Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
File: NpgLSGOkwPwQnpM6n494kuQmIvg.mft (raw, json)
Hash identifier: jQY7G3dND8hnKbtwjFrNgKVhmx5fWwkwL0Fgw55ERQ0=
Subject key identifier: E5:53:B6:1E:03:CC:B5:2E:D8:84:82:DF:AD:79:51:FD:78:4D:EF:92
Authority key identifier: 36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
Certificate issuer: /CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Certificate serial: 0196BFDC7DDFF968D077F26303B132D61CAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 15:00:20 +0000
Manifest this update: Sun 11 May 2025 15:00:20 +0000
Manifest next update: Mon 12 May 2025 15:00:20 +0000
Files and hashes: 1: LuqTaLAIb1FyHM5wmPs1YLA-1NQ.roa (hash: qV1VopZp94X/gYFO14Dpzbo5vZkWKbjRJxqhcQk1sTY=)
2: NpgLSGOkwPwQnpM6n494kuQmIvg.crl (hash: rqPcewETuO/JUOdcOVDoUYBZkbbxuVpYSNyWXykGYH4=)
3: kBYkIoAwOTb1jZVoI-2IjKFmw9s.roa (hash: XJGvgivLL6yw0361zmrsd505aLJW4OPiGkt/w/pz35g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dc:7d:df:f9:68:d0:77:f2:63:03:b1:32:d6:1c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Validity
Not Before: May 11 15:00:20 2025 GMT
Not After : May 12 15:00:20 2025 GMT
Subject: CN=e553b61e03ccb52ed88482dfad7951fd784def92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:99:dd:ae:fd:7a:0b:eb:44:62:bd:c5:a1:f3:
c7:a0:95:8e:54:f9:22:b7:bd:af:64:03:70:ab:86:
53:cc:cc:b9:6c:6a:ec:36:27:be:89:cb:da:4e:f5:
d1:ae:69:21:3f:11:14:9a:d1:11:31:30:8e:80:41:
b6:7e:d8:e7:e4:99:bf:96:5c:97:33:e6:cc:b3:07:
14:62:aa:44:87:77:0a:19:64:4e:54:26:f6:ec:71:
57:d5:c8:2c:2e:07:6a:4c:34:95:64:5c:14:73:73:
5a:e3:c4:2d:2d:5d:32:dd:73:cc:bd:3b:9c:63:3e:
80:29:23:35:5e:72:5c:96:09:e6:9b:23:16:fd:29:
0a:8c:ca:d1:e1:5d:02:22:9b:04:40:f5:63:5e:5a:
d2:01:2d:5c:7e:a5:dc:cc:f6:c4:59:85:90:d2:e3:
44:da:15:86:14:89:bd:99:a3:1c:09:f5:d2:c9:6d:
70:c7:4f:9a:a6:47:12:c7:fa:4f:1e:e3:4c:ef:0e:
eb:2c:af:78:af:1f:29:01:5d:77:ac:9b:b3:ad:69:
1c:24:83:62:71:6e:e0:da:bc:13:70:5b:d6:4f:96:
54:99:b6:5e:de:ec:28:66:18:b5:8b:1f:99:11:9b:
0f:de:75:c7:1b:15:65:82:d3:d5:c7:71:3b:f7:6e:
58:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:53:B6:1E:03:CC:B5:2E:D8:84:82:DF:AD:79:51:FD:78:4D:EF:92
X509v3 Authority Key Identifier:
keyid:36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b1:f4:b1:ed:c1:93:70:01:b8:1f:58:2d:bf:34:6b:1f:22:
97:d4:55:6d:74:08:85:39:dc:c4:9c:85:3c:76:4d:64:e6:51:
48:78:cf:9f:b1:79:66:93:c1:8c:3e:ba:3f:3e:78:4e:6e:ba:
19:ba:9f:fb:24:ff:c1:21:df:8d:0c:33:ff:29:69:8d:82:53:
36:55:c3:c8:83:46:aa:be:f0:5d:98:10:d5:ab:fb:0c:bb:65:
6c:a8:8f:a1:b2:45:fe:a6:3e:f3:ac:ba:75:a2:21:eb:1e:de:
3d:d7:a7:96:fb:84:d7:d9:73:f0:7c:63:f0:55:03:ab:93:a8:
90:5f:a7:51:c3:81:f4:f7:a8:e6:84:50:df:d8:8b:aa:5e:1e:
e2:c4:c8:f0:30:72:46:89:c3:06:11:58:0c:57:51:3a:7d:60:
e6:fd:08:45:9c:06:06:9b:3a:18:3b:47:87:6c:54:10:46:8a:
43:c1:83:7f:23:c5:ab:5e:f1:02:f9:8b:82:a5:84:2a:4d:97:
9b:65:14:91:ed:04:08:e1:8f:c6:ff:c2:43:66:75:51:cc:24:
42:0a:85:2f:9f:79:63:12:49:28:84:d7:ee:09:db:c0:c5:ed:
bb:89:e9:f0:b4:55:ac:fc:44:c3:54:df:0b:51:44:63:2f:5d:
de:ce:bd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:07:09 2025 by rpki-client