Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
File: npTVvz231nNNzxvmItX97i_sO48.mft (raw, json)
Hash identifier: xmM8whTflDqNMOwEgSg5gay/vmF4h1ij3W2srdqOJTo=
Subject key identifier: 77:C5:B6:FA:7F:B8:13:1A:CD:CE:ED:6E:A1:8B:D0:9C:24:06:5C:01
Authority key identifier: 9E:94:D5:BF:3D:B7:D6:73:4D:CF:1B:E6:22:D5:FD:EE:2F:EC:3B:8F
Certificate issuer: /CN=9e94d5bf3db7d6734dcf1be622d5fdee2fec3b8f
Certificate serial: 0199FFC7EED269B5141165DECCF944E088E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
Manifest number: 07A2
Signing time: Mon 20 Oct 2025 04:01:56 +0000
Manifest this update: Mon 20 Oct 2025 04:01:56 +0000
Manifest next update: Tue 21 Oct 2025 04:01:56 +0000
Files and hashes: 1: NixiWYmD-vroRsSm1dMfYuXBZWQ.roa (hash: CO9r6UJIKKxiHIlAzYOgJDFF6Cx5kTVMmonckxBJgDA=)
2: npTVvz231nNNzxvmItX97i_sO48.crl (hash: YoPayMM+J0pptIbzDb2pL5burcyQUKzW8l9k54tsp30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:ee:d2:69:b5:14:11:65:de:cc:f9:44:e0:88:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e94d5bf3db7d6734dcf1be622d5fdee2fec3b8f
Validity
Not Before: Oct 20 04:01:56 2025 GMT
Not After : Oct 21 04:01:56 2025 GMT
Subject: CN=77c5b6fa7fb8131acdceed6ea18bd09c24065c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4f:6c:31:ce:a4:8e:9a:0c:ab:94:2e:3a:ea:
b7:b5:49:4b:b5:2e:2c:77:e7:b5:e3:e1:bc:38:5b:
86:32:93:44:0f:f4:83:7f:85:06:75:f4:56:52:13:
ee:76:3b:d9:5c:46:05:3d:08:57:c6:71:86:53:6a:
5f:b4:f6:de:5d:6b:22:5e:e4:6e:e7:d2:71:e6:f8:
53:a7:47:8f:6f:67:2b:d9:3d:cd:5c:e8:31:03:74:
ea:09:46:c8:8d:12:b8:a9:e2:4c:a6:f1:f7:21:b6:
2d:00:d0:76:a6:5f:80:97:e2:9b:18:38:4b:73:d8:
80:d4:9b:ef:6f:be:2a:12:ae:7a:fa:f2:48:df:a2:
f1:23:e7:d5:6d:bc:de:d5:b8:c9:a2:89:45:30:86:
e8:71:0a:f1:15:40:dd:8c:3a:ce:f6:e5:53:30:b5:
fe:71:95:a0:7d:1e:25:14:60:47:79:3d:86:2e:31:
b7:e5:05:c1:c7:cc:b1:83:d6:d2:6c:7e:95:29:a5:
2a:7c:78:cd:6c:02:2a:c5:ff:86:fd:59:39:34:f5:
c9:05:6f:b2:a5:92:73:09:a3:36:8b:ec:ae:b0:58:
2a:22:42:08:9b:57:58:5a:0e:44:ee:26:80:60:b5:
aa:12:f9:99:74:cd:7f:6f:97:7c:2f:49:21:a2:05:
7d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C5:B6:FA:7F:B8:13:1A:CD:CE:ED:6E:A1:8B:D0:9C:24:06:5C:01
X509v3 Authority Key Identifier:
keyid:9E:94:D5:BF:3D:B7:D6:73:4D:CF:1B:E6:22:D5:FD:EE:2F:EC:3B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:15:22:c4:4c:2f:2b:3d:17:a2:0e:d5:ee:4e:8b:f1:bb:b0:
e1:f9:d6:2e:5d:c7:65:0e:6a:e6:47:f2:f9:d3:40:0e:92:45:
f7:f7:b0:86:b4:ba:61:d2:be:4e:26:66:72:e2:d8:0d:46:50:
d5:a8:71:f9:3c:bc:33:4a:2a:67:91:8d:dd:d6:bc:e6:e7:2a:
4b:82:18:3c:e9:d2:eb:ca:6d:88:0c:f0:39:a0:15:dc:2e:c4:
41:48:3b:c5:cd:8d:8f:0b:27:10:d5:2b:dd:68:79:ba:2d:3f:
33:15:04:42:df:db:ae:c7:61:ee:33:d3:9f:8c:a4:5f:61:0a:
c5:08:4c:07:7f:8c:be:89:29:7d:8e:43:52:93:4e:60:dd:92:
79:0c:da:85:e0:99:3d:cb:a9:2a:fb:f9:22:59:bc:d2:1b:0a:
db:94:ac:b5:b5:21:07:8e:00:3f:8e:3c:4a:7b:db:01:00:00:
c2:2b:ba:89:6b:77:da:1c:c8:6d:fa:e6:05:e1:17:23:6e:dc:
ae:f4:1e:fb:16:9e:8b:7a:18:74:90:37:cc:fb:3f:dd:e9:de:
1b:36:a2:42:95:b1:d0:9a:b6:0e:3e:f2:4e:6f:21:c0:ab:06:
53:6f:c3:ce:13:ae:53:b1:1f:5d:4d:e9:ce:5a:5d:d3:de:55:
74:79:70:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:56:06 2025 by rpki-client