Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft
File: np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft (raw, json)
Hash identifier: /0yxRagijwKK834oZpdqPQbh4GFjFzucAI/3QZoufVE=
Subject key identifier: 73:5D:FB:BD:4B:B5:A7:62:DA:75:46:7D:A7:01:A6:BA:2A:26:B5:BC
Authority key identifier: 9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54
Certificate issuer: /CN=9e9e6887ea7572a6411306c87b0cc089397a6354
Certificate serial: 0199FC58950EE62B396E2452A16B3F6414DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft
Manifest number: 1298
Signing time: Sun 19 Oct 2025 12:01:27 +0000
Manifest this update: Sun 19 Oct 2025 12:01:27 +0000
Manifest next update: Mon 20 Oct 2025 12:01:27 +0000
Files and hashes: 1: YJ50MQnvVhHtjWvLvxqRLtfcQ7A.roa (hash: dYfbwzgf/ynRL4xNJih6ua1qw+Sw/CexFK1ACNOG+tc=)
2: np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl (hash: 3bpmRUdSoiGR5ka6dqq7HYFBItZ1pbUGMfSUpJZbLzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:95:0e:e6:2b:39:6e:24:52:a1:6b:3f:64:14:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e9e6887ea7572a6411306c87b0cc089397a6354
Validity
Not Before: Oct 19 12:01:27 2025 GMT
Not After : Oct 20 12:01:27 2025 GMT
Subject: CN=735dfbbd4bb5a762da75467da701a6ba2a26b5bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:11:1c:ad:70:e0:6d:58:82:74:ae:67:bd:96:
5f:22:9d:c6:6b:61:b5:2c:4b:a2:d6:17:f0:4d:4c:
f0:df:7f:3f:27:77:07:8f:7f:42:5c:4f:8c:88:00:
cf:d5:7d:15:35:19:22:33:b2:c4:1a:98:cf:8f:1d:
09:9d:2f:3f:95:e0:e8:af:f1:dd:27:af:87:8f:87:
c2:8f:03:45:59:13:6d:ad:57:20:18:56:95:ff:bf:
92:52:62:d6:ce:fc:19:4a:84:c8:c7:54:17:26:aa:
22:0a:85:23:4c:a2:bc:2e:5e:f3:f2:62:d5:59:de:
48:62:2a:4f:6e:46:2a:0d:06:19:55:9f:32:55:e6:
1b:e3:55:e6:1e:20:e5:36:79:b4:ba:6a:9a:97:75:
e4:53:a0:c3:a9:be:2d:9e:c9:8b:ba:9d:fa:fa:2f:
ef:46:60:84:3a:14:b3:6f:d0:7d:9b:e6:55:6a:5e:
38:03:7c:a1:a1:51:24:80:e1:d8:fd:4c:a7:19:61:
5b:de:c8:2b:02:49:61:00:6f:77:f6:b4:cd:9d:ee:
51:f3:c9:6c:e4:49:e9:06:f1:31:bf:a8:f6:70:10:
aa:6c:4f:23:64:b8:2d:43:8c:10:f1:61:d8:95:2a:
ca:c7:45:44:c6:0f:73:68:a7:67:c4:9a:5a:12:f6:
a8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5D:FB:BD:4B:B5:A7:62:DA:75:46:7D:A7:01:A6:BA:2A:26:B5:BC
X509v3 Authority Key Identifier:
keyid:9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:b5:92:b6:52:7d:5d:15:e8:85:35:20:eb:fe:0f:b5:d7:2b:
ed:75:f4:86:36:59:f8:90:0f:45:6d:4a:b6:eb:74:b6:2c:af:
ed:3c:0d:1b:1e:8a:6b:ba:1c:0c:d9:d4:e6:0b:3d:e6:f3:15:
1f:c2:36:3e:af:aa:d4:72:76:7a:a6:93:d1:09:39:a8:32:fc:
e0:3f:32:41:06:f6:81:f0:33:ee:6d:92:7f:7d:71:1c:48:2d:
1c:2e:3f:fd:78:88:aa:38:cc:9a:10:62:3c:e7:89:5f:24:95:
83:80:37:1f:5a:64:ba:26:18:7f:ae:fb:01:22:79:cb:b3:9d:
14:f7:d5:7c:61:63:fc:9f:28:2e:b7:3c:41:63:80:08:44:3a:
34:69:77:e3:8b:33:60:97:d6:88:64:d0:83:fa:34:17:71:31:
40:a0:9b:6a:14:b5:50:19:cd:5f:92:81:34:fb:a9:43:1e:57:
67:e5:d1:be:a0:81:fe:d0:86:77:27:e9:9b:8e:bd:71:0d:5c:
f2:6e:c2:73:36:63:de:f8:38:27:b9:bb:19:6c:86:b2:82:0e:
41:3f:77:34:14:e4:8d:37:bc:93:f6:33:bb:5d:8b:9f:ae:40:
a2:5f:12:77:65:51:d2:bd:ea:15:7c:2b:cb:84:8e:cf:62:ff:
29:b6:a9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:45 2025 by rpki-client