Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
File: npzXqbifTgVovUoLbCwRzRfn8OE.mft (raw, json)
Hash identifier: 4rBehCPlVIdCjlbsIAVX1CfV4NtaCJy+1PrJEQ1OhbU=
Subject key identifier: 5B:C7:32:52:05:22:CB:0A:4C:61:0E:0F:58:EA:66:56:CA:D5:7A:AF
Authority key identifier: 9E:9C:D7:A9:B8:9F:4E:05:68:BD:4A:0B:6C:2C:11:CD:17:E7:F0:E1
Certificate issuer: /CN=9e9cd7a9b89f4e0568bd4a0b6c2c11cd17e7f0e1
Certificate serial: 0199FE46D1C9437729CEA0F11A47CC54A4DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npzXqbifTgVovUoLbCwRzRfn8OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
Manifest number: 0495
Signing time: Sun 19 Oct 2025 21:01:17 +0000
Manifest this update: Sun 19 Oct 2025 21:01:17 +0000
Manifest next update: Mon 20 Oct 2025 21:01:17 +0000
Files and hashes: 1: npzXqbifTgVovUoLbCwRzRfn8OE.crl (hash: to9jUpfJuJlOoOf6aAlTbUa+iB1XTtN7WLdA+s2tSSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/npzXqbifTgVovUoLbCwRzRfn8OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:d1:c9:43:77:29:ce:a0:f1:1a:47:cc:54:a4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e9cd7a9b89f4e0568bd4a0b6c2c11cd17e7f0e1
Validity
Not Before: Oct 19 21:01:17 2025 GMT
Not After : Oct 20 21:01:17 2025 GMT
Subject: CN=5bc732520522cb0a4c610e0f58ea6656cad57aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b2:57:40:b9:fd:aa:f0:c6:4d:db:eb:b4:da:
fd:54:98:75:a3:74:64:35:c2:f1:5b:9c:27:f5:ae:
75:5c:1c:6b:3d:2c:56:db:cd:ac:f5:2b:48:b4:4f:
a3:6c:70:f8:c4:21:a4:84:28:5b:a5:f9:f6:85:c5:
fe:f0:b1:2e:de:01:68:6b:57:7a:37:d6:aa:83:6b:
bd:5e:d6:a2:71:ed:04:7f:e9:98:64:af:aa:a2:39:
73:07:d6:f0:26:f2:df:4b:09:dd:1c:3c:bb:ef:03:
e0:8a:a1:85:0e:19:58:b2:0a:f2:2e:4f:05:05:48:
51:d9:86:6c:54:4a:db:64:53:c0:0d:64:05:30:e5:
ea:77:73:c5:81:08:e5:8f:f2:20:83:cd:70:78:f8:
cf:ef:ee:57:1f:1c:6f:ba:7a:c1:8d:b4:7b:2d:f8:
2d:f1:d3:a9:5d:2a:c8:db:2e:c0:ad:e0:ee:d2:fd:
9d:87:c7:2d:c4:ee:f6:64:75:4b:3b:0f:73:7d:bb:
ca:59:06:0e:c4:a7:5c:fb:88:e6:e8:35:0a:1a:e1:
5d:fe:f7:19:14:ea:b5:7b:26:56:a0:a9:84:0c:c8:
03:f4:61:1e:7b:9d:55:a1:b8:04:76:fa:d7:bd:da:
cf:6f:f0:3a:0f:57:23:e5:70:60:10:d8:34:91:e7:
3f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C7:32:52:05:22:CB:0A:4C:61:0E:0F:58:EA:66:56:CA:D5:7A:AF
X509v3 Authority Key Identifier:
keyid:9E:9C:D7:A9:B8:9F:4E:05:68:BD:4A:0B:6C:2C:11:CD:17:E7:F0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npzXqbifTgVovUoLbCwRzRfn8OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:a2:91:01:2b:81:cf:9c:bb:e1:96:a6:d7:f2:eb:c0:cd:be:
6e:c3:bb:12:63:3c:a5:f8:d4:41:58:43:14:68:8c:48:99:ff:
4c:b0:a0:e1:29:ef:4a:86:90:06:5a:fe:17:d5:4d:49:7f:05:
47:64:5e:d3:de:41:dd:fc:19:fd:0e:ac:63:9d:6e:44:d0:21:
80:ff:36:f0:b3:70:d2:1b:c5:4e:94:51:14:78:89:91:20:4a:
b9:47:86:10:71:a5:ef:7b:f5:a7:74:11:c5:8b:c7:f7:e0:4a:
0a:01:06:31:67:ee:55:9c:f9:bb:fc:b6:29:ab:fc:10:66:48:
07:0a:fd:2d:d0:bd:3b:d5:c2:b0:c9:92:c2:c2:f2:f6:57:ee:
95:2e:7c:00:2c:e4:54:df:e2:73:18:a5:ec:fd:94:66:91:d6:
fa:08:b2:96:67:9f:7e:3f:3c:53:be:f3:39:97:8c:83:6c:88:
64:88:af:a4:4b:b7:aa:5d:de:7c:6d:96:74:ab:d7:5c:16:7c:
25:4b:3e:98:23:f3:ad:80:d7:01:82:78:76:79:bb:96:bf:9f:
6d:ee:28:bd:be:10:58:f1:f3:e5:8f:f4:18:80:ca:5e:a0:80:
85:8a:ad:b3:ac:21:bb:47:8f:45:fe:f1:25:6b:07:67:8d:e2:
88:9c:ef:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:55:51 2025 by rpki-client