:5c:82:fa:19:7f:
da:8c:2e:33:d8:d5:88:1d:3a:27:9c:5c:4e:11:58:db:50:cc:
0b:a6:1f:8a:b7:ac:50:db:25:1d:80:11:a2:f6:9e:3c:27:f8:
80:da:71:0a:1e:4e:c5:12:64:d6:59:b7:c8:22:f0:b7:49:80:
e0:df:96:e7:5f:44:bf:93:f2:59:d0:8a:26:4c:e8:df:f1:a5:
20:5a:38:c9:76:c1:12:1f:d7:ae:5e:e2:fe:d1:2f:ee:30:ab:
84:b9:09:b8:a2:fe:d3:4e:59:41:20:ea:42:3f:c0:b6:5c:82:
eb:83:8d:57:ec:de:f6:aa:e3:10:4a:ef:4c:55:b9:c5:35:d8:
5e:06:46:24:e9:7f:03:a1:db:48:65:ab:02:a7:6f:9f:7c:f3:
0c:97:d2:3b:d5:94:eb:fb:c2:df:dd:bb:f0:40:4b:12:55:a8:
47:39:b0:82:61:25:e0:33:e4:25:4e:76:1a:45:a7:ed:a7:a8:
33:d2:1d:57:ef:01:9b:f5:34:b8:84:59:b5:b3:84:05:eb:b8:
c7:20:9a:24:d3:f6:f1:09:e5:c5:2c:cb:9c:86:fa:33:b2:0b:
34:5e:8a:e7:5f:a2:b7:c9:84:95:59:93:48:9b:c1:02:5f:a1:
7f:09:a8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:45 2025 by rpki-client