Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.mft
File: NPwYIZBVFuYYMg6eRxoTsqqslv8.mft (raw, json)
Hash identifier: ZQ4qUTeNzWp8hdnHcyyJopA+nkYgYi/s0Yi97pRqtnQ=
Subject key identifier: 0B:39:E5:AD:B9:EF:EA:72:E1:80:62:76:6D:98:BF:86:B2:19:53:ED
Authority key identifier: 34:FC:18:21:90:55:16:E6:18:32:0E:9E:47:1A:13:B2:AA:AC:96:FF
Certificate issuer: /CN=34fc1821905516e618320e9e471a13b2aaac96ff
Certificate serial: 0199FE46F2600A3FF81A24E0122ACCB70425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPwYIZBVFuYYMg6eRxoTsqqslv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 21:01:26 +0000
Manifest this update: Sun 19 Oct 2025 21:01:26 +0000
Manifest next update: Mon 20 Oct 2025 21:01:26 +0000
Files and hashes: 1: NPwYIZBVFuYYMg6eRxoTsqqslv8.crl (hash: ILffsyBcnAdWAaNrPgsAQQAeLL3SivIM1Sx8V6Y0rKI=)
2: rYKTx0nL3KpouO_aEG54Y81fax4.roa (hash: U8k6Z6wFvQxh2jmlJpmKkiKIDJ2daF7abfgpCSFD+Kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPwYIZBVFuYYMg6eRxoTsqqslv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:f2:60:0a:3f:f8:1a:24:e0:12:2a:cc:b7:04:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34fc1821905516e618320e9e471a13b2aaac96ff
Validity
Not Before: Oct 19 21:01:26 2025 GMT
Not After : Oct 20 21:01:26 2025 GMT
Subject: CN=0b39e5adb9efea72e18062766d98bf86b21953ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:10:4a:f9:95:b0:55:39:b2:ad:1b:27:9d:7a:
55:70:e3:a5:38:da:2e:e0:4c:6c:a4:56:ff:f7:da:
f3:1e:dc:96:f3:6e:d7:c0:e4:10:f1:f7:d3:64:f2:
88:d0:ad:83:45:e4:4c:8a:0d:82:df:53:2f:97:62:
54:b5:8e:ad:a6:8f:13:ee:12:f1:87:fa:34:27:90:
0d:d6:d6:67:bf:86:cb:47:06:d9:60:4f:59:07:fe:
89:51:39:a1:03:e1:db:ea:3a:15:b0:69:bd:7e:03:
dc:91:a2:53:95:2b:6a:a5:b1:50:68:40:fc:97:06:
1d:e2:98:c0:eb:58:b8:8d:b7:f8:4d:27:93:59:4c:
1c:86:2a:fb:16:1e:57:d6:b0:ea:1a:b3:b2:d5:c3:
34:98:7b:ec:01:ba:73:f6:ec:a4:53:e0:a9:11:10:
a9:30:90:5a:7d:9d:99:cb:11:5d:82:40:c5:97:c0:
25:0e:17:9e:ad:f3:f7:55:73:9b:74:16:8b:e1:52:
05:58:4a:5b:9b:e9:4d:24:38:7a:5f:6d:ff:9d:84:
4d:19:73:a1:5f:73:cd:4d:7d:7f:83:94:40:cb:e5:
27:b6:f8:c8:65:1e:ab:8b:c4:70:28:05:e6:dc:d4:
38:a5:3c:e3:d0:b1:37:21:62:95:d8:35:d2:6e:95:
21:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:39:E5:AD:B9:EF:EA:72:E1:80:62:76:6D:98:BF:86:B2:19:53:ED
X509v3 Authority Key Identifier:
keyid:34:FC:18:21:90:55:16:E6:18:32:0E:9E:47:1A:13:B2:AA:AC:96:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPwYIZBVFuYYMg6eRxoTsqqslv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b0:d5:64:00:40:50:7e:2a:8a:9d:8e:d3:75:51:89:0d:44:
