Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
File: NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft (raw, json)
Hash identifier: yNtv5BAFYf/imw6Nga7yYc7tXBSMUlNQFnRkqY4kkr8=
Subject key identifier: DE:23:BE:BB:60:26:A3:6A:FE:C5:2F:5C:17:D3:CB:50:8B:04:CF:79
Authority key identifier: 34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
Certificate issuer: /CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
Certificate serial: 0198D5F1546A9EBDDB8AF5E3D0CC7EAAA3AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 08:00:19 +0000
Manifest this update: Sat 23 Aug 2025 08:00:19 +0000
Manifest next update: Sun 24 Aug 2025 08:00:19 +0000
Files and hashes: 1: NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl (hash: XIaKjMEpWYb6WZIZAg2cyFGJNevHW017FkIgUkNusCI=)
2: n9slDOW816oCeV0oI8sGph9zEHY.roa (hash: qD/TRD91aBYWewYzdvChC8Edlu2GICT4uFezEduAc7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:54:6a:9e:bd:db:8a:f5:e3:d0:cc:7e:aa:a3:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
Validity
Not Before: Aug 23 08:00:19 2025 GMT
Not After : Aug 24 08:00:19 2025 GMT
Subject: CN=de23bebb6026a36afec52f5c17d3cb508b04cf79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a3:ee:f5:5e:72:b8:de:bd:55:2f:74:06:ac:
f8:15:1f:b4:5f:6c:60:16:9e:da:29:73:84:0c:4a:
bf:ff:bd:0f:97:a6:cf:f2:56:bd:47:7b:52:6f:66:
93:d5:0e:6d:08:8b:3b:00:ce:dc:9c:66:09:31:ab:
b8:80:c6:c8:3d:4a:8b:b8:f9:c9:97:f2:c1:fa:40:
88:40:b6:0b:56:d7:f3:9b:8d:41:d6:95:cf:95:04:
5f:07:22:cb:33:b6:c5:ad:8c:99:f3:10:b1:34:75:
77:c3:11:71:f7:28:8d:96:ab:1e:0b:1b:c7:3d:95:
08:cd:ff:5a:38:a5:05:1b:ec:b9:79:f6:6f:39:0f:
50:30:4d:c8:04:2d:72:47:4e:ad:36:50:e8:44:55:
74:88:fd:ee:bc:08:a5:54:85:73:14:f1:e2:a0:b2:
b4:1c:a0:39:77:ac:f7:90:54:92:9c:4e:bb:cf:d3:
36:f5:67:b6:d1:8e:4a:6c:1d:b2:c6:cf:11:f1:d3:
f8:73:1e:13:38:61:74:88:39:b7:69:2e:b0:c3:8f:
c3:3b:8c:b9:ea:1c:8e:fa:b1:77:74:00:b1:3d:3e:
5c:7a:20:5e:51:ca:3e:e8:d8:ff:8a:70:06:c2:3a:
4d:52:7e:db:12:97:33:f4:75:25:20:47:75:3c:45:
27:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:23:BE:BB:60:26:A3:6A:FE:C5:2F:5C:17:D3:CB:50:8B:04:CF:79
X509v3 Authority Key Identifier:
keyid:34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:09:c0:23:53:dc:31:9e:72:de:4c:05:99:2f:84:13:9a:e3:
d9:1a:3d:2c:24:86:a2:a1:c3:ab:3e:2b:dc:9c:5f:41:f7:e8:
