Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft
File: npNqlnzlH9NBCUdGmWvO8WrL764.mft (raw, json)
Hash identifier: Gr7rxu/mYTc/XVgEuDQ7aZ6mulb1HdPwFKnzEGD9vIA=
Subject key identifier: 58:1E:51:2E:B7:1C:2A:6C:10:2E:43:3A:AA:D8:45:AF:D4:2E:ED:8D
Authority key identifier: 9E:93:6A:96:7C:E5:1F:D3:41:09:47:46:99:6B:CE:F1:6A:CB:EF:AE
Certificate issuer: /CN=9e936a967ce51fd341094746996bcef16acbefae
Certificate serial: 0199FBEB1938ED712686C419225D53203947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npNqlnzlH9NBCUdGmWvO8WrL764.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft
Manifest number: 0DA8
Signing time: Sun 19 Oct 2025 10:01:52 +0000
Manifest this update: Sun 19 Oct 2025 10:01:52 +0000
Manifest next update: Mon 20 Oct 2025 10:01:52 +0000
Files and hashes: 1: npNqlnzlH9NBCUdGmWvO8WrL764.crl (hash: tvlKCV/b8HIpNwroZLLxKadjqYyhl1F2cHCS0s4udUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft
rsync://rpki.ripe.net/repository/DEFAULT/npNqlnzlH9NBCUdGmWvO8WrL764.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:19:38:ed:71:26:86:c4:19:22:5d:53:20:39:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e936a967ce51fd341094746996bcef16acbefae
Validity
Not Before: Oct 19 10:01:52 2025 GMT
Not After : Oct 20 10:01:52 2025 GMT
Subject: CN=581e512eb71c2a6c102e433aaad845afd42eed8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:02:75:9b:41:f3:a7:f7:4a:23:4c:56:7d:d5:
d4:e0:b4:d8:8e:1b:3d:6b:57:05:9e:74:1b:5c:69:
f7:1e:dc:0b:ba:4d:bf:26:f4:15:ef:d4:24:29:7c:
08:bb:1f:35:1a:54:d4:95:8b:82:1f:1e:a7:cc:5e:
1c:88:88:29:d3:8c:56:3f:e9:ef:9b:b1:8c:f5:ea:
d6:42:fb:8d:74:b5:4e:0a:1b:fe:bf:9b:cf:0a:7e:
4f:a4:14:22:40:80:51:dc:f4:3d:cf:f6:bb:20:52:
d3:e7:93:4d:0e:c2:79:ed:45:1c:31:c4:ab:99:51:
f1:e8:af:59:f3:42:73:ca:6e:ad:3f:ea:5e:99:1f:
1a:85:d1:72:3a:5e:04:d9:e2:62:82:58:f6:4c:67:
48:30:10:a9:0b:8d:91:0b:19:4b:27:0c:e5:39:c8:
83:80:f9:b3:7e:be:a7:48:c4:a8:6b:ac:00:1b:23:
8d:f1:13:fd:bf:47:c2:65:c5:d2:95:c4:72:42:0b:
9f:2b:8d:ea:f9:e4:83:b2:d8:47:9b:3a:26:f2:3a:
56:e0:43:40:ea:36:fc:7c:48:9b:19:0b:1b:be:71:
0c:a9:40:9b:e3:f3:c8:12:3e:d6:de:c6:91:83:bb:
d8:e4:33:f0:18:05:da:12:e4:dd:dd:bc:30:5a:11:
86:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1E:51:2E:B7:1C:2A:6C:10:2E:43:3A:AA:D8:45:AF:D4:2E:ED:8D
X509v3 Authority Key Identifier:
keyid:9E:93:6A:96:7C:E5:1F:D3:41:09:47:46:99:6B:CE:F1:6A:CB:EF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npNqlnzlH9NBCUdGmWvO8WrL764.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:2c:4e:13:d9:61:7f:2a:7e:06:2b:d5:a1:b4:91:f1:e4:ba:
b2:bd:b7:70:d5:5e:fa:65:5f:85:be:fe:2c:dc:b6:be:9e:8b:
11:35:52:7a:23:52:3e:3b:72:73:bb:1b:81:ac:11:1f:d4:69:
df:ce:59:25:ef:f0:7a:a1:b2:01:12:b3:07:e7:b4:d6:13:66:
6f:65:c9:b1:30:73:a9:2f:16:8e:49:04:85:90:53:a9:c2:84:
b6:24:df:d0:57:d3:69:27:40:23:c8:54:bc:52:7e:ee:95:90:
54:e4:86:47:93:28:14:69:c4:5b:38:fc:dd:c6:e7:56:23:d3:
78:8b:62:a9:66:71:f9:a6:5e:cd:72:69:09:dc:c6:91:8c:24:
1f:66:10:6e:3f:78:36:d0:c4:7c:f8:c5:77:a8:d0:b8:31:df:
01:8e:ca:80:be:c1:ac:48:30:f0:65:4d:06:49:09:c4:31:19:
00:42:59:ed:43:10:bd:71:77:39:dd:d8:2c:23:a9:ac:3b:81:
97:af:d4:dc:c0:9c:5b:88:9b:bd:ea:35:f3:8c:4f:c8:9c:90:
1d:ae:a8:ab:a9:90:7a:e4:34:d2:c5:bb:b8:1c:5d:8d:5c:6a:
75:f2:cd:5c:db:53:fc:da:95:19:e5:92:7a:15:fe:b0:db:3e:
ad:70:24:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:12 2025 by rpki-client