a0:b8:0a:8d:27:87:aa:2b:c7:4e:44:5b:21:ad:83:ee:45:29:
b7:0e:49:53:cf:c0:59:6e:59:33:91:9a:d4:c7:7e:47:00:99:
25:f2:c3:11:d6:b3:3c:cd:de:af:a7:a2:29:db:94:84:58:e7:
23:e9:e5:77:69:3a:ac:c6:5b:3e:94:f9:e6:c0:8a:53:e6:09:
3c:15:2e:b9:72:de:69:ba:c8:03:67:34:be:d3:e4:76:12:ac:
0e:c1:d1:80:75:76:74:0a:24:1a:dc:be:34:97:2c:ad:2c:c3:
26:11:a5:e4:84:3f:97:7d:c5:b7:73:27:df:09:bc:24:3c:a8:
c6:57:c2:63:29:e7:8b:c6:dd:4c:c6:56:ee:ab:f7:7f:b9:ee:
3c:40:81:ab:f4:cc:db:6b:c0:e6:9f:fb:b4:79:66:40:77:bc:
d7:4e:33:79:4e:c0:d6:b0:76:9d:b4:05:0b:94:41:f5:72:1d:
16:a4:1f:6c:65:d3:33:26:a7:bc:a9:6c:8c:ef:38:e2:e5:94:
b5:0a:f2:ad:ed:c2:86:8c:ef:c7:6c:4b:9a:b1:6f:ab:90:c6:
67:80:d0:be:98:18:94:87:20:63:0c:d7:51:c3:7f:c4:a8:9d:
c4:b4:74:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+RvJgCj/4GiTgEirMtwQlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZmMxODIxOTA1NTE2ZTYxODMyMGU5ZTQ3MWExM2IyYWFh
Yzk2ZmYwHhcNMjUxMDE5MjEwMTI2WhcNMjUxMDIwMjEwMTI2WjAzMTEwLwYDVQQD
EygwYjM5ZTVhZGI5ZWZlYTcyZTE4MDYyNzY2ZDk4YmY4NmIyMTk1M2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBBK+ZWwVTmyrRsnnXpVcOOlONou
4ExspFb/99rzHtyW827XwOQQ8ffTZPKI0K2DReRMig2C31Mvl2JUtY6tpo8T7hLx
h/o0J5AN1tZnv4bLRwbZYE9ZB/6JUTmhA+Hb6joVsGm9fgPckaJTlStqpbFQaED8
lwYd4pjA61i4jbf4TSeTWUwchir7Fh5X1rDqGrOy1cM0mHvsAbpz9uykU+CpERCp
MJBafZ2ZyxFdgkDFl8AlDheerfP3VXObdBaL4VIFWEpbm+lNJDh6X23/nYRNGXOh
X3PNTX1/g5RAy+UntvjIZR6ri8RwKAXm3NQ4pTzj0LE3IWKV2DXSbpUhwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAs55a257+py4YBidm2Yv4ayGVPtMB8GA1UdIwQY
MBaAFDT8GCGQVRbmGDIOnkcaE7KqrJb/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlB3WUlaQlZGdVlZTWc2ZVJ4b1RzcXFzbHY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84NGI1NzUtNTU2My00ZjFiLTg2NWEt
ODE1ZWVhMzNiMzViLzEvTlB3WUlaQlZGdVlZTWc2ZVJ4b1RzcXFzbHY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84NGI1NzUtNTU2My00ZjFiLTg2NWEtODE1ZWVhMzNiMzVi
LzEvTlB3WUlaQlZGdVlZTWc2ZVJ4b1RzcXFzbHY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXbDVZABA
UH4qip2O03VRiQ1EoLgKjSeHqivHTkRbIa2D7kUptw5JU8/AWW5ZM5Ga1Md+RwCZ
JfLDEdazPM3er6eiKduUhFjnI+nld2k6rMZbPpT55sCKU+YJPBUuuXLeabrIA2c0
vtPkdhKsDsHRgHV2dAokGty+NJcsrSzDJhGl5IQ/l33Ft3Mn3wm8JDyoxlfCYynn
i8bdTMZW7qv3f7nuPECBq/TM22vA5p/7tHlmQHe8104zeU7A1rB2nbQFC5RB9XId
FqQfbGXTMyanvKlsjO844uWUtQryre3Chozvx2xLmrFvq5DGZ4DQvpgYlIcgYwzX
UcN/xKidxLR0UQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:03 2025 by rpki-client