Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.mft
File: naPpS0JKXF0_MDICt1QWm4sMlfo.mft (raw, json)
Hash identifier: A6rFF3kPWtR9TzpOE2rHhrHPC6dhgeB7DxJQWPe3h+M=
Subject key identifier: A4:7A:2D:23:C8:BA:13:5D:C9:67:BE:84:29:2E:0D:D0:AE:AC:1B:00
Authority key identifier: 9D:A3:E9:4B:42:4A:5C:5D:3F:30:32:02:B7:54:16:9B:8B:0C:95:FA
Certificate issuer: /CN=9da3e94b424a5c5d3f303202b754169b8b0c95fa
Certificate serial: 0199FC586EE363BFE4584BBFA2BE4A9CD93B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naPpS0JKXF0_MDICt1QWm4sMlfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.mft
Manifest number: 07C9
Signing time: Sun 19 Oct 2025 12:01:17 +0000
Manifest this update: Sun 19 Oct 2025 12:01:17 +0000
Manifest next update: Mon 20 Oct 2025 12:01:17 +0000
Files and hashes: 1: naPpS0JKXF0_MDICt1QWm4sMlfo.crl (hash: OzA3uVryxgdJjbLTqzNhUON1GVgiYShx5PF6WM6W50g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/naPpS0JKXF0_MDICt1QWm4sMlfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:6e:e3:63:bf:e4:58:4b:bf:a2:be:4a:9c:d9:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da3e94b424a5c5d3f303202b754169b8b0c95fa
Validity
Not Before: Oct 19 12:01:17 2025 GMT
Not After : Oct 20 12:01:17 2025 GMT
Subject: CN=a47a2d23c8ba135dc967be84292e0dd0aeac1b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:44:e1:c5:34:64:f2:50:2a:2c:02:f6:b5:1c:
66:93:0f:0c:2a:be:0e:38:fd:ac:da:ff:95:78:94:
89:d5:83:d8:c0:4c:3b:b5:0b:a3:bf:99:5a:41:10:
02:53:8b:9f:5b:c3:db:28:14:e6:6b:52:db:e6:3a:
4a:41:1f:af:be:f8:a3:f0:f2:14:bf:6f:5b:26:70:
40:96:9e:14:dd:65:ff:a7:4f:b0:8e:9d:af:b2:46:
44:e5:ed:74:0f:d3:9a:39:ed:b4:4b:54:4b:ad:fc:
ad:16:fe:e2:21:05:b9:ec:37:7a:1a:66:14:38:e3:
33:78:86:b0:b0:38:5d:50:11:db:f0:a5:f3:97:e4:
d4:2d:08:a2:e6:24:70:ce:32:c7:cc:10:fe:84:5f:
bc:7c:d6:f7:f5:d8:03:19:d4:75:3e:f8:87:7c:75:
47:14:a4:5e:5b:d0:55:ed:ee:69:c3:a7:e3:24:d4:
85:3c:99:b2:78:e7:87:2b:71:97:3b:41:85:f8:46:
63:e8:64:7c:4a:93:0a:63:7a:fb:14:71:1a:76:98:
2d:35:3e:cd:45:eb:16:d2:87:fe:af:21:a9:11:82:
bf:c2:c6:d4:d6:14:e6:2c:97:ef:89:ec:86:2d:6e:
0f:43:31:0e:0d:c5:42:d9:18:fd:7c:b4:a2:80:4b:
5a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:7A:2D:23:C8:BA:13:5D:C9:67:BE:84:29:2E:0D:D0:AE:AC:1B:00
X509v3 Authority Key Identifier:
keyid:9D:A3:E9:4B:42:4A:5C:5D:3F:30:32:02:B7:54:16:9B:8B:0C:95:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naPpS0JKXF0_MDICt1QWm4sMlfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:4c:a8:bd:9e:22:4f:ab:fe:68:8c:80:d6:3a:12:dd:51:11:
99:bf:60:69:cf:0e:81:be:e6:15:b3:be:95:34:21:b4:80:f6:
b7:7f:e0:ab:d8:9e:06:77:32:01:dd:67:9a:9c:35:f4:e4:cb:
34:64:84:7e:ae:18:20:f2:aa:66:d6:62:68:d4:81:bf:27:6f:
ff:10:fe:cd:3d:62:f4:a7:82:d6:4a:d2:82:60:b0:6a:25:7d:
e4:70:e9:86:ce:c1:5a:04:98:2d:d8:0e:63:76:4d:10:a9:8f:
77:65:34:81:d1:06:62:93:a9:a0:e3:e6:2e:a2:da:d5:b5:96:
fc:d2:cd:7e:6a:2a:1e:7d:2c:79:fe:b2:d1:d3:f1:8c:6d:97:
54:86:52:11:e6:f2:30:ca:b5:f6:ce:a1:6b:95:31:dd:2e:30:
10:ac:7b:c6:09:9d:e7:a1:3e:0a:79:f9:f1:df:40:8a:7a:be:
9c:94:40:cb:9a:47:7f:02:76:99:4a:f1:c5:d2:41:f7:02:f4:
72:c3:4e:ef:11:c8:a0:7d:da:67:e5:85:64:ec:5d:a5:8c:22:
74:9f:58:81:cd:4f:fe:74:7d:02:31:61:07:14:65:d1:2c:01:
ac:71:28:6d:92:ec:f0:89:30:ba:86:de:1c:d0:42:44:8f:54:
56:13:0e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:50:02 2025 by rpki-client