Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
File: NPdSlbuVtVRThE8y1uOVCdO-zkU.mft (raw, json)
Hash identifier: Av80jDR5hJiF2gKnPG4rFCnncQe9kLRS6PbjcpAFE6o=
Subject key identifier: A9:26:09:CD:98:A0:70:AB:22:E9:83:11:51:63:1C:1D:B3:87:D2:7E
Authority key identifier: 34:F7:52:95:BB:95:B5:54:53:84:4F:32:D6:E3:95:09:D3:BE:CE:45
Certificate issuer: /CN=34f75295bb95b55453844f32d6e39509d3bece45
Certificate serial: 0198D473196DF394ECDD6ABAA87531D4F25D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPdSlbuVtVRThE8y1uOVCdO-zkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
Manifest number: BD
Signing time: Sat 23 Aug 2025 01:02:49 +0000
Manifest this update: Sat 23 Aug 2025 01:02:49 +0000
Manifest next update: Sun 24 Aug 2025 01:02:49 +0000
Files and hashes: 1: NPdSlbuVtVRThE8y1uOVCdO-zkU.crl (hash: oEoIOkPEEgokOS/pELx/y2VSvEhQOvlqHJCCWyNEc0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPdSlbuVtVRThE8y1uOVCdO-zkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:19:6d:f3:94:ec:dd:6a:ba:a8:75:31:d4:f2:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f75295bb95b55453844f32d6e39509d3bece45
Validity
Not Before: Aug 23 01:02:49 2025 GMT
Not After : Aug 24 01:02:49 2025 GMT
Subject: CN=a92609cd98a070ab22e9831151631c1db387d27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2d:3e:e8:e0:42:05:56:86:b4:a4:3f:31:25:
5b:19:89:40:38:d8:8f:97:48:29:66:22:73:b2:7d:
35:c0:0a:ac:b4:1c:2f:0b:1a:e3:8a:44:71:e6:83:
ca:b8:7c:c4:3b:9b:de:52:9d:fd:60:96:e5:74:eb:
c4:11:cb:fa:43:97:df:e8:37:0f:e3:75:c9:09:7d:
10:b5:56:97:64:12:b2:ba:12:2e:2a:9a:de:b5:a6:
26:97:2a:31:16:b1:ee:22:07:91:b7:62:81:c4:0b:
0a:e3:de:ce:4b:de:c0:75:0e:df:0a:ef:30:e2:c7:
f8:19:32:0d:79:47:ba:59:87:76:b7:fb:ce:ee:14:
f4:f8:f7:86:af:61:9a:94:69:71:a2:05:3e:17:c2:
b0:e5:d5:0b:4d:3f:56:0e:c1:99:37:5a:21:01:21:
41:2e:dc:e3:c6:f2:4b:50:49:9e:53:a5:0a:78:b1:
1c:bc:c6:a9:6f:ed:d1:c8:ed:19:b2:f6:82:0a:c9:
25:21:e9:03:f3:d0:fc:9d:3a:c3:c9:f1:61:c6:0c:
c8:40:43:0e:b5:b7:13:1c:6a:93:5e:36:64:b3:28:
18:db:1d:0e:f8:ec:b4:de:c6:40:44:77:fd:38:7c:
7f:a3:65:fc:5f:fc:68:5e:bc:3a:5d:a0:46:02:1f:
9e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:26:09:CD:98:A0:70:AB:22:E9:83:11:51:63:1C:1D:B3:87:D2:7E
X509v3 Authority Key Identifier:
keyid:34:F7:52:95:BB:95:B5:54:53:84:4F:32:D6:E3:95:09:D3:BE:CE:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPdSlbuVtVRThE8y1uOVCdO-zkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c8:20:86:39:66:46:43:56:06:d6:f0:ec:6e:3d:c5:71:5a:
