Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
File: NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft (raw, json)
Hash identifier: tuiT6zp7SFc873zpPqUw074ApheiAZtPth6mVEqM9cU=
Subject key identifier: 2D:B6:40:4E:73:37:15:D2:78:45:81:60:59:D9:0A:73:9B:FF:52:8E
Authority key identifier: 34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
Certificate issuer: /CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
Certificate serial: 019A240A500A203817DB041EA17DE47B5C5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
Manifest number: 16F7
Signing time: Mon 27 Oct 2025 05:00:46 +0000
Manifest this update: Mon 27 Oct 2025 05:00:46 +0000
Manifest next update: Tue 28 Oct 2025 05:00:46 +0000
Files and hashes: 1: NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl (hash: G+mpgIhycP+a6t5s4zxTSmpNijyfccqZgFuhG9fFuaU=)
2: n9slDOW816oCeV0oI8sGph9zEHY.roa (hash: qD/TRD91aBYWewYzdvChC8Edlu2GICT4uFezEduAc7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:0a:50:0a:20:38:17:db:04:1e:a1:7d:e4:7b:5c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
Validity
Not Before: Oct 27 05:00:46 2025 GMT
Not After : Oct 28 05:00:46 2025 GMT
Subject: CN=2db6404e733715d27845816059d90a739bff528e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ab:e4:ec:cd:e8:2a:70:36:6b:c8:3e:f7:a7:
55:45:8a:1f:49:1a:b1:96:a1:42:fd:5a:f4:50:6a:
0e:e8:bd:f0:b1:b8:64:88:b2:6d:80:5a:08:48:43:
81:96:72:90:e2:f1:9f:6c:57:a7:57:94:53:2a:28:
e5:b3:45:26:80:61:7c:94:d9:30:04:6d:bd:39:22:
97:97:09:1b:bf:25:5b:39:e3:bf:8d:cf:26:a1:4e:
8f:84:57:3a:05:ef:a1:dd:0f:f3:47:58:09:da:ec:
3c:26:d7:30:7c:df:02:15:95:0d:6e:b5:dd:d9:69:
ba:a9:09:cc:8e:17:be:d9:fc:22:6e:f6:fe:ba:a8:
54:24:31:c0:b9:90:ba:9a:4d:8c:a6:4a:d1:f5:f9:
3b:3e:a8:3d:2f:b8:0f:da:00:17:f7:dd:60:3f:50:
4e:97:22:39:b1:9c:42:54:62:f9:37:05:48:61:03:
ff:fe:e7:78:9e:12:78:c1:4a:56:d3:02:c0:5f:63:
f2:34:7d:f3:15:16:c4:50:2b:62:20:8e:98:ba:45:
fc:06:e1:23:40:8a:2b:eb:4a:67:34:7b:4f:2f:98:
67:7a:21:a2:7e:df:f4:8b:20:9c:32:75:b9:3b:82:
80:7e:81:a0:d5:19:e5:3e:c9:72:c6:64:1b:17:aa:
e7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B6:40:4E:73:37:15:D2:78:45:81:60:59:D9:0A:73:9B:FF:52:8E
X509v3 Authority Key Identifier:
keyid:34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:e8:64:14:87:66:03:32:15:5f:b3:f1:78:59:e3:10:19:ac:
ad:91:ba:59:7c:ad:c4:7a:56:64:9c:f1:70:c9:f6:2e:f9:f6:
