Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
File: npWhGdnBpdbj8-Ifb6hj2HouSw0.mft (raw, json)
Hash identifier: c5Kwqh2KmvQjeIrQE8pTDa5IEQVC5OVEQqlUDxVtHIE=
Subject key identifier: BF:B6:0A:67:8F:64:DC:F4:27:AA:4F:9E:94:B8:6F:58:F1:2A:9B:6C
Authority key identifier: 9E:95:A1:19:D9:C1:A5:D6:E3:F3:E2:1F:6F:A8:63:D8:7A:2E:4B:0D
Certificate issuer: /CN=9e95a119d9c1a5d6e3f3e21f6fa863d87a2e4b0d
Certificate serial: 0199FD340ECF6BB5FD42AC6C5072D4BA0151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
Manifest number: 12E4
Signing time: Sun 19 Oct 2025 16:01:11 +0000
Manifest this update: Sun 19 Oct 2025 16:01:11 +0000
Manifest next update: Mon 20 Oct 2025 16:01:11 +0000
Files and hashes: 1: lLvMNzQqc08rBnqIaGJCkVSk_Lc.roa (hash: C4csVeC5+fBJXsccVAtKbPNOr2pnHhs7Nw+vsJd23mE=)
2: npWhGdnBpdbj8-Ifb6hj2HouSw0.crl (hash: vSm9xVWKBCQjemsOk8ZMhv+BbMKxuMWOZzSRGU0GaUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:0e:cf:6b:b5:fd:42:ac:6c:50:72:d4:ba:01:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a119d9c1a5d6e3f3e21f6fa863d87a2e4b0d
Validity
Not Before: Oct 19 16:01:11 2025 GMT
Not After : Oct 20 16:01:11 2025 GMT
Subject: CN=bfb60a678f64dcf427aa4f9e94b86f58f12a9b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:31:3b:fb:5c:9d:da:c1:ef:33:16:6f:e5:87:
aa:9b:da:e0:1a:79:bf:44:16:c1:c4:47:a6:ba:49:
08:44:fa:13:b8:d7:b2:b2:19:62:6a:3b:ec:f2:97:
0e:c0:0b:99:7b:de:6e:49:83:b4:35:ff:28:71:a4:
77:c6:38:ec:8d:4d:8d:cb:01:9d:26:46:bb:47:a9:
6b:ce:38:fe:fb:67:0e:a5:33:9e:70:1c:b9:35:c0:
8a:70:49:db:01:30:93:e4:6d:5d:f9:43:fe:c2:b5:
ef:14:13:f7:e9:a8:e6:7a:f4:82:d5:bd:5c:10:2c:
1b:97:a5:c0:c3:a4:8c:b1:c0:44:6a:25:04:a8:2f:
a9:32:51:5f:a5:8f:48:4c:c8:5e:06:de:fd:b3:55:
68:50:93:cd:ea:ac:41:e4:74:28:4b:26:be:e2:36:
06:29:3a:a4:73:46:fe:dd:3a:f8:db:79:54:45:78:
a1:1b:f3:66:a3:0f:dd:6b:38:e7:35:15:c0:1c:f3:
55:eb:0e:b0:4c:2c:94:db:05:5e:2e:c7:a6:49:bf:
e0:83:e4:b1:25:c9:38:da:c6:2d:cd:75:40:c2:a9:
5a:91:1b:0e:41:73:99:c9:ea:db:4a:0d:18:ba:07:
b7:1c:25:08:30:51:f2:c7:40:6a:44:5c:f0:ea:4c:
db:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B6:0A:67:8F:64:DC:F4:27:AA:4F:9E:94:B8:6F:58:F1:2A:9B:6C
X509v3 Authority Key Identifier:
keyid:9E:95:A1:19:D9:C1:A5:D6:E3:F3:E2:1F:6F:A8:63:D8:7A:2E:4B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:8f:67:f8:5c:25:f4:15:4f:8b:23:d5:db:80:da:ed:32:43:
36:f3:22:30:eb:03:24:cf:b3:54:00:c3:1a:ad:72:cd:50:58:
00:4c:9a:8b:91:33:bf:9a:82:bf:c2:b6:5c:8f:0d:6b:f3:ad:
b4:7b:75:a6:9c:bf:ca:c9:65:71:81:e0:bd:58:0d:2b:21:72:
d8:65:c6:6f:1c:56:c9:dc:9e:13:f9:65:36:3d:5c:2a:ef:f5:
59:32:5f:47:a3:5c:ff:8b:a1:9c:eb:8f:e3:85:32:89:2f:b4:
35:fa:49:6f:3f:e5:4d:23:6d:83:c3:50:f0:58:4a:82:a7:16:
a2:47:f0:a2:ed:23:f7:20:0e:8a:02:d2:5c:1d:6d:49:ae:2a:
49:f8:79:ea:ed:3b:e5:34:08:cf:a2:a8:48:5a:ce:c9:6a:52:
25:1e:03:3e:85:78:b7:5f:f1:55:9a:b9:91:b8:25:83:63:a2:
8f:b4:3a:07:1e:59:bf:e2:41:0d:e1:0f:e5:cc:10:0f:34:f8:
cd:5d:5c:af:28:5f:b1:5c:0f:f7:37:85:22:b3:36:84:4d:ef:
58:d3:f8:3d:c6:8d:b6:f0:70:70:a0:e4:61:b7:43:6a:20:cd:
ab:2a:31:32:68:fb:99:f1:39:bb:37:7b:0f:27:4d:c0:cc:b9:
8f:8c:6d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:00:50 2025 by rpki-client