e9:8e:3a:2b:d4:76:da:f8:16:53:31:00:71:ac:0f:58:29:54:
b1:2f:8f:9f:08:c6:2e:40:97:11:31:e2:37:72:42:73:c9:24:
7d:d0:5c:8b:e9:0a:8b:09:c8:19:9d:8c:2c:4b:f3:60:f1:b2:
a3:ec:45:9e:f9:ee:9a:db:f2:a2:24:f7:c7:6f:f2:80:e4:70:
18:ad:3d:30:94:bf:e8:2f:2b:01:12:ad:98:dc:9e:23:13:fa:
2c:2a:d9:b3:9a:54:12:43:10:d2:49:97:bc:62:56:4d:97:7e:
c4:12:c0:85:b6:f8:fe:7f:18:36:5e:a7:64:83:10:0a:7b:21:
ab:ae:90:fd:43:ab:e1:db:fa:93:b4:a8:85:a4:f1:2b:39:a7:
73:32:b1:f8:83:11:53:e2:34:cf:d9:72:01:aa:2d:a2:fd:8f:
4e:b3:c4:69:81:85:84:92:55:3b:ac:74:d6:52:43:7a:3f:7d:
8f:52:f9:be:5a:42:20:0d:c2:99:fd:c5:41:bf:9a:6a:a5:09:
4d:90:ce:21:06:5f:63:ef:d8:25:a9:d2:c3:05:a5:fb:77:e8:
11:86:5b:83:6b:17:84:e6:b4:f6:17:98:d3:08:91:9d:0c:54:
e4:f7:a3:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcxlt85Ts3Wq6qHUx1PJdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0Zjc1Mjk1YmI5NWI1NTQ1Mzg0NGYzMmQ2ZTM5NTA5ZDNi
ZWNlNDUwHhcNMjUwODIzMDEwMjQ5WhcNMjUwODI0MDEwMjQ5WjAzMTEwLwYDVQQD
EyhhOTI2MDljZDk4YTA3MGFiMjJlOTgzMTE1MTYzMWMxZGIzODdkMjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3S0+6OBCBVaGtKQ/MSVbGYlAONiP
l0gpZiJzsn01wAqstBwvCxrjikRx5oPKuHzEO5veUp39YJbldOvEEcv6Q5ff6DcP
43XJCX0QtVaXZBKyuhIuKpretaYmlyoxFrHuIgeRt2KBxAsK497OS97AdQ7fCu8w
4sf4GTINeUe6WYd2t/vO7hT0+PeGr2GalGlxogU+F8Kw5dULTT9WDsGZN1ohASFB
LtzjxvJLUEmeU6UKeLEcvMapb+3RyO0ZsvaCCsklIekD89D8nTrDyfFhxgzIQEMO
tbcTHGqTXjZksygY2x0O+Oy03sZARHf9OHx/o2X8X/xoXrw6XaBGAh+eDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkmCc2YoHCrIumDEVFjHB2zh9J+MB8GA1UdIwQY
MBaAFDT3UpW7lbVUU4RPMtbjlQnTvs5FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlBkU2xidVZ0VlJUaEU4eTF1T1ZDZE8temtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85ZGMzZTAtOGRlMC00OTRiLThmZjUt
ZDk1ZTVhNjNhNDhlLzEvTlBkU2xidVZ0VlJUaEU4eTF1T1ZDZE8temtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85ZGMzZTAtOGRlMC00OTRiLThmZjUtZDk1ZTVhNjNhNDhl
LzEvTlBkU2xidVZ0VlJUaEU4eTF1T1ZDZE8temtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjsgghjlm
RkNWBtbw7G49xXFa6Y46K9R22vgWUzEAcawPWClUsS+PnwjGLkCXETHiN3JCc8kk
fdBci+kKiwnIGZ2MLEvzYPGyo+xFnvnumtvyoiT3x2/ygORwGK09MJS/6C8rARKt
mNyeIxP6LCrZs5pUEkMQ0kmXvGJWTZd+xBLAhbb4/n8YNl6nZIMQCnshq66Q/UOr
4dv6k7SohaTxKzmnczKx+IMRU+I0z9lyAaotov2PTrPEaYGFhJJVO6x01lJDej99
j1L5vlpCIA3Cmf3FQb+aaqUJTZDOIQZfY+/YJanSwwWl+3foEYZbg2sXhOa09heY
0wiRnQxU5Pej2w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:15 2025 by rpki-client