Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/06fa69-cfd9-4f7f-b1b2-800792f59329/1/npWzJ2xWYmGPOcvBVYdAy-76GC0.mft
File: npWzJ2xWYmGPOcvBVYdAy-76GC0.mft (raw, json)
Hash identifier: 2tDZ6K0vL+IO990zG+FETTgRFp/xw2+3Hi0b89jtTeg=
Subject key identifier: 25:54:7C:6C:5C:0F:E7:F2:89:71:FA:89:42:72:39:78:28:08:DC:0F
Authority key identifier: 9E:95:B3:27:6C:56:62:61:8F:39:CB:C1:55:87:40:CB:EE:FA:18:2D
Certificate issuer: /CN=9e95b3276c5662618f39cbc1558740cbeefa182d
Certificate serial: 01984966142362578B4441F884DE513C7392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWzJ2xWYmGPOcvBVYdAy-76GC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/06fa69-cfd9-4f7f-b1b2-800792f59329/1/npWzJ2xWYmGPOcvBVYdAy-76GC0.mft
Manifest number: 15FE
Signing time: Sun 27 Jul 2025 01:01:23 +0000
Manifest this update: Sun 27 Jul 2025 01:01:23 +0000
Manifest next update: Mon 28 Jul 2025 01:01:23 +0000
Files and hashes: 1: npWzJ2xWYmGPOcvBVYdAy-76GC0.crl (hash: X9xy667qAJMCZw1iqqgJLC4Hh6Y715uLs93N/fpMROA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/06fa69-cfd9-4f7f-b1b2-800792f59329/1/npWzJ2xWYmGPOcvBVYdAy-76GC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/06fa69-cfd9-4f7f-b1b2-800792f59329/1/npWzJ2xWYmGPOcvBVYdAy-76GC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWzJ2xWYmGPOcvBVYdAy-76GC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:14:23:62:57:8b:44:41:f8:84:de:51:3c:73:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95b3276c5662618f39cbc1558740cbeefa182d
Validity
Not Before: Jul 27 01:01:23 2025 GMT
Not After : Jul 28 01:01:23 2025 GMT
Subject: CN=25547c6c5c0fe7f28971fa89427239782808dc0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:68:8a:5f:ca:54:7a:09:96:57:fb:a9:4e:fc:
16:4a:12:4b:8a:32:15:39:56:85:7f:7d:96:98:22:
78:a0:d2:e1:a6:8c:89:0c:ee:d6:78:f1:14:0e:b7:
13:90:ab:f0:bb:6b:bb:5a:e2:d9:8a:b9:28:99:0c:
7c:e4:cc:1b:9b:b4:80:99:fb:fa:63:fe:9a:4b:0a:
be:a2:5d:92:96:9b:c0:01:fb:80:7b:f4:8b:30:03:
76:a3:36:b8:04:12:8e:f0:d3:d7:15:1f:c3:ca:a1:
a5:5d:87:8d:d8:fd:53:0f:85:5e:d9:f0:60:28:e8:
62:8b:88:70:08:c5:4c:5e:31:20:dc:00:09:df:03:
a5:48:81:8e:c3:80:60:c7:40:12:e9:f0:44:ad:84:
0d:08:46:0e:99:32:c0:03:d6:16:68:34:5a:d0:57:
fe:72:8d:24:90:7b:6b:46:27:0e:06:61:7a:73:31:
aa:b5:75:24:a9:65:f9:cc:3a:1a:6e:f9:fd:03:de:
b2:20:d9:09:18:bd:77:2c:ee:dc:36:00:f3:64:c4:
3a:0a:bf:b4:fe:56:f3:46:1f:51:66:f4:f4:92:76:
6c:97:85:94:0d:b6:16:2a:53:87:7b:25:9d:07:d2:
b6:65:af:b7:16:89:6e:a8:bf:b4:a5:70:bc:94:8e:
de:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:54:7C:6C:5C:0F:E7:F2:89:71:FA:89:42:72:39:78:28:08:DC:0F
X509v3 Authority Key Identifier:
