Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.mft
File: NPwYIZBVFuYYMg6eRxoTsqqslv8.mft (raw, json)
Hash identifier: Uq2RN9fcWDUWBzpeYl+4QGFaKcj4eUF9d+9z7o2k0J0=
Subject key identifier: 08:14:70:EB:DF:86:04:06:47:C6:67:08:56:0D:83:6A:7E:5A:00:DD
Authority key identifier: 34:FC:18:21:90:55:16:E6:18:32:0E:9E:47:1A:13:B2:AA:AC:96:FF
Certificate issuer: /CN=34fc1821905516e618320e9e471a13b2aaac96ff
Certificate serial: 0197B70EB79BD4E9B82B5CE08D41F39F5758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPwYIZBVFuYYMg6eRxoTsqqslv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 15:01:24 +0000
Manifest this update: Sat 28 Jun 2025 15:01:24 +0000
Manifest next update: Sun 29 Jun 2025 15:01:24 +0000
Files and hashes: 1: NPwYIZBVFuYYMg6eRxoTsqqslv8.crl (hash: 9mga4sqevmAYbIKlogUMz0Wu9dlOtaN3f0NN/RO9v/E=)
2: rYKTx0nL3KpouO_aEG54Y81fax4.roa (hash: U8k6Z6wFvQxh2jmlJpmKkiKIDJ2daF7abfgpCSFD+Kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPwYIZBVFuYYMg6eRxoTsqqslv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:b7:9b:d4:e9:b8:2b:5c:e0:8d:41:f3:9f:57:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34fc1821905516e618320e9e471a13b2aaac96ff
Validity
Not Before: Jun 28 15:01:24 2025 GMT
Not After : Jun 29 15:01:24 2025 GMT
Subject: CN=081470ebdf86040647c66708560d836a7e5a00dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e3:13:02:a7:7c:e6:cb:1c:04:e5:18:ee:33:
d6:88:64:cd:99:3c:95:0b:14:e0:f4:0a:89:ab:fd:
f9:7a:3b:c8:ea:31:f2:55:ee:b5:8c:67:a1:d8:e7:
d0:80:1d:9d:05:54:8f:67:c3:4b:92:77:aa:1e:b6:
d0:3e:80:62:78:5f:2f:9e:42:2e:85:6b:03:b2:5c:
76:59:ef:6f:ca:bc:b4:1a:53:49:95:92:d2:35:a7:
c1:eb:af:7f:b4:8e:81:ed:d7:71:7b:94:57:82:19:
3d:a5:af:dc:f6:b1:e3:5e:7e:75:37:0e:82:b4:34:
81:37:7c:4b:85:53:59:39:81:80:56:81:2a:ca:a6:
2f:1f:2c:5d:f1:5c:7e:eb:85:74:0c:8d:ac:29:35:
5d:28:d5:15:a2:2b:6d:74:fc:80:68:d6:55:26:7d:
27:99:6c:43:dd:f6:e9:20:48:72:b9:d1:2a:06:90:
01:6f:12:97:ec:75:de:c8:6a:e7:cc:fa:d9:7a:49:
66:12:74:af:e0:57:2c:13:67:18:7e:c7:ed:dd:73:
f7:96:45:20:97:da:89:66:84:d5:b2:5b:1f:67:24:
d0:25:ea:1c:a7:e6:b8:ab:37:6e:2c:cf:2a:75:d5:
47:8e:39:98:c7:b0:81:9c:06:85:94:c1:2b:77:57:
f0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:14:70:EB:DF:86:04:06:47:C6:67:08:56:0D:83:6A:7E:5A:00:DD
X509v3 Authority Key Identifier:
keyid:34:FC:18:21:90:55:16:E6:18:32:0E:9E:47:1A:13:B2:AA:AC:96:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPwYIZBVFuYYMg6eRxoTsqqslv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:f0:c7:0f:4b:da:44:55:65:53:c4:52:04:84:0c:5a:8d:1f:
9e:76:5d:21:f8:ae:47:93:d5:34:04:56:e9:d8:72:ff:2c:1d:
d4:46:d3:e9:18:cd:5d:db:ae:a2:2f:c0:b1:f4:db:bd:ed:e9:
ec:18:36:24:6c:38:69:16:c1:1b:0c:a6:ac:03:74:bd:82:9f:
3d:f1:cc:b6:de:b0:98:ce:96:5c:d1:30:5e:f8:ab:b2:76:f0:
45:6c:67:f6:4c:99:d2:a6:47:0e:52:2a:21:52:4d:e4:72:69:
10:53:f8:e8:ae:b3:77:95:4c:45:66:98:e5:74:68:79:6d:21:
b5:fc:e3:0e:a0:95:df:08:8d:e3:c9:6d:c7:c4:c4:c2:e7:2f:
91:88:31:36:be:51:ca:e3:6d:d1:bd:d5:74:b3:fd:dd:87:84:
72:ab:33:3e:89:73:fd:86:8b:07:82:f8:b2:37:ee:4f:98:cb:
6d:cb:39:05:8f:da:7f:9b:36:53:2b:d5:71:5e:0d:d0:f0:1a:
83:87:70:0f:3a:c9:57:97:80:57:1a:4b:fc:11:59:f2:18:ab:
58:f8:bc:e7:7d:41:b6:16:a7:a7:ef:03:fc:ee:d1:58:2f:a4:
cf:c4:a3:ab:e7:73:71:50:c5:18:f0:58:28:34:a0:f4:4c:31:
30:76:a8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:15:36 2025 by rpki-client