Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
File: npzXqbifTgVovUoLbCwRzRfn8OE.mft (raw, json)
Hash identifier: 0dHbV/6yDKdAYnwVvmeDZKZJW8F4BQv04O8WYVtdyKU=
Subject key identifier: 24:1A:C7:28:1B:34:BF:82:5D:0A:45:A3:AB:AF:BA:55:93:C7:1F:FA
Authority key identifier: 9E:9C:D7:A9:B8:9F:4E:05:68:BD:4A:0B:6C:2C:11:CD:17:E7:F0:E1
Certificate issuer: /CN=9e9cd7a9b89f4e0568bd4a0b6c2c11cd17e7f0e1
Certificate serial: 0198D4E0C68A92B2E37D73D72E7CDA5E29E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npzXqbifTgVovUoLbCwRzRfn8OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
Manifest number: 03FB
Signing time: Sat 23 Aug 2025 03:02:37 +0000
Manifest this update: Sat 23 Aug 2025 03:02:37 +0000
Manifest next update: Sun 24 Aug 2025 03:02:37 +0000
Files and hashes: 1: npzXqbifTgVovUoLbCwRzRfn8OE.crl (hash: +u6in8NZMAIeM/65S/mro3d/fEfxo0xgh61LfM+XaOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/npzXqbifTgVovUoLbCwRzRfn8OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:c6:8a:92:b2:e3:7d:73:d7:2e:7c:da:5e:29:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e9cd7a9b89f4e0568bd4a0b6c2c11cd17e7f0e1
Validity
Not Before: Aug 23 03:02:37 2025 GMT
Not After : Aug 24 03:02:37 2025 GMT
Subject: CN=241ac7281b34bf825d0a45a3abafba5593c71ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:de:2d:ca:5d:b4:a0:d8:c7:dc:18:f9:0b:ba:
d3:81:a1:66:df:e9:47:94:85:34:b2:cb:79:6f:09:
24:0f:d8:ca:e8:1b:eb:e8:2b:03:8e:d3:50:f9:b1:
e1:4f:7b:01:1c:8e:ba:ac:cf:e7:12:5b:a7:14:cf:
e4:83:75:e7:99:82:27:1f:34:1c:ba:af:e8:84:4b:
47:5d:77:df:ec:b3:9f:bd:62:0e:07:80:f1:67:b7:
7f:3f:82:be:af:d6:90:88:6c:0e:b4:72:80:91:44:
a4:a1:76:12:e9:cf:4c:e1:b4:28:7e:9f:e1:87:37:
60:b4:14:8b:79:58:f5:18:23:5a:30:bc:15:eb:e2:
39:35:5b:98:54:18:58:5c:8c:f6:63:32:f5:9a:04:
54:7d:ad:11:16:8d:84:3e:5d:9b:4f:ed:61:c3:26:
0e:9a:f1:6e:b7:ce:7f:3b:36:89:c9:22:94:c5:1c:
07:b1:1a:1b:67:ed:83:34:90:35:fd:c6:8d:da:95:
1a:4d:0e:6d:76:56:28:08:c6:ad:b4:46:ea:9b:c7:
5a:d8:6a:ba:22:e2:54:77:6b:31:f1:d9:88:9c:3e:
86:49:fb:1f:b8:a4:26:a0:af:c7:14:89:90:df:11:
a7:d5:bd:a0:3f:80:a1:b0:d1:0f:7d:d0:a9:73:3d:
a1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1A:C7:28:1B:34:BF:82:5D:0A:45:A3:AB:AF:BA:55:93:C7:1F:FA
X509v3 Authority Key Identifier:
keyid:9E:9C:D7:A9:B8:9F:4E:05:68:BD:4A:0B:6C:2C:11:CD:17:E7:F0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npzXqbifTgVovUoLbCwRzRfn8OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:65:df:95:c4:d0:8c:37:1a:d7:70:2f:6a:73:02:9e:18:1a:
2b:a2:80:71:28:dd:a8:09:0e:0f:ab:4b:6d:16:93:ae:18:e8:
03:92:19:f3:28:22:67:e2:be:a9:c2:87:8c:b8:94:10:f3:fc:
cb:06:c3:1b:b2:c1:f0:c1:dc:80:8a:88:61:39:72:07:71:f4:
13:b4:0f:82:2b:b3:2b:39:19:45:80:5d:77:14:0d:e6:f3:68:
11:36:3c:5a:9d:00:da:df:54:3a:79:df:a8:fc:51:0e:27:25:
e9:7b:91:11:a4:1c:25:96:94:44:87:da:2e:bb:96:f3:d7:bb:
77:be:66:b1:7d:2b:39:ad:e3:1a:93:49:57:78:33:4c:2f:4d:
4e:2b:94:d4:88:c5:13:de:f1:a3:bb:13:bc:b1:c3:0b:aa:a2:
11:37:4b:c8:23:62:3c:f1:11:8f:ad:fa:55:49:4b:32:4e:54:
66:e8:34:13:dc:ae:b8:ad:a8:c7:b8:fa:ce:e6:89:7c:23:f8:
b2:72:21:11:2d:ce:9c:76:73:dc:33:57:ad:4e:ba:7e:b2:47:
3d:fe:eb:57:37:94:3b:00:5c:e6:24:6b:6d:42:05:58:9f:93:
eb:29:89:13:43:55:2b:ae:de:65:12:43:3b:6c:73:87:85:0c:
22:b6:88:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:39:46 2025 by rpki-client