Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft
File: npNqlnzlH9NBCUdGmWvO8WrL764.mft (raw, json)
Hash identifier: oCdVWWktQQWybdzUlH8OX5SFQQd0NXHy9THK3SXLgh4=
Subject key identifier: E4:CC:83:83:20:52:4C:08:6C:13:C8:BE:0F:47:57:82:CD:16:62:42
Authority key identifier: 9E:93:6A:96:7C:E5:1F:D3:41:09:47:46:99:6B:CE:F1:6A:CB:EF:AE
Certificate issuer: /CN=9e936a967ce51fd341094746996bcef16acbefae
Certificate serial: 0197B88FF7B7298B0E1E45D684EDD0D33541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npNqlnzlH9NBCUdGmWvO8WrL764.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft
Manifest number: 0C7C
Signing time: Sat 28 Jun 2025 22:02:12 +0000
Manifest this update: Sat 28 Jun 2025 22:02:12 +0000
Manifest next update: Sun 29 Jun 2025 22:02:12 +0000
Files and hashes: 1: npNqlnzlH9NBCUdGmWvO8WrL764.crl (hash: f7EivHP5/e0qryn/dAfUNs1Xv8ZbQhYjgwBiekz3Hn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft
rsync://rpki.ripe.net/repository/DEFAULT/npNqlnzlH9NBCUdGmWvO8WrL764.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:f7:b7:29:8b:0e:1e:45:d6:84:ed:d0:d3:35:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e936a967ce51fd341094746996bcef16acbefae
Validity
Not Before: Jun 28 22:02:12 2025 GMT
Not After : Jun 29 22:02:12 2025 GMT
Subject: CN=e4cc838320524c086c13c8be0f475782cd166242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1c:89:39:e9:a2:8e:09:ba:92:12:bf:3f:c0:
f3:ec:87:ca:11:a6:aa:fd:ec:9d:00:9b:3d:7e:94:
eb:60:84:eb:9c:b9:04:34:c0:f0:ba:54:b1:62:11:
60:0a:a9:c1:18:ff:3c:7f:f3:d4:61:37:db:07:7b:
2a:40:9f:7b:3e:9f:7c:eb:10:77:2d:6e:33:70:a2:
aa:4a:e4:44:3f:1c:79:f4:0d:9d:3f:08:af:a2:9a:
a7:2f:79:43:03:5d:ab:70:48:77:42:1c:df:06:45:
3b:40:3f:f4:27:bb:b1:ba:95:ea:6f:9d:95:cd:75:
bd:0e:cf:3d:1d:b0:5f:b2:8e:32:b6:ab:ec:2a:8c:
ec:20:8a:00:15:ef:f3:21:f8:89:3e:49:93:98:b6:
29:0b:ca:4f:b0:f3:6b:2f:34:fd:82:b3:0c:f7:44:
93:d0:2d:df:f2:fa:fe:4c:bf:da:3b:4e:e6:4d:3c:
7a:5a:f9:fa:97:e0:44:0e:c9:db:bd:c8:c6:d7:b8:
da:03:cb:af:7d:10:93:26:94:93:96:12:80:aa:4a:
46:38:65:da:cd:2d:de:df:e7:3f:04:01:37:12:45:
c4:14:07:80:2d:93:e3:ab:00:27:01:88:0a:f0:ce:
4f:ef:9e:94:a3:4f:e1:71:15:95:95:77:e4:b0:51:
8f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CC:83:83:20:52:4C:08:6C:13:C8:BE:0F:47:57:82:CD:16:62:42
X509v3 Authority Key Identifier:
keyid:9E:93:6A:96:7C:E5:1F:D3:41:09:47:46:99:6B:CE:F1:6A:CB:EF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npNqlnzlH9NBCUdGmWvO8WrL764.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a3:0b:a0:d1:56:08:91:0a:22:58:28:61:b0:72:ec:2b:c1:
