Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.mft
File: NP8Aripv7u1qSYfLyRNGf9_vg-g.mft (raw, json)
Hash identifier: PiCynvV2sowdPruv7MbQNw/uMnjsgZwHvrLmrbwtDwA=
Subject key identifier: 06:7A:72:75:A5:DD:FC:77:06:78:A8:A1:70:82:20:C5:4E:35:F2:EC
Authority key identifier: 34:FF:00:AE:2A:6F:EE:ED:6A:49:87:CB:C9:13:46:7F:DF:EF:83:E8
Certificate issuer: /CN=34ff00ae2a6feeed6a4987cbc913467fdfef83e8
Certificate serial: 0198D516248C98AC82E6A3EBEA364F1F9A44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NP8Aripv7u1qSYfLyRNGf9_vg-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.mft
Manifest number: 0849
Signing time: Sat 23 Aug 2025 04:00:54 +0000
Manifest this update: Sat 23 Aug 2025 04:00:54 +0000
Manifest next update: Sun 24 Aug 2025 04:00:54 +0000
Files and hashes: 1: NP8Aripv7u1qSYfLyRNGf9_vg-g.crl (hash: xjNXaAbqH0R4rFKNhY5dzgmJStx5es8/nS0OvaFmu3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NP8Aripv7u1qSYfLyRNGf9_vg-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:24:8c:98:ac:82:e6:a3:eb:ea:36:4f:1f:9a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34ff00ae2a6feeed6a4987cbc913467fdfef83e8
Validity
Not Before: Aug 23 04:00:54 2025 GMT
Not After : Aug 24 04:00:54 2025 GMT
Subject: CN=067a7275a5ddfc770678a8a1708220c54e35f2ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:26:3d:10:a3:86:a7:c7:c9:31:b1:e0:ce:d0:
19:6e:54:17:0d:c0:36:d1:ad:cf:d2:34:38:38:b8:
64:e3:18:d4:48:d2:83:a2:2d:ad:5d:b2:9e:95:2b:
88:37:33:a6:9b:dc:d3:1e:1a:c3:42:72:4b:de:96:
02:bf:24:ae:3e:98:e8:70:c6:e0:42:e4:1c:47:cf:
d5:f2:c9:0a:7b:81:a8:a9:a5:c7:c9:12:fe:86:b2:
35:3c:24:7d:56:02:04:18:a7:25:ea:69:56:89:33:
60:f4:ff:10:3c:7c:29:cc:9c:d6:9d:39:0a:62:8c:
b6:75:02:49:d4:b4:51:c9:1a:81:7c:32:50:b6:0c:
04:de:fc:ad:0e:64:06:8c:38:e1:54:5d:d3:d3:93:
f7:39:de:ee:a3:19:91:22:7d:de:b1:39:12:69:3a:
5e:cd:71:55:b0:4d:00:bb:a7:b6:28:86:f6:78:55:
b2:35:fc:ff:a2:ef:01:76:89:c6:fa:3b:ad:c2:87:
1f:75:5d:f9:74:6a:81:ab:70:96:62:0b:86:45:f8:
76:65:d6:8e:3a:2a:c6:ee:68:b7:2d:e5:ca:4b:5e:
35:6b:ac:e3:0c:6a:91:7e:3f:f1:46:4e:80:ce:1c:
ca:e3:39:f4:36:56:72:eb:fc:f3:4b:61:0b:06:6c:
a4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:7A:72:75:A5:DD:FC:77:06:78:A8:A1:70:82:20:C5:4E:35:F2:EC
X509v3 Authority Key Identifier:
keyid:34:FF:00:AE:2A:6F:EE:ED:6A:49:87:CB:C9:13:46:7F:DF:EF:83:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NP8Aripv7u1qSYfLyRNGf9_vg-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:11:a9:cf:6b:3c:7d:3e:1b:cf:99:e8:e7:13:fe:c7:e1:f8:
