Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft
File: npNqlnzlH9NBCUdGmWvO8WrL764.mft (raw, json)
Hash identifier: k4696Jf8SEPqZL8QclYpsTG5KJpcus2EJSDFAU7xR6U=
Subject key identifier: BF:C7:B8:5C:EE:DE:76:57:83:76:62:53:35:1E:3C:93:1D:E0:DE:CB
Authority key identifier: 9E:93:6A:96:7C:E5:1F:D3:41:09:47:46:99:6B:CE:F1:6A:CB:EF:AE
Certificate issuer: /CN=9e936a967ce51fd341094746996bcef16acbefae
Certificate serial: 0198439B1F701455869CCB76F5424B2C6E86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npNqlnzlH9NBCUdGmWvO8WrL764.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft
Manifest number: 0CC4
Signing time: Fri 25 Jul 2025 22:01:36 +0000
Manifest this update: Fri 25 Jul 2025 22:01:36 +0000
Manifest next update: Sat 26 Jul 2025 22:01:36 +0000
Files and hashes: 1: npNqlnzlH9NBCUdGmWvO8WrL764.crl (hash: X0k6pesmhUoRQ4tKKP+38OV0sjtP+jpAtKKZkCfigBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft
rsync://rpki.ripe.net/repository/DEFAULT/npNqlnzlH9NBCUdGmWvO8WrL764.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:9b:1f:70:14:55:86:9c:cb:76:f5:42:4b:2c:6e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e936a967ce51fd341094746996bcef16acbefae
Validity
Not Before: Jul 25 22:01:36 2025 GMT
Not After : Jul 26 22:01:36 2025 GMT
Subject: CN=bfc7b85ceede765783766253351e3c931de0decb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:78:7a:97:70:45:cd:50:30:a4:e6:af:f3:a1:
d5:51:e4:d6:fe:ea:c8:59:f6:05:13:2b:ca:d6:bd:
44:89:21:78:e3:ad:a1:e1:bc:13:2a:03:eb:50:4e:
da:27:cc:6c:dd:52:f3:16:de:e4:11:68:dc:98:84:
0b:6a:c0:87:ff:67:a2:00:f7:6b:60:7a:f6:f6:fa:
5d:73:a0:d0:a2:a7:0d:95:24:02:96:c5:78:90:e0:
c0:8e:49:c7:ec:83:0d:c6:00:99:c9:81:16:e3:04:
58:be:bc:14:a8:1d:1c:bc:ae:3f:44:6c:e4:de:84:
f3:8b:61:f8:77:61:c4:59:c6:f0:14:bb:31:41:eb:
1a:dd:63:20:c0:4e:b4:a5:0b:35:ed:dc:ba:95:dd:
14:ff:49:96:d7:66:e6:6e:5b:65:6a:97:52:c4:ac:
70:aa:73:46:70:33:0c:4f:17:72:62:b1:32:a9:a2:
e8:f7:c3:0a:e5:89:19:7c:22:9f:65:a3:d9:80:d0:
5a:8c:2a:85:46:7b:92:49:0a:32:ed:b7:c2:34:08:
c7:9d:1b:24:97:94:82:38:26:9a:c2:f3:0a:e6:65:
5e:c5:1f:80:c4:19:53:dc:7a:b4:7b:4e:0d:9d:7f:
03:e9:00:a5:bf:2c:fe:bd:66:d8:3e:09:05:e9:8f:
db:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C7:B8:5C:EE:DE:76:57:83:76:62:53:35:1E:3C:93:1D:E0:DE:CB
X509v3 Authority Key Identifier:
keyid:9E:93:6A:96:7C:E5:1F:D3:41:09:47:46:99:6B:CE:F1:6A:CB:EF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npNqlnzlH9NBCUdGmWvO8WrL764.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e4:28:dc:55:bc:d3:f1:c6:f5:04:c0:de:13:99:d6:12:33:
fa:85:55:4e:1c:13:6d:f0:04:39:68:1d:83:c9:f9:89:fe:d9:
45:56:c6:2e:5a:74:38:24:5f:8c:f3:02:17:f1:20:15:b1:89:
e1:1f:50:ee:b5:bf:78:63:bd:e2:9c:f5:a7:3a:52:cd:fc:6c:
2b:55:81:09:2b:34:fd:cd:e5:a2:49:a6:cb:5a:37:20:48:38:
ab:0d:b1:83:53:1e:f3:2f:6e:42:78:6c:4d:ee:62:24:2d:df:
41:16:05:3f:b2:39:86:f2:45:4c:5b:0a:79:e0:89:73:c4:17:
b6:83:2e:47:eb:ac:aa:63:63:2f:fc:6d:ff:59:9f:6e:28:10:
ef:4d:b5:11:f2:8a:74:73:43:51:23:83:31:4a:64:40:86:91:
39:d9:76:30:e5:ff:b2:95:bc:99:7b:dd:6e:50:19:05:0c:c4:
26:70:33:83:48:14:c5:69:fb:39:2c:d6:17:f9:21:50:2c:30:
dd:2e:2a:d8:b4:bc:a4:18:f9:b1:57:c1:2e:8f:2d:e7:3a:3d:
7c:39:a1:b5:11:e3:1e:ed:3c:0f:cb:25:30:e7:fb:03:06:97:
f1:b7:8d:52:06:d2:eb:01:50:c0:c9:a8:dc:5f:4d:ab:6f:3a:
24:7c:23:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:37:32 2025 by rpki-client