Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
File: NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft (raw, json)
Hash identifier: znsUMZucZ0QQkBa7r6YI2R6G8LS+UI7abkeE0jJd61c=
Subject key identifier: 42:EE:49:C5:CA:67:C0:14:62:86:7F:F6:20:C2:B7:87:59:23:91:D9
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 0198D54E1EF1354AEE65837ED94E63852688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
Manifest number: 1667
Signing time: Sat 23 Aug 2025 05:02:03 +0000
Manifest this update: Sat 23 Aug 2025 05:02:03 +0000
Manifest next update: Sun 24 Aug 2025 05:02:03 +0000
Files and hashes: 1: 1eZC9enfXbKkbChbya2s-NBXR10.roa (hash: K8gL7gYOdUPnWfON7y82NF9djuzcQAO7yPjvMnV4HWA=)
2: 4C1hs3Awu1pUWnx11isTd7urO8g.roa (hash: NHlupIJQHDTwRScv0dlfz2lFTerJ3fgzUZ9KeBTbFHo=)
3: 4aaliOpCta1xxwdPdgm9XgmQVe4.roa (hash: 50PVROIOCSd7qW0XXvFqQMxjDosAhVmRwG7IVPmy7ik=)
4: LNJOsnr56BpDhx0zCSJoGF_8kg4.roa (hash: ipKdM/rgGFJqpM5XZ1watukNv4jI5z2rHAUKNiP8l9M=)
5: NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl (hash: bqm4t4bRnJINOFVI0RfLF1g+zfFp/xdNlsywqQNZAqI=)
6: P4RQICIsv2ynDFNy1pTdbhvIXok.roa (hash: 3BspGo/InWWElD0+8Z5QOqYWItS4j6gIXyuD2KZuZ58=)
7: ibQsYiMOU1D97Z6dBw2Z2nuJoA0.roa (hash: paBGRr0SKtx93/jOWaEGPMAan4qkVxtM/IYXrSHwl6Y=)
8: jBgv17Pl-Vh_L1PF3KmB8kI2bak.roa (hash: yIwLWwTP6qcl+lhvdLDbXrkIo53nDQZcaNGlgxGXrqE=)
9: xlTjepejuGlW3CGUnuf8jiI_Sb8.roa (hash: xnJVidZPq3qTfXPcYiZGHTVkjYmciZFHEO03/ve53hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:1e:f1:35:4a:ee:65:83:7e:d9:4e:63:85:26:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Aug 23 05:02:03 2025 GMT
Not After : Aug 24 05:02:03 2025 GMT
Subject: CN=42ee49c5ca67c01462867ff620c2b787592391d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:08:62:43:3b:fe:90:92:1f:f0:1b:d2:ed:29:
9a:4a:16:38:9a:d4:1b:eb:5f:a8:86:72:9f:2e:1f:
f1:25:59:a8:9f:c6:59:05:22:4f:79:ff:69:ba:99:
73:5f:20:67:a8:5b:ae:16:ce:64:20:d2:65:cd:ea:
9e:22:a1:60:1c:53:90:d5:a8:16:9e:b7:af:7b:5a:
5e:e6:b9:1f:9c:cc:b1:0f:d3:d3:49:0a:fc:0f:64:
c4:7a:91:46:97:13:ff:0c:3f:e2:bf:a8:bd:33:04:
8f:b8:0a:4c:9c:9d:45:83:97:46:60:f0:e6:b1:d9:
26:9b:ca:42:7b:8d:0f:20:24:5c:d9:40:91:95:78:
57:7b:0c:25:ed:25:bc:35:d9:9f:56:1e:08:c0:3c:
bb:c0:da:e2:b3:4f:68:3e:44:1e:fb:f6:1e:98:9a:
1d:c9:44:ae:59:46:87:5e:43:b0:53:31:2b:04:4e:
d8:78:ff:f1:e1:a7:2c:0f:79:4d:22:6d:e6:9e:fb:
c4:8f:59:1c:a2:d7:73:29:94:9f:77:57:3a:b0:12:
30:a8:29:05:ba:eb:d4:d9:1e:a7:ff:57:d1:56:88:
a7:69:71:16:04:d0:f1:1e:f0:b7:87:41:8c:6a:06:
d0:82:c0:d4:22:71:ec:3d:52:46:41:c3:69:d6:50:
5e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EE:49:C5:CA:67:C0:14:62:86:7F:F6:20:C2:B7:87:59:23:91:D9
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:aa:8a:c2:9d:62:45:d9:83:f6:9d:de:68:24:ba:07:49:fa:
43:1a:20:87:59:88:a0:68:f4:8d:6e:22:e6:e4:48:08:db:cd:
b3:95:d2:aa:c3:3b:be:44:44:bd:ca:86:15:d4:37:0f:45:69:
fd:c6:48:58:73:12:29:9b:cd:f1:b4:e8:00:a3:69:8c:19:93:
44:f1:34:b6:8b:27:12:44:a0:3d:b7:1e:ae:cf:49:ab:4d:60:
2f:1c:65:76:87:ab:6b:0d:0f:61:7a:c7:8e:bd:d6:f1:15:e2:
c4:07:d2:18:9d:4d:8b:ba:bd:03:75:e6:65:96:ac:c6:a5:94:
e3:f3:3c:8e:00:de:63:a6:81:85:8d:c7:4b:d6:f3:c9:46:f2:
a4:9c:1a:89:03:dd:96:05:a7:6e:44:64:e4:d1:3f:cf:75:b4:
41:14:89:ea:1b:62:b3:60:56:fa:e0:ea:2e:c6:25:a3:e3:f2:
6c:c8:5e:54:0d:f3:b6:0f:de:60:dc:29:e3:db:80:9b:9e:3e:
f4:43:4c:4e:b7:28:59:6c:e5:0b:75:e9:59:a4:2d:93:0a:2f:
17:dd:31:20:5b:62:c0:44:07:05:7d:ef:89:84:9c:9c:06:fc:
cb:43:aa:48:c9:b8:58:05:82:e8:1e:60:08:b3:76:7b:e3:ca:
8f:d7:34:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:33 2025 by rpki-client