Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft
File: npNqlnzlH9NBCUdGmWvO8WrL764.mft (raw, json)
Hash identifier: 2589AktPjw5FO5rDhXECtIx86O3QehvDDyMfrqHI43o=
Subject key identifier: DA:57:35:A6:8A:2E:3C:2B:43:9D:2C:C5:F0:41:68:D7:95:D0:38:35
Authority key identifier: 9E:93:6A:96:7C:E5:1F:D3:41:09:47:46:99:6B:CE:F1:6A:CB:EF:AE
Certificate issuer: /CN=9e936a967ce51fd341094746996bcef16acbefae
Certificate serial: 0198D472A861B8184039277CD7047C7EC9E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npNqlnzlH9NBCUdGmWvO8WrL764.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft
Manifest number: 0D0F
Signing time: Sat 23 Aug 2025 01:02:20 +0000
Manifest this update: Sat 23 Aug 2025 01:02:20 +0000
Manifest next update: Sun 24 Aug 2025 01:02:20 +0000
Files and hashes: 1: npNqlnzlH9NBCUdGmWvO8WrL764.crl (hash: N2pA6qqUNUVkp4i3MnZ51AhPKdgZMecdmotqRN4uB+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft
rsync://rpki.ripe.net/repository/DEFAULT/npNqlnzlH9NBCUdGmWvO8WrL764.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:a8:61:b8:18:40:39:27:7c:d7:04:7c:7e:c9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e936a967ce51fd341094746996bcef16acbefae
Validity
Not Before: Aug 23 01:02:20 2025 GMT
Not After : Aug 24 01:02:20 2025 GMT
Subject: CN=da5735a68a2e3c2b439d2cc5f04168d795d03835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3f:46:e8:a0:1a:15:51:74:00:a1:5f:08:95:
09:b5:c5:72:a2:e6:fd:e3:c0:8f:8e:06:f4:04:b4:
9d:cd:64:c3:2e:5b:39:c0:be:a3:83:29:6f:17:7f:
e7:4c:ba:ba:4d:62:ab:99:e6:58:52:84:1f:8b:c3:
fa:83:e9:e1:75:54:33:26:d7:76:71:9f:68:1e:43:
31:b2:85:69:12:97:8a:ce:1e:0a:5d:4a:3e:9e:25:
73:be:b3:70:97:9a:d5:f3:bf:5b:ca:5b:a1:ea:5f:
6d:dd:d9:a0:06:5d:6b:9e:d0:72:15:40:f7:ac:2b:
5c:2f:ba:4a:01:64:ff:21:f2:ef:28:48:2c:cb:f6:
1c:1a:4d:c2:b3:96:34:02:99:5d:81:f1:f3:65:f1:
7a:a8:de:1f:95:05:57:71:50:7a:1c:88:69:66:60:
be:42:fe:62:86:8a:85:6c:ac:d6:a2:cf:87:65:2e:
45:91:e8:69:52:54:25:12:ab:32:a7:cc:ee:95:15:
3e:5c:5b:d8:87:dc:fe:1b:2b:33:aa:b7:1b:4b:a3:
e3:c1:94:ff:5a:18:c5:91:de:33:18:41:c6:c1:5d:
54:e6:77:47:de:19:2b:1a:b8:e1:66:db:61:b0:fd:
28:d2:a2:67:f3:52:74:62:b5:8e:ce:3c:06:56:01:
76:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:57:35:A6:8A:2E:3C:2B:43:9D:2C:C5:F0:41:68:D7:95:D0:38:35
X509v3 Authority Key Identifier:
keyid:9E:93:6A:96:7C:E5:1F:D3:41:09:47:46:99:6B:CE:F1:6A:CB:EF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npNqlnzlH9NBCUdGmWvO8WrL764.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:45:a3:cb:c9:62:95:38:cc:24:0e:40:2b:1e:3f:f6:db:e5:
b0:66:c3:39:4c:42:7f:49:bc:5b:d4:25:b2:60:e6:0d:29:9f:
80:52:a7:84:6a:b2:68:48:fd:42:f8:88:2b:ee:21:73:e5:0a:
51:c1:2f:82:ee:be:9f:d3:fc:63:aa:61:ee:93:95:0b:e0:3a:
10:a8:80:a6:a1:44:43:c9:b8:55:d2:f4:b5:09:fd:46:20:0e:
c7:60:49:96:68:f3:29:f3:52:73:64:94:5a:10:f9:70:f4:53:
47:89:41:15:6f:37:2b:cf:e7:07:c7:a8:21:82:93:2e:98:67:
fd:c6:6f:db:de:65:32:d1:94:d3:d0:9f:b0:04:d7:c2:ec:74:
00:32:2f:0d:04:b7:e0:02:63:0d:a2:f3:cc:07:a7:1d:45:47:
65:e1:04:97:b6:50:f6:f6:d0:41:ea:2b:23:9f:54:e6:17:0e:
5d:b6:18:fd:58:ee:10:27:17:af:c2:98:0d:69:69:56:ab:af:
3c:f5:0d:04:86:60:eb:c8:83:63:b8:f5:7b:3f:ad:6e:3e:64:
b4:63:02:77:bd:43:cc:25:e9:ed:b2:fc:29:41:9d:e6:b0:2f:
38:cb:dd:66:12:61:41:cf:ea:da:6c:0c:57:62:25:ed:19:79:
8a:02:0a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:29:06 2025 by rpki-client