keyid:9E:95:B3:27:6C:56:62:61:8F:39:CB:C1:55:87:40:CB:EE:FA:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWzJ2xWYmGPOcvBVYdAy-76GC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/06fa69-cfd9-4f7f-b1b2-800792f59329/1/npWzJ2xWYmGPOcvBVYdAy-76GC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/06fa69-cfd9-4f7f-b1b2-800792f59329/1/npWzJ2xWYmGPOcvBVYdAy-76GC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:7a:31:04:00:7b:a0:3a:a5:a0:04:99:b1:c5:60:5e:eb:9a:
13:ee:da:7b:58:bc:b0:c5:37:0d:47:42:60:69:a6:3e:06:15:
e8:a6:5d:d3:8b:74:fc:9d:e6:bb:e3:e9:84:90:c1:21:64:7a:
14:29:fe:30:96:27:46:3d:cd:fc:20:62:1d:d0:e7:c8:e1:a2:
1e:8e:80:2d:c7:de:ee:f3:09:1a:e2:2e:03:3f:9e:bb:f9:14:
c0:0e:17:b7:a4:dd:c7:21:b6:0b:20:fa:16:5b:97:cb:eb:60:
af:4d:f0:37:f2:a9:ed:32:55:de:96:cc:9f:e3:1f:bf:3d:c7:
df:b1:c1:88:39:16:80:02:4a:30:2e:c0:93:24:53:5d:c7:a1:
7c:19:f5:6f:14:c2:a9:82:54:d3:c9:37:41:ab:84:a4:76:e0:
cf:c4:f5:7b:97:ae:c1:36:07:49:d6:05:3e:15:71:51:1a:7c:
ce:a3:82:cf:d6:60:4f:a1:4e:4b:55:c0:4f:b4:60:3b:6a:10:
b9:9f:01:bd:13:bd:19:0e:b6:a8:45:cf:e8:05:74:40:72:5b:
db:bf:e0:bb:8b:d4:74:b7:1c:5e:9b:a9:89:d4:ce:c0:4b:29:
3e:61:62:d4:fd:77:09:49:0c:4c:57:b6:77:d8:87:f5:b7:71:
24:43:10:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZhQjYleLREH4hN5RPHOSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTViMzI3NmM1NjYyNjE4ZjM5Y2JjMTU1ODc0MGNiZWVm
YTE4MmQwHhcNMjUwNzI3MDEwMTIzWhcNMjUwNzI4MDEwMTIzWjAzMTEwLwYDVQQD
EygyNTU0N2M2YzVjMGZlN2YyODk3MWZhODk0MjcyMzk3ODI4MDhkYzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWiKX8pUegmWV/upTvwWShJLijIV
OVaFf32WmCJ4oNLhpoyJDO7WePEUDrcTkKvwu2u7WuLZirkomQx85Mwbm7SAmfv6
Y/6aSwq+ol2SlpvAAfuAe/SLMAN2oza4BBKO8NPXFR/DyqGlXYeN2P1TD4Ve2fBg
KOhii4hwCMVMXjEg3AAJ3wOlSIGOw4Bgx0AS6fBErYQNCEYOmTLAA9YWaDRa0Ff+
co0kkHtrRicOBmF6czGqtXUkqWX5zDoabvn9A96yINkJGL13LO7cNgDzZMQ6Cr+0
/lbzRh9RZvT0knZsl4WUDbYWKlOHeyWdB9K2Za+3FoluqL+0pXC8lI7eAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVUfGxcD+fyiXH6iUJyOXgoCNwPMB8GA1UdIwQY
MBaAFJ6VsydsVmJhjznLwVWHQMvu+hgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXekoyeFdZbUdQT2N2QlZZZEF5LTc2R0MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8wNmZhNjktY2ZkOS00ZjdmLWIxYjIt
ODAwNzkyZjU5MzI5LzEvbnBXekoyeFdZbUdQT2N2QlZZZEF5LTc2R0MwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8wNmZhNjktY2ZkOS00ZjdmLWIxYjItODAwNzkyZjU5MzI5
LzEvbnBXekoyeFdZbUdQT2N2QlZZZEF5LTc2R0MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAInoxBAB7
oDqloASZscVgXuuaE+7ae1i8sMU3DUdCYGmmPgYV6KZd04t0/J3mu+PphJDBIWR6
FCn+MJYnRj3N/CBiHdDnyOGiHo6ALcfe7vMJGuIuAz+eu/kUwA4Xt6TdxyG2CyD6
FluXy+tgr03wN/Kp7TJV3pbMn+Mfvz3H37HBiDkWgAJKMC7AkyRTXcehfBn1bxTC
qYJU08k3QauEpHbgz8T1e5euwTYHSdYFPhVxURp8zqOCz9ZgT6FOS1XAT7RgO2oQ
uZ8BvRO9GQ62qEXP6AV0QHJb27/gu4vUdLccXpupidTOwEspPmFi1P13CUkMTFe2
d9iH9bdxJEMQDA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:48:57 2025 by rpki-client