Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
File: NPdSlbuVtVRThE8y1uOVCdO-zkU.mft (raw, json)
Hash identifier: oeUYTd01RBiKERAgo6KyXc9kHDZCZDgX+2jakQc/Bjw=
Subject key identifier: 3D:64:B9:05:55:BB:0D:50:02:00:24:DD:1A:F1:70:BB:37:B4:7A:9A
Authority key identifier: 34:F7:52:95:BB:95:B5:54:53:84:4F:32:D6:E3:95:09:D3:BE:CE:45
Certificate issuer: /CN=34f75295bb95b55453844f32d6e39509d3bece45
Certificate serial: 0199FBEB4B0807E7C7240285064B4FCF0DCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPdSlbuVtVRThE8y1uOVCdO-zkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
Manifest number: 0156
Signing time: Sun 19 Oct 2025 10:02:05 +0000
Manifest this update: Sun 19 Oct 2025 10:02:05 +0000
Manifest next update: Mon 20 Oct 2025 10:02:05 +0000
Files and hashes: 1: NPdSlbuVtVRThE8y1uOVCdO-zkU.crl (hash: E5wCkTdUK6ynHqLMgs9N3Tj3N9rGG7CjfwGvDY4P/2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPdSlbuVtVRThE8y1uOVCdO-zkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:4b:08:07:e7:c7:24:02:85:06:4b:4f:cf:0d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f75295bb95b55453844f32d6e39509d3bece45
Validity
Not Before: Oct 19 10:02:05 2025 GMT
Not After : Oct 20 10:02:05 2025 GMT
Subject: CN=3d64b90555bb0d50020024dd1af170bb37b47a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:66:ec:fb:e9:d5:16:cf:e2:be:53:3a:f5:cf:
1e:ad:49:15:ad:1f:6d:52:cb:32:93:fe:df:71:2e:
53:29:17:7b:84:2e:e1:36:d4:06:71:5a:3f:77:db:
6a:1a:96:14:da:44:e7:fd:78:de:d9:4c:d1:7f:9f:
84:d2:02:74:68:a8:96:76:66:b7:74:25:f9:d8:26:
52:f6:3e:35:3b:98:a9:5d:20:23:79:d8:1b:63:80:
f9:6a:73:a1:ec:d0:84:78:68:f4:3a:80:15:b3:16:
d4:dd:df:05:70:48:10:6d:89:e7:87:50:9a:78:2e:
95:0b:80:f2:15:c9:61:60:26:2e:a6:89:1f:7e:2d:
fa:35:3b:40:1d:81:9e:be:8e:50:f6:38:be:5e:84:
59:3e:8e:40:4d:fe:c2:13:52:19:46:84:5c:29:b6:
39:a0:37:d2:81:a1:bc:d5:67:d6:f8:b9:0e:5e:07:
1a:3a:30:7d:b4:29:65:04:a2:5f:32:ef:13:f3:8c:
a7:04:e7:75:67:de:fa:52:e1:24:38:3e:f6:c7:da:
d9:68:e0:72:a0:ba:00:ed:b8:40:c7:16:90:3c:97:
86:f2:d6:c1:74:b0:5f:81:4c:c6:14:a4:35:b7:14:
ac:2a:d1:f5:dc:91:49:f5:cc:dc:78:75:a4:ed:8c:
58:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:64:B9:05:55:BB:0D:50:02:00:24:DD:1A:F1:70:BB:37:B4:7A:9A
X509v3 Authority Key Identifier:
keyid:34:F7:52:95:BB:95:B5:54:53:84:4F:32:D6:E3:95:09:D3:BE:CE:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPdSlbuVtVRThE8y1uOVCdO-zkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:87:28:33:e6:dd:29:93:4b:95:83:0b:d9:ec:f7:5d:ca:a2:
5d:cb:0b:9c:84:06:b9:e5:8e:c7:da:a8:d7:8a:8b:39:b3:cf:
f4:e6:f7:67:52:ea:bc:d7:d1:28:f5:5f:0f:7a:6c:cd:64:d0:
3d:2e:be:1f:7f:68:ac:a3:c6:0a:a4:06:05:0d:37:da:3f:0f:
0c:02:b1:2b:cc:04:2e:fa:fd:c7:a0:ba:8d:ef:d1:0e:24:63:
8c:a8:0d:82:2e:f3:10:f5:71:a1:bb:d5:3d:66:ba:97:0b:55:
5b:0e:ab:1b:9d:e0:8a:98:65:f8:da:e6:5e:c8:c6:84:e1:6a:
15:17:76:9f:a7:5c:2f:e0:95:d1:ed:33:9d:57:c6:aa:40:e4:
8d:bc:3e:01:cd:68:00:b4:f6:97:57:7e:e5:1b:fc:c1:5f:3b:
ed:9c:e6:ff:47:76:08:6d:14:bb:10:79:a8:c7:37:03:67:2c:
16:1a:ee:99:b6:2e:d5:f0:ea:a0:f8:74:58:bf:65:fa:a8:d9:
d6:5b:c4:05:da:44:99:99:5b:f1:c7:95:4a:03:8a:5f:17:54:
9d:79:1c:fa:e1:b3:42:cd:7b:32:18:7b:e1:5d:2c:d8:42:24:
dd:42:ca:72:8f:5b:86:5b:e8:74:7d:be:3b:32:7b:04:83:8c:
06:ae:45:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:45 2025 by rpki-client