b8:41:71:31:24:af:eb:37:8b:c1:c8:31:28:5a:78:db:83:4f:
b0:65:3a:10:bc:0a:06:ba:e5:2e:21:93:87:da:b8:c5:cd:99:
22:4d:b9:6f:38:72:b2:58:fa:5d:06:cb:18:93:ce:3d:06:93:
af:5a:19:90:b2:cd:f6:9c:f8:6e:8f:ee:d1:8f:7b:3f:5e:eb:
12:78:15:3c:f6:0c:f5:d3:45:3e:34:7a:fe:35:e6:92:10:00:
8c:40:89:c2:96:4b:71:e4:86:b0:d0:07:ff:31:c4:c0:a0:e6:
56:e0:36:76:6d:cb:ff:f1:02:8c:49:3b:4f:91:37:cf:1d:5d:
c7:c8:37:94:6a:a6:57:83:5e:7a:dd:2c:05:32:0f:bc:5f:ba:
87:65:47:e8:59:8c:4f:d5:8d:49:c8:74:ce:91:7b:bb:38:30:
79:f8:45:25:3b:bc:c5:35:40:32:98:d6:9d:d2:da:a7:df:59:
82:cb:d5:2e:13:61:e9:b5:0a:c3:87:a3:18:d3:f0:be:8c:f0:
50:f2:15:e0:0e:d8:a9:23:d3:8a:cd:3f:45:c6:28:7b:16:86:
cd:f8:2b:30:38:35:c8:40:97:47:c0:f2:eb:30:1d:2d:75:58:
24:f8:34:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFiSMmKyC5qPr6jZPH5pEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZmYwMGFlMmE2ZmVlZWQ2YTQ5ODdjYmM5MTM0NjdmZGZl
ZjgzZTgwHhcNMjUwODIzMDQwMDU0WhcNMjUwODI0MDQwMDU0WjAzMTEwLwYDVQQD
EygwNjdhNzI3NWE1ZGRmYzc3MDY3OGE4YTE3MDgyMjBjNTRlMzVmMmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiY9EKOGp8fJMbHgztAZblQXDcA2
0a3P0jQ4OLhk4xjUSNKDoi2tXbKelSuINzOmm9zTHhrDQnJL3pYCvySuPpjocMbg
QuQcR8/V8skKe4GoqaXHyRL+hrI1PCR9VgIEGKcl6mlWiTNg9P8QPHwpzJzWnTkK
Yoy2dQJJ1LRRyRqBfDJQtgwE3vytDmQGjDjhVF3T05P3Od7uoxmRIn3esTkSaTpe
zXFVsE0Au6e2KIb2eFWyNfz/ou8BdonG+jutwocfdV35dGqBq3CWYguGRfh2ZdaO
OirG7mi3LeXKS141a6zjDGqRfj/xRk6AzhzK4zn0NlZy6/zzS2ELBmykHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZ6cnWl3fx3BniooXCCIMVONfLsMB8GA1UdIwQY
MBaAFDT/AK4qb+7takmHy8kTRn/f74PoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlA4QXJpcHY3dTFxU1lmTHlSTkdmOV92Zy1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mNDM0ZTMtY2E4OS00YTZkLWEyYWUt
OGIzZTQwMDYzODU4LzEvTlA4QXJpcHY3dTFxU1lmTHlSTkdmOV92Zy1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mNDM0ZTMtY2E4OS00YTZkLWEyYWUtOGIzZTQwMDYzODU4
LzEvTlA4QXJpcHY3dTFxU1lmTHlSTkdmOV92Zy1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABBGpz2s8
fT4bz5no5xP+x+H4uEFxMSSv6zeLwcgxKFp424NPsGU6ELwKBrrlLiGTh9q4xc2Z
Ik25bzhyslj6XQbLGJPOPQaTr1oZkLLN9pz4bo/u0Y97P17rEngVPPYM9dNFPjR6
/jXmkhAAjECJwpZLceSGsNAH/zHEwKDmVuA2dm3L//ECjEk7T5E3zx1dx8g3lGqm
V4Neet0sBTIPvF+6h2VH6FmMT9WNSch0zpF7uzgwefhFJTu8xTVAMpjWndLap99Z
gsvVLhNh6bUKw4ejGNPwvozwUPIV4A7YqSPTis0/RcYoexaGzfgrMDg1yECXR8Dy
6zAdLXVYJPg0fg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:53:08 2025 by rpki-client