Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.mft
File: NPwYIZBVFuYYMg6eRxoTsqqslv8.mft (raw, json)
Hash identifier: 4uGgDET6qG2ekwmrZwggzX4VuSTzi4ED/Q6FFWcBOGw=
Subject key identifier: F5:3F:89:36:BF:11:3D:D1:73:35:8D:AE:73:AE:CE:86:C6:D9:7C:60
Authority key identifier: 34:FC:18:21:90:55:16:E6:18:32:0E:9E:47:1A:13:B2:AA:AC:96:FF
Certificate issuer: /CN=34fc1821905516e618320e9e471a13b2aaac96ff
Certificate serial: 0198D4DFF0D526E659025A3D7F805FF944DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPwYIZBVFuYYMg6eRxoTsqqslv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 03:01:42 +0000
Manifest this update: Sat 23 Aug 2025 03:01:42 +0000
Manifest next update: Sun 24 Aug 2025 03:01:42 +0000
Files and hashes: 1: NPwYIZBVFuYYMg6eRxoTsqqslv8.crl (hash: 2IBNAEqiTgo36kXPWE8zmTcCIcp8KykDFK6/NeGy6AE=)
2: rYKTx0nL3KpouO_aEG54Y81fax4.roa (hash: U8k6Z6wFvQxh2jmlJpmKkiKIDJ2daF7abfgpCSFD+Kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPwYIZBVFuYYMg6eRxoTsqqslv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:f0:d5:26:e6:59:02:5a:3d:7f:80:5f:f9:44:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34fc1821905516e618320e9e471a13b2aaac96ff
Validity
Not Before: Aug 23 03:01:42 2025 GMT
Not After : Aug 24 03:01:42 2025 GMT
Subject: CN=f53f8936bf113dd173358dae73aece86c6d97c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:18:31:51:79:51:b3:13:16:1e:c8:0e:11:18:
a6:15:72:f4:60:ff:9f:ed:25:7a:b2:6b:88:08:3a:
e0:56:13:09:34:92:94:3c:cd:ed:c2:d0:36:96:fe:
ab:bb:29:b8:6b:c5:41:78:23:f0:c7:d9:3f:cd:20:
69:8d:15:de:69:72:c6:99:f8:ae:25:19:3e:8a:af:
5e:1f:0d:3e:7c:6f:61:14:a3:1e:5e:0d:20:d9:83:
58:9d:61:6c:84:17:47:0e:28:ca:d7:a3:7b:0a:bd:
94:05:b2:f6:cf:01:62:34:0f:0d:2e:96:50:57:fb:
d0:7a:45:7d:97:9a:10:d1:ae:81:5f:85:c8:0f:87:
7d:2d:35:02:71:04:b8:35:88:51:92:ae:7c:59:0d:
ae:84:ad:0b:03:20:68:c2:22:77:20:0e:e6:13:65:
b1:a9:51:14:71:da:7c:73:6d:15:77:e3:32:ea:fe:
1f:02:4b:39:2c:ce:d5:e8:a7:37:96:95:22:64:a3:
4c:ea:d6:77:6e:f1:1b:d2:f6:db:0f:23:80:c9:56:
86:c6:c3:cb:93:4e:fe:44:85:c0:13:b5:b0:19:e3:
9a:8c:f7:7e:62:dd:d9:91:c4:64:e9:e4:6c:2b:bc:
67:2d:4f:80:32:11:e8:ef:e0:09:fb:5d:0a:d6:94:
54:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3F:89:36:BF:11:3D:D1:73:35:8D:AE:73:AE:CE:86:C6:D9:7C:60
X509v3 Authority Key Identifier:
keyid:34:FC:18:21:90:55:16:E6:18:32:0E:9E:47:1A:13:B2:AA:AC:96:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPwYIZBVFuYYMg6eRxoTsqqslv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:17:3b:4d:ec:ef:1e:7a:a5:38:9f:09:aa:cb:d4:be:bb:c5:
32:96:b2:77:d0:26:42:83:31:0b:a8:e5:07:4c:d4:b3:4c:eb:
67:3e:e2:4b:aa:01:51:04:f0:7c:1b:6b:7e:9e:01:df:ad:43:
70:99:33:69:a4:67:a8:f7:2c:11:50:df:0b:67:c9:df:02:1c:
79:98:ee:9d:3b:38:89:07:8e:20:c2:42:ee:9f:93:f9:57:1e:
f7:cc:6b:d4:a5:43:61:97:7f:cf:f3:cc:88:c6:5e:e3:05:46:
c8:51:e5:6b:42:d7:36:c3:d3:b0:ba:9b:28:6f:cb:db:21:28:
91:34:0b:93:f1:9c:81:7f:ac:43:45:d1:b5:56:6b:93:79:1d:
0a:2a:ee:d1:1b:14:32:33:9a:83:aa:7e:1d:20:82:8e:19:a7:
7c:66:76:0e:fe:88:cd:78:48:fc:fe:4d:7f:e7:38:85:5d:3b:
92:64:15:b0:53:32:f3:2d:e1:5b:1b:66:38:48:16:43:4d:ef:
7f:4d:5d:28:e5:1e:94:ac:58:ff:35:f6:c2:57:fa:c6:e2:7f:
5d:d6:02:5e:54:9f:47:a6:dc:83:ca:18:9c:d2:ea:01:18:a7:
94:67:fb:d1:f3:6c:c4:5a:73:31:77:00:88:a7:e8:c4:53:15:
11:f5:a1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:37:05 2025 by rpki-client