Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
File: npWhGdnBpdbj8-Ifb6hj2HouSw0.mft (raw, json)
Hash identifier: MdUbCfqAl8f5FC38fyILuztzK7Z8X0+DYRkwPBMK2DQ=
Subject key identifier: 8D:1A:A2:19:7D:8B:BC:0D:DB:1C:5E:36:0B:D6:47:21:85:F6:08:10
Authority key identifier: 9E:95:A1:19:D9:C1:A5:D6:E3:F3:E2:1F:6F:A8:63:D8:7A:2E:4B:0D
Certificate issuer: /CN=9e95a119d9c1a5d6e3f3e21f6fa863d87a2e4b0d
Certificate serial: 0197CA5E4E1370C3BA52FFCF3B7A5FF22C70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
Manifest number: 11C0
Signing time: Wed 02 Jul 2025 09:01:07 +0000
Manifest this update: Wed 02 Jul 2025 09:01:07 +0000
Manifest next update: Thu 03 Jul 2025 09:01:07 +0000
Files and hashes: 1: NZjfqu9x3wDiLJo6GWe02XnKyKc.roa (hash: qGIOcPlEtKKS51xxkiaAUzuK860Uixd+cejLEfWAaRA=)
2: npWhGdnBpdbj8-Ifb6hj2HouSw0.crl (hash: eNPwGqNf4hjaUuCP+Yx0rUUs6kK9o6d3HhT+5taelqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 09:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:5e:4e:13:70:c3:ba:52:ff:cf:3b:7a:5f:f2:2c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a119d9c1a5d6e3f3e21f6fa863d87a2e4b0d
Validity
Not Before: Jul 2 09:01:07 2025 GMT
Not After : Jul 3 09:01:07 2025 GMT
Subject: CN=8d1aa2197d8bbc0ddb1c5e360bd6472185f60810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6c:0e:e4:bd:da:37:8f:5a:07:bb:f9:98:0a:
01:ab:0c:8e:01:d3:ad:06:4d:73:de:04:65:20:6f:
d9:24:5b:fa:a9:e8:07:aa:5a:a6:cf:09:b1:53:78:
92:30:15:0a:a1:59:92:19:b0:b1:a6:63:ee:0a:fd:
f8:e5:87:c9:a3:7a:92:e1:ab:92:f3:f5:43:9b:aa:
fb:c1:6b:32:2e:bb:3d:52:8f:74:7e:70:d4:b7:55:
76:f7:84:bb:97:8a:64:e6:a7:dc:38:99:ea:13:72:
1c:72:47:2b:d6:8b:dc:d4:78:19:59:fc:12:45:08:
da:da:8d:9f:e2:86:c2:e2:1a:41:c5:7c:ec:47:aa:
05:ec:e3:33:2e:d9:12:c7:d2:f8:04:29:d0:ab:84:
24:e5:f5:4e:81:35:d2:c3:04:a8:17:c0:c7:ba:a6:
50:55:b5:05:f0:37:e5:18:a5:b9:a1:de:36:ad:c9:
9c:bf:20:a5:86:78:36:e6:bf:2e:ec:7a:40:d0:66:
63:b7:1d:e4:2c:4a:7a:ba:14:fd:0e:0e:b8:1a:53:
ff:b8:83:75:aa:64:da:d8:c8:56:a7:c7:79:75:df:
9e:e1:e3:ec:12:f5:e8:98:6e:fe:e2:db:b3:c4:26:
4f:66:47:85:43:aa:3a:43:6f:41:ef:68:d2:68:a3:
8f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:1A:A2:19:7D:8B:BC:0D:DB:1C:5E:36:0B:D6:47:21:85:F6:08:10
X509v3 Authority Key Identifier:
keyid:9E:95:A1:19:D9:C1:A5:D6:E3:F3:E2:1F:6F:A8:63:D8:7A:2E:4B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:3e:3a:7b:a2:e5:91:05:5d:14:da:de:e9:7d:d8:0b:e1:49:
30:49:1c:28:12:51:11:67:74:44:2d:5a:1b:4e:ba:10:7f:30:
0c:8f:cc:37:d3:3e:c9:12:59:6c:d8:89:05:d9:c1:82:a3:60:
9a:70:9f:c1:d4:92:ee:50:2d:27:58:74:10:fb:64:9d:ad:08:
05:12:cb:cc:e2:e5:b2:c8:f1:a2:a6:24:e6:97:1c:25:68:d8:
4b:d7:d3:01:50:77:3f:48:c9:6b:17:67:bb:cf:8e:5c:87:52:
23:61:0c:a5:2d:91:32:22:5e:15:88:26:29:ec:d8:ea:2c:10:
14:14:48:ee:30:d9:a5:3f:c3:64:c2:1c:aa:f0:59:20:c0:05:
dc:39:5f:56:3a:4a:70:ff:18:a7:84:c9:ce:b8:50:17:7f:a7:
55:e3:27:f8:ab:a5:27:d5:2d:49:e1:fb:30:bc:6a:77:62:c8:
00:2b:82:a0:eb:30:03:69:92:c5:e0:ab:d7:be:cb:84:10:1d:
9f:91:7f:a1:12:85:b5:94:6c:9f:ee:36:09:86:9e:f0:45:d9:
a4:12:31:9c:6f:4d:73:35:3a:4d:2d:b6:d7:60:c0:35:fd:bd:
3a:91:96:52:0b:69:e9:33:3e:87:08:d1:2b:c1:29:08:e1:56:
68:85:6a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 12:47:47 2025 by rpki-client