Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
File: NLypT2th4QEA3Dpxhv-j-bAMad0.mft (raw, json)
Hash identifier: LAz+G+zbRW3o42RYMylrz5C+UotNYwKWqPwLBTd1jB8=
Subject key identifier: 73:2F:A9:D8:BC:87:EE:78:A1:B1:F9:F4:61:53:B9:F9:F1:FF:7B:CD
Authority key identifier: 34:BC:A9:4F:6B:61:E1:01:00:DC:3A:71:86:FF:A3:F9:B0:0C:69:DD
Certificate issuer: /CN=34bca94f6b61e10100dc3a7186ffa3f9b00c69dd
Certificate serial: 0199FC589657A3CD5DF55CA986F8F643EE66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
Manifest number: 1374
Signing time: Sun 19 Oct 2025 12:01:28 +0000
Manifest this update: Sun 19 Oct 2025 12:01:28 +0000
Manifest next update: Mon 20 Oct 2025 12:01:28 +0000
Files and hashes: 1: HIoC707cWv-kl8mp8yIuvONoh0w.roa (hash: EWzRp4vUO24ulN2ZRCrdnUVFpJrZ9XxymUQDpbogTtA=)
2: J2yd4O1iL2KCY7LAQ3uRto73WwQ.roa (hash: FnyzxFKFKQYZ99+AO0ucXUQHZHZrzRIvFySr51HyBug=)
3: NLypT2th4QEA3Dpxhv-j-bAMad0.crl (hash: WJ8Ujb6yJw+2Sfwm3+OfYIYCm4WHLoQaGg9fqxVaaRk=)
4: m01g-CBC5mmua20tUAtJoqGt3ww.roa (hash: AY/opL59pPgH00+bWPEKHAE0TYN5GbYk0s+CgO2aV3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:96:57:a3:cd:5d:f5:5c:a9:86:f8:f6:43:ee:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34bca94f6b61e10100dc3a7186ffa3f9b00c69dd
Validity
Not Before: Oct 19 12:01:28 2025 GMT
Not After : Oct 20 12:01:28 2025 GMT
Subject: CN=732fa9d8bc87ee78a1b1f9f46153b9f9f1ff7bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cd:8a:46:ad:7e:6c:05:be:3a:a9:0e:8f:32:
42:71:65:f4:18:12:6b:71:88:cd:20:7c:79:f1:69:
aa:fb:06:e9:42:4e:c1:00:b9:fc:08:f6:76:0c:7e:
d8:13:87:fc:4e:36:dd:2e:19:fa:fc:9a:8e:e4:00:
14:2f:c5:44:a5:c3:74:71:45:74:ad:f3:75:c5:b0:
54:f6:ff:79:9e:85:2e:d5:83:27:a9:83:a9:33:7c:
50:c3:b8:e1:69:da:84:32:81:b9:06:7e:01:aa:9f:
d3:97:d1:7c:1a:96:66:21:1d:ca:04:b5:6e:90:5a:
94:ee:17:d1:be:f2:31:59:4c:c0:7a:69:b3:28:f1:
39:94:9a:00:34:62:3c:3e:fe:61:ca:1f:10:06:e0:
27:5b:9e:53:57:a6:13:26:eb:90:06:41:32:4b:7c:
01:cb:63:40:5a:d2:32:1a:c3:fc:e4:4d:20:36:84:
71:56:1c:c9:60:29:92:b6:e4:ed:2f:f4:51:75:ad:
7f:f4:5e:06:df:4f:49:00:b8:20:29:6a:c6:8d:d1:
da:7f:fd:69:1f:8c:05:f0:eb:e5:d7:22:51:40:7e:
b0:6f:a1:b2:d1:99:5a:68:4e:74:0f:d3:8d:68:59:
b6:2b:4e:0a:c1:19:e6:29:ca:20:dc:f9:42:4d:8d:
b7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:2F:A9:D8:BC:87:EE:78:A1:B1:F9:F4:61:53:B9:F9:F1:FF:7B:CD
X509v3 Authority Key Identifier:
keyid:34:BC:A9:4F:6B:61:E1:01:00:DC:3A:71:86:FF:A3:F9:B0:0C:69:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c9:73:93:c1:49:c4:8f:31:90:a4:57:ed:e5:6a:ac:19:b6:
a9:d5:43:4b:65:3c:7a:20:2d:e0:91:8a:a4:89:57:6e:cd:39:
67:ca:e2:b0:63:60:52:26:af:ae:25:96:98:dc:12:fc:cc:2c:
c7:1b:3d:63:89:bb:09:a5:6e:12:1c:73:70:18:c2:5e:88:77:
be:41:98:94:64:ba:6b:41:ad:75:7f:30:27:d8:bb:fa:8b:0d:
70:02:97:22:13:cd:54:88:d9:d4:f0:21:a0:5c:99:70:f4:bd:
62:9b:3a:7a:c9:24:e4:47:7d:47:25:33:f7:ad:d2:c8:cf:01:
12:e9:58:4d:37:29:33:b1:2a:5b:12:76:75:4c:ed:b5:9a:68:
99:15:c3:52:50:da:89:1f:26:41:c3:db:84:e0:43:3b:e4:ca:
75:49:15:4c:1f:48:4b:09:dc:7f:ac:88:26:c4:db:a3:c1:f1:
ae:c2:4e:8a:46:fd:27:cd:b4:86:f9:fd:40:39:bf:af:d4:aa:
da:7d:05:fe:ac:24:26:47:6a:0b:38:1f:0a:4a:f0:9f:e6:46:
eb:3d:6a:d3:8b:95:9a:45:7f:43:ae:7d:d2:0e:48:cd:aa:8d:
d5:af:58:71:b2:05:ba:56:15:1c:b2:82:cd:36:1f:80:1e:27:
27:bf:f7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:16 2025 by rpki-client