25:57:76:5a:49:db:2a:bf:f2:17:ce:05:34:50:77:7d:b1:1f:
65:fd:f5:f7:23:4e:bb:f3:30:fe:26:fe:4d:f6:83:05:ad:bd:
7a:9d:5a:5b:9b:b9:73:d1:65:75:39:6c:ae:78:c2:d5:dc:e2:
7d:e8:87:7a:58:46:56:9a:58:17:8d:c8:53:11:dc:65:7e:7f:
ae:29:c5:13:14:88:b5:2e:c8:87:19:53:74:8f:13:3c:63:56:
63:85:1b:1a:55:bb:e2:4c:16:b6:b2:79:6f:08:c5:ef:75:da:
75:92:6f:50:b6:df:61:c6:b8:d7:31:6d:60:77:b6:2c:17:59:
a1:e2:33:21:4b:61:e7:77:b9:c7:e4:93:9f:ec:80:72:d2:77:
d5:3b:6d:77:ee:59:0c:45:b5:1d:53:10:09:4c:37:cf:30:22:
d4:23:06:3f:79:0f:6e:50:75:bc:c5:0b:78:4f:09:ff:7b:3b:
f1:18:7b:e9:7f:88:b1:25:52:a8:09:33:01:2e:fb:ed:f6:34:
9e:8d:f1:46:e6:a8:b5:0f:96:81:fa:14:4c:b7:70:8c:72:74:
f9:3d:cf:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZokClAKIDgX2wQeoX3ke1xeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZjQ4MWE5ZGRjZmI0ODU5MWY3ODkzOGM0ZmNjN2I4YjY3
YzYzMDIwHhcNMjUxMDI3MDUwMDQ2WhcNMjUxMDI4MDUwMDQ2WjAzMTEwLwYDVQQD
EygyZGI2NDA0ZTczMzcxNWQyNzg0NTgxNjA1OWQ5MGE3MzliZmY1MjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuavk7M3oKnA2a8g+96dVRYofSRqx
lqFC/Vr0UGoO6L3wsbhkiLJtgFoISEOBlnKQ4vGfbFenV5RTKijls0UmgGF8lNkw
BG29OSKXlwkbvyVbOeO/jc8moU6PhFc6Be+h3Q/zR1gJ2uw8JtcwfN8CFZUNbrXd
2Wm6qQnMjhe+2fwibvb+uqhUJDHAuZC6mk2MpkrR9fk7Pqg9L7gP2gAX991gP1BO
lyI5sZxCVGL5NwVIYQP//ud4nhJ4wUpW0wLAX2PyNH3zFRbEUCtiII6YukX8BuEj
QIor60pnNHtPL5hneiGift/0iyCcMnW5O4KAfoGg1RnlPslyxmQbF6rn0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC22QE5zNxXSeEWBYFnZCnOb/1KOMB8GA1UdIwQY
MBaAFDT0gandz7SFkfeJOMT8x7i2fGMCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlBTQnFkM1B0SVdSOTRrNHhQekh1TFo4WXdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8zYWQ5YzEtM2UwOS00MWFjLWFjY2Et
ZDExMzM5ZmU3ZGYwLzEvTlBTQnFkM1B0SVdSOTRrNHhQekh1TFo4WXdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8zYWQ5YzEtM2UwOS00MWFjLWFjY2EtZDExMzM5ZmU3ZGYw
LzEvTlBTQnFkM1B0SVdSOTRrNHhQekh1TFo4WXdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq+hkFIdm
AzIVX7PxeFnjEBmsrZG6WXytxHpWZJzxcMn2Lvn2JVd2WknbKr/yF84FNFB3fbEf
Zf319yNOu/Mw/ib+TfaDBa29ep1aW5u5c9FldTlsrnjC1dzifeiHelhGVppYF43I
UxHcZX5/rinFExSItS7IhxlTdI8TPGNWY4UbGlW74kwWtrJ5bwjF73XadZJvULbf
Yca41zFtYHe2LBdZoeIzIUth53e5x+STn+yActJ31Tttd+5ZDEW1HVMQCUw3zzAi
1CMGP3kPblB1vMULeE8J/3s78Rh76X+IsSVSqAkzAS777fY0no3xRuaotQ+WgfoU
TLdwjHJ0+T3P8g==
-----END CERTIFICATE-----
Generated at Mon Oct 27 09:57:03 2025 by rpki-client