cf:af:91:92:6f:a3:08:3c:e3:69:a2:40:66:25:62:9d:08:f0:
3d:1a:bc:15:66:1a:a7:8c:92:2e:83:af:1c:f8:0a:5a:a0:38:
94:a5:81:0a:9a:f1:0f:ab:d0:7d:b5:69:f7:d6:df:ba:55:12:
3b:3c:22:a5:70:4a:78:f4:9a:b9:eb:17:11:b6:1a:c7:10:b5:
55:18:b6:b5:6b:4c:7f:78:63:20:58:8a:e9:ae:29:b8:ee:cf:
2e:52:c5:5b:d2:4b:c2:e0:85:f5:5d:d8:f9:01:58:63:ca:67:
24:c2:2e:e0:30:cc:3b:44:24:c7:f2:8e:1c:e3:b5:63:12:1c:
f1:c5:2c:bc:a0:82:14:f7:71:04:8e:e9:d2:7d:58:c0:89:f9:
3e:8a:b0:50:9f:5a:79:1a:39:90:08:f7:67:44:04:1b:a4:f7:
4d:b1:b4:9e:cb:63:70:55:15:ca:b6:69:dd:44:e2:86:d4:6e:
6d:ba:c7:17:e1:15:01:6a:b9:cd:ae:9f:90:e9:07:74:d5:44:
f0:1b:6e:99:51:b3:6d:dc:20:a6:cc:0d:f5:41:2f:be:81:97:
7c:90:ef:43:f2:09:a1:0b:a3:c3:94:46:36:86:0d:87:5c:84:
5a:67:dc:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4j/e3KYsOHkXWhO3Q0zVBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTM2YTk2N2NlNTFmZDM0MTA5NDc0Njk5NmJjZWYxNmFj
YmVmYWUwHhcNMjUwNjI4MjIwMjEyWhcNMjUwNjI5MjIwMjEyWjAzMTEwLwYDVQQD
EyhlNGNjODM4MzIwNTI0YzA4NmMxM2M4YmUwZjQ3NTc4MmNkMTY2MjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxyJOemijgm6khK/P8Dz7IfKEaaq
/eydAJs9fpTrYITrnLkENMDwulSxYhFgCqnBGP88f/PUYTfbB3sqQJ97Pp986xB3
LW4zcKKqSuREPxx59A2dPwivopqnL3lDA12rcEh3QhzfBkU7QD/0J7uxupXqb52V
zXW9Ds89HbBfso4ytqvsKozsIIoAFe/zIfiJPkmTmLYpC8pPsPNrLzT9grMM90ST
0C3f8vr+TL/aO07mTTx6Wvn6l+BEDsnbvcjG17jaA8uvfRCTJpSTlhKAqkpGOGXa
zS3e3+c/BAE3EkXEFAeALZPjqwAnAYgK8M5P756Uo0/hcRWVlXfksFGPkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOTMg4MgUkwIbBPIvg9HV4LNFmJCMB8GA1UdIwQY
MBaAFJ6TapZ85R/TQQlHRplrzvFqy++uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBOcWxuemxIOU5CQ1VkR21Xdk84V3JMNzY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kMjVlZDAtZmRkYy00YjI4LWI0N2Mt
MzM2MGNkZWRiMzVmLzEvbnBOcWxuemxIOU5CQ1VkR21Xdk84V3JMNzY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kMjVlZDAtZmRkYy00YjI4LWI0N2MtMzM2MGNkZWRiMzVm
LzEvbnBOcWxuemxIOU5CQ1VkR21Xdk84V3JMNzY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKqMLoNFW
CJEKIlgoYbBy7CvBz6+Rkm+jCDzjaaJAZiVinQjwPRq8FWYap4ySLoOvHPgKWqA4
lKWBCprxD6vQfbVp99bfulUSOzwipXBKePSauesXEbYaxxC1VRi2tWtMf3hjIFiK
6a4puO7PLlLFW9JLwuCF9V3Y+QFYY8pnJMIu4DDMO0Qkx/KOHOO1YxIc8cUsvKCC
FPdxBI7p0n1YwIn5PoqwUJ9aeRo5kAj3Z0QEG6T3TbG0nstjcFUVyrZp3UTihtRu
bbrHF+EVAWq5za6fkOkHdNVE8BtumVGzbdwgpswN9UEvvoGXfJDvQ/IJoQujw5RG
NoYNh1yEWmfcQg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:08:36 2025 by rpki-client