Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.mft
File: NP8Aripv7u1qSYfLyRNGf9_vg-g.mft (raw, json)
Hash identifier: SG9b3/AaSaH4DhEEDj6q7rUCob2Q6wLJkx5OgkhPxEo=
Subject key identifier: 17:E1:2D:BA:77:E9:9A:2D:3B:C7:88:AA:FE:E9:42:37:16:3B:2B:4D
Authority key identifier: 34:FF:00:AE:2A:6F:EE:ED:6A:49:87:CB:C9:13:46:7F:DF:EF:83:E8
Certificate issuer: /CN=34ff00ae2a6feeed6a4987cbc913467fdfef83e8
Certificate serial: 019A725C84BBBB06AA211EC34D42095FCB00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NP8Aripv7u1qSYfLyRNGf9_vg-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.mft
Manifest number: 091F
Signing time: Tue 11 Nov 2025 10:00:57 +0000
Manifest this update: Tue 11 Nov 2025 10:00:57 +0000
Manifest next update: Wed 12 Nov 2025 10:00:57 +0000
Files and hashes: 1: NP8Aripv7u1qSYfLyRNGf9_vg-g.crl (hash: jtfzMlEcLuWvgNLDy/ydBzNbxLMVU0qs2SV/Kjr9pEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NP8Aripv7u1qSYfLyRNGf9_vg-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:84:bb:bb:06:aa:21:1e:c3:4d:42:09:5f:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34ff00ae2a6feeed6a4987cbc913467fdfef83e8
Validity
Not Before: Nov 11 10:00:57 2025 GMT
Not After : Nov 12 10:00:57 2025 GMT
Subject: CN=17e12dba77e99a2d3bc788aafee94237163b2b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:85:af:ea:d8:b0:2e:c9:8e:a5:f9:70:4f:ea:
4b:21:4f:59:41:7f:6d:d7:84:34:8b:fb:e7:9a:4c:
85:6a:8d:9f:89:9d:d8:4e:a2:34:f4:13:74:b6:03:
17:ab:ec:dd:45:85:fe:ea:d4:38:30:40:59:66:25:
92:7c:82:bf:25:f0:3e:2e:3f:df:98:9f:81:b2:fd:
3c:f5:74:53:f4:3a:50:9a:12:68:3f:33:49:5f:c3:
12:45:01:48:b8:30:c2:76:9b:67:d0:48:b9:f0:c2:
74:2b:e2:d3:1a:37:28:91:97:22:56:a4:f2:4b:f1:
b6:21:5d:cb:48:5d:7f:ec:91:8b:0f:9b:60:f4:07:
95:2d:f3:33:be:80:ec:30:6c:2b:ac:7c:c7:9d:39:
e8:22:b6:f6:05:a1:ca:dd:c3:ca:46:80:a9:99:c5:
4f:0c:7f:89:e0:bd:97:ea:97:71:c6:e4:be:8b:5d:
90:dd:23:5e:cf:a8:95:76:0c:c8:e5:c9:14:15:19:
f8:a4:de:54:30:91:7d:4f:0b:77:47:f0:f3:cf:82:
ed:eb:98:e2:13:30:0b:c3:58:51:32:7f:fc:e9:26:
59:16:23:d1:1b:03:01:06:da:d9:4c:99:2b:f5:a1:
ed:f3:c9:e2:95:88:13:cf:0a:64:a9:91:12:d8:50:
40:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E1:2D:BA:77:E9:9A:2D:3B:C7:88:AA:FE:E9:42:37:16:3B:2B:4D
X509v3 Authority Key Identifier:
keyid:34:FF:00:AE:2A:6F:EE:ED:6A:49:87:CB:C9:13:46:7F:DF:EF:83:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NP8Aripv7u1qSYfLyRNGf9_vg-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:8d:62:c2:14:0f:7d:6a:26:72:45:1b:3f:8c:9b:2f:5d:3c:
da:a9:6b:c6:3d:c2:1c:3d:66:f8:f2:e3:b5:a8:4b:27:5d:3c:
6e:b1:d6:a8:fc:ac:d6:e4:e2:37:6a:93:63:01:d1:32:4c:f8:
f3:e4:eb:4b:b0:18:d7:8b:67:0a:66:db:72:15:d8:da:d6:9e:
5a:79:3c:15:2d:62:70:30:54:69:d5:f1:dc:fd:18:5d:cd:8b:
8d:4f:c1:f2:9a:09:2e:61:36:a6:1e:7b:df:c1:95:33:f2:1d:
c5:cd:81:f7:bb:a4:02:23:c5:d2:2d:7e:13:33:fe:40:ac:e2:
3c:86:dd:c5:b7:7a:3f:d3:88:67:74:75:60:6a:4b:31:ad:b3:
05:ec:0d:8e:83:b6:f4:9d:05:ec:aa:c6:d5:fc:af:8c:f5:75:
f3:0b:97:e6:63:08:02:43:58:3c:5a:db:05:98:fa:1e:7d:c5:
58:f0:93:48:3c:77:30:d0:c7:a1:a3:ac:93:45:26:61:aa:8e:
89:0a:dc:da:d3:9f:e7:75:7c:a9:93:60:97:ef:83:f8:db:34:
f4:5e:16:51:48:32:3f:82:8e:1b:6c:05:a2:a6:53:83:40:5e:
97:40:aa:3a:7b:a5:ac:6e:49:3a:70:f9:0c:5e:4b:7b:02:a9:
90:0d:a8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:51:32 2025 by rpki-client