d7:c8:0b:ea:39:5e:7b:f6:a0:d8:66:bb:56:8c:98:56:3f:5e:
2a:00:1b:c4:8e:ce:74:3d:d1:3d:e3:1a:9d:c7:90:b7:0e:63:
0c:22:75:3d:95:fc:8c:2b:23:f5:61:98:9b:09:1c:01:b1:11:
b9:ac:a8:58:d0:d0:d5:91:75:bf:76:d3:d3:f4:50:5d:c1:fb:
a5:46:88:18:32:34:4e:27:b9:b7:eb:7b:c3:02:fd:69:72:b3:
7a:10:fb:b2:2b:9b:b0:c7:e9:8e:4e:7a:43:54:6d:e1:cf:4c:
5e:47:1e:a8:d6:ab:4b:f9:ed:ed:c1:51:f5:6b:7d:f6:0f:f2:
a4:06:49:23:d6:53:de:2d:43:6c:09:67:5e:0b:e8:79:8d:07:
a8:a4:dc:82:af:6b:12:c9:64:50:3e:d7:8f:2d:7e:89:5c:44:
f0:2a:3f:34:27:bb:41:38:ca:60:3e:0e:c8:b8:8f:38:6a:14:
ac:61:78:3e:09:2d:00:ff:80:6e:fe:5a:35:f4:fc:17:70:fe:
f3:3c:b4:87:07:94:d8:51:2f:08:78:75:c6:54:54:2b:a4:86:
93:7e:88:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8VRqnr3bivXj0Mx+qqOrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZjQ4MWE5ZGRjZmI0ODU5MWY3ODkzOGM0ZmNjN2I4YjY3
YzYzMDIwHhcNMjUwODIzMDgwMDE5WhcNMjUwODI0MDgwMDE5WjAzMTEwLwYDVQQD
EyhkZTIzYmViYjYwMjZhMzZhZmVjNTJmNWMxN2QzY2I1MDhiMDRjZjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqPu9V5yuN69VS90Bqz4FR+0X2xg
Fp7aKXOEDEq//70Pl6bP8la9R3tSb2aT1Q5tCIs7AM7cnGYJMau4gMbIPUqLuPnJ
l/LB+kCIQLYLVtfzm41B1pXPlQRfByLLM7bFrYyZ8xCxNHV3wxFx9yiNlqseCxvH
PZUIzf9aOKUFG+y5efZvOQ9QME3IBC1yR06tNlDoRFV0iP3uvAilVIVzFPHioLK0
HKA5d6z3kFSSnE67z9M29We20Y5KbB2yxs8R8dP4cx4TOGF0iDm3aS6ww4/DO4y5
6hyO+rF3dACxPT5ceiBeUco+6Nj/inAGwjpNUn7bEpcz9HUlIEd1PEUnzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN4jvrtgJqNq/sUvXBfTy1CLBM95MB8GA1UdIwQY
MBaAFDT0gandz7SFkfeJOMT8x7i2fGMCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlBTQnFkM1B0SVdSOTRrNHhQekh1TFo4WXdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8zYWQ5YzEtM2UwOS00MWFjLWFjY2Et
ZDExMzM5ZmU3ZGYwLzEvTlBTQnFkM1B0SVdSOTRrNHhQekh1TFo4WXdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8zYWQ5YzEtM2UwOS00MWFjLWFjY2EtZDExMzM5ZmU3ZGYw
LzEvTlBTQnFkM1B0SVdSOTRrNHhQekh1TFo4WXdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHwnAI1Pc
MZ5y3kwFmS+EE5rj2Ro9LCSGoqHDqz4r3JxfQffo18gL6jlee/ag2Ga7VoyYVj9e
KgAbxI7OdD3RPeManceQtw5jDCJ1PZX8jCsj9WGYmwkcAbERuayoWNDQ1ZF1v3bT
0/RQXcH7pUaIGDI0Tie5t+t7wwL9aXKzehD7siubsMfpjk56Q1Rt4c9MXkceqNar
S/nt7cFR9Wt99g/ypAZJI9ZT3i1DbAlnXgvoeY0HqKTcgq9rEslkUD7Xjy1+iVxE
8Co/NCe7QTjKYD4OyLiPOGoUrGF4PgktAP+Abv5aNfT8F3D+8zy0hweU2FEvCHh1
xlRUK6SGk36IzQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:44:03 2025 by rpki-client