Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
File: NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft (raw, json)
Hash identifier: zcm8unlqjNv6PgOkRNW0A860HZu0xlsvzVWSbV5ifZQ=
Subject key identifier: B8:88:0D:64:DE:5D:98:4A:73:2E:90:DA:BA:5C:73:30:B2:71:AF:7E
Authority key identifier: 34:F7:83:61:A0:77:B0:D7:89:13:5C:CD:68:B1:26:1D:B1:38:F9:50
Certificate issuer: /CN=34f78361a077b0d789135ccd68b1261db138f950
Certificate serial: 0199FDD9AD33F5482877946D9ECC4214F0C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
Manifest number: 10DE
Signing time: Sun 19 Oct 2025 19:02:05 +0000
Manifest this update: Sun 19 Oct 2025 19:02:05 +0000
Manifest next update: Mon 20 Oct 2025 19:02:05 +0000
Files and hashes: 1: BT-QKLCE4MZ0YtWA2nAk6qpxv6g.roa (hash: t+OljMW5uOHxrHIlucZj5mZPbb09wnIuaUx+FWzOywc=)
2: NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl (hash: Fd32qEtqx9GUhDaCtVXhnYAU2DLNM9oYqjGTrWnQZtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:ad:33:f5:48:28:77:94:6d:9e:cc:42:14:f0:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f78361a077b0d789135ccd68b1261db138f950
Validity
Not Before: Oct 19 19:02:05 2025 GMT
Not After : Oct 20 19:02:05 2025 GMT
Subject: CN=b8880d64de5d984a732e90daba5c7330b271af7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9d:5e:b5:c3:d7:98:14:b9:4a:9f:e0:99:94:
e8:5b:db:96:2e:1c:13:13:3b:89:8c:5a:a7:48:32:
ff:38:5f:37:6b:d0:ba:16:b3:72:92:b7:14:35:29:
80:43:08:bb:4d:3f:59:da:62:14:62:63:3b:8c:f4:
03:d9:a9:e8:50:29:02:c8:89:f8:a5:ac:3d:c2:50:
0a:6b:f8:29:d9:35:b2:ab:af:30:bd:c6:0e:b4:09:
73:80:89:b0:21:e4:43:9b:4c:02:f4:b1:d3:b5:d3:
6f:31:4e:cd:b6:8d:d5:48:b4:f4:88:da:c4:c5:86:
17:b7:af:b3:1e:63:f6:3d:c4:0a:ac:41:d9:7b:2e:
a6:ee:91:8a:6d:55:8d:1f:ab:28:5e:fb:de:9a:25:
ff:40:ca:5c:c8:13:63:a7:90:11:d1:ef:fd:5c:cc:
a2:5b:d7:1b:60:e3:1e:c8:16:cd:0f:0d:33:8c:f3:
20:15:d1:9a:ad:c1:17:34:c5:cf:ab:4c:6f:1f:7b:
61:b8:6b:32:c3:36:59:57:d5:74:4a:d3:c2:c8:57:
02:41:26:cb:48:f6:ad:47:4d:bf:6f:07:e3:f8:19:
92:82:a1:9e:dc:bf:19:9f:d8:67:ea:fb:ac:b4:c1:
0c:8f:65:67:56:f2:75:cb:f4:71:9e:8f:82:bd:a7:
7e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:88:0D:64:DE:5D:98:4A:73:2E:90:DA:BA:5C:73:30:B2:71:AF:7E
X509v3 Authority Key Identifier:
keyid:34:F7:83:61:A0:77:B0:D7:89:13:5C:CD:68:B1:26:1D:B1:38:F9:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:54:51:ea:60:af:65:f7:97:57:e0:7c:ed:42:af:bd:90:33:
c1:64:91:d5:eb:b4:be:ab:66:6e:fc:bc:42:e0:d3:18:ca:45:
ad:45:d0:63:a9:ec:6b:8e:c4:17:9e:6b:51:52:fe:81:a3:d8:
27:1b:c7:7a:36:38:1a:37:f1:0b:01:6c:45:27:1c:1e:00:cf:
61:1a:01:ff:af:ee:b7:99:2d:2f:f6:8a:44:83:2f:0e:03:eb:
84:c9:92:59:cc:37:70:95:92:36:15:1c:a2:04:e6:36:ce:4f:
7f:09:f6:ac:03:fb:b8:38:ef:5c:50:e8:42:3c:86:14:12:14:
50:4e:d6:66:79:2a:d5:f5:dd:f6:75:e1:df:ba:ac:9b:45:8e:
48:b2:5f:d3:c4:41:d8:dc:07:6b:2e:7c:35:d7:18:39:28:f5:
5e:e7:8a:d2:e5:37:c9:c0:62:0d:df:25:f2:32:7d:7c:c6:4f:
3d:97:63:2b:81:75:94:aa:97:af:96:b8:74:d2:d9:63:d5:21:
cb:91:ad:a3:c0:97:52:c3:12:7f:a7:95:94:cc:b6:e3:4e:60:
59:09:cf:e6:4d:22:64:f9:a3:bd:b4:57:0c:41:c1:42:4f:b4:
e4:11:af:21:25:f7:32:7d:03:e0:e2:26:51:9c:ac:67:3c:a6:
fb:f2:c2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:31:40 2025 by rpki-client