Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.mft
File: NP8Aripv7u1qSYfLyRNGf9_vg-g.mft (raw, json)
Hash identifier: y86NbOHJRrPuafg4L3hoWbKZmHBuJVB8vofQxZgNYDE=
Subject key identifier: B8:86:6F:69:80:C2:E5:F3:BD:A0:0E:C4:06:6F:53:6E:87:BE:16:D9
Authority key identifier: 34:FF:00:AE:2A:6F:EE:ED:6A:49:87:CB:C9:13:46:7F:DF:EF:83:E8
Certificate issuer: /CN=34ff00ae2a6feeed6a4987cbc913467fdfef83e8
Certificate serial: 0199FC8F17B69D4E74D504F242096CF91BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NP8Aripv7u1qSYfLyRNGf9_vg-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.mft
Manifest number: 08E2
Signing time: Sun 19 Oct 2025 13:01:00 +0000
Manifest this update: Sun 19 Oct 2025 13:01:00 +0000
Manifest next update: Mon 20 Oct 2025 13:01:00 +0000
Files and hashes: 1: NP8Aripv7u1qSYfLyRNGf9_vg-g.crl (hash: ApRHTz7MBPs+1HsXDwtWneLdhaOcp56alCrAjbjc4ZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NP8Aripv7u1qSYfLyRNGf9_vg-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:17:b6:9d:4e:74:d5:04:f2:42:09:6c:f9:1b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34ff00ae2a6feeed6a4987cbc913467fdfef83e8
Validity
Not Before: Oct 19 13:01:00 2025 GMT
Not After : Oct 20 13:01:00 2025 GMT
Subject: CN=b8866f6980c2e5f3bda00ec4066f536e87be16d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cb:f4:12:b8:aa:95:c7:6a:b2:d4:a6:bc:dc:
e8:63:71:aa:14:19:86:de:89:c0:5a:bc:07:ac:c7:
30:43:63:93:3b:bf:2b:7b:58:a7:3f:6e:37:53:54:
73:44:e2:87:4a:b9:70:b7:df:85:b4:50:12:8d:66:
b7:16:a5:f3:24:02:fa:b5:27:ca:64:64:17:10:d7:
68:08:c4:a2:3b:ad:be:7f:9f:c8:8a:2d:66:a9:1f:
db:10:68:64:da:42:ed:91:72:44:4e:fd:22:3b:00:
8f:0a:4a:1b:5e:bd:de:89:d2:a8:48:3b:19:76:c0:
b7:b9:23:93:fb:05:8a:6c:a2:d1:72:e7:10:16:11:
07:6f:ea:d2:db:d7:a4:62:84:d7:e2:79:fe:78:10:
1c:a8:bc:cc:0f:44:b8:49:f8:32:0a:dd:ec:63:96:
c6:68:9a:35:17:57:98:e5:1d:56:91:d5:8a:4c:e7:
f0:85:c5:a3:d1:8c:84:fb:35:66:59:f8:dd:e8:ac:
75:4a:83:9b:45:dd:e1:69:14:67:01:c9:fa:2f:f8:
60:fb:66:61:1e:ff:2d:90:dd:0e:28:fb:68:d9:54:
48:b2:c1:2e:0f:e6:1d:71:22:12:43:01:ac:b9:d2:
92:42:d6:10:82:9e:34:9b:68:e2:84:87:0b:db:cf:
2e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:86:6F:69:80:C2:E5:F3:BD:A0:0E:C4:06:6F:53:6E:87:BE:16:D9
X509v3 Authority Key Identifier:
keyid:34:FF:00:AE:2A:6F:EE:ED:6A:49:87:CB:C9:13:46:7F:DF:EF:83:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NP8Aripv7u1qSYfLyRNGf9_vg-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:13:1a:ba:7a:84:d4:f2:94:a4:a4:05:91:df:a4:5d:fd:c8:
10:95:6e:bc:ec:5e:61:10:85:98:c1:b6:c2:07:8a:79:bc:f9:
f3:fa:b8:1d:0c:b2:36:30:47:58:ef:18:08:90:82:7f:45:89:
36:4d:a2:c0:7c:b8:86:ae:8b:06:a1:e3:92:06:cd:4b:d2:c0:
9b:b1:e5:a6:b7:8f:c6:1b:7a:64:ec:2c:ad:66:8c:92:1e:80:
70:f9:7a:dc:9d:de:6e:b5:46:92:ad:d5:00:d9:66:bb:74:f5:
57:55:f1:0e:2b:9a:99:91:c7:a0:04:42:19:d6:f3:50:e4:e9:
a1:64:e7:fe:c6:9a:ac:5a:aa:1b:2c:20:66:00:8c:02:24:02:
b5:83:5a:ef:6c:d1:21:28:08:94:9e:b9:e0:1e:8b:cd:24:51:
37:d0:bd:55:fa:bf:42:1b:c1:64:a1:44:d8:29:f4:f2:84:7a:
3c:07:4f:4a:8d:cc:03:25:50:35:ab:2b:3a:94:d8:b0:5d:fe:
a3:37:ce:d4:b0:84:9b:c9:83:a2:ab:0a:0a:a2:f8:8c:ad:ec:
f0:c2:b3:67:d8:5e:36:fb:91:77:f1:d5:91:aa:fb:83:89:48:
96:10:25:71:1b:3c:b9:0a:1e:1e:99:8e:65:f6:30:6d:c2:75:
6d:be:27:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:20 2025 by rpki-client