Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
File: NPdSlbuVtVRThE8y1uOVCdO-zkU.mft (raw, json)
Hash identifier: mTgBE7GmaqSsF4OyB9Ht4f9Q5/MwGBh3bKnytxu9Lds=
Subject key identifier: 9A:7C:32:0A:8B:52:C3:05:CD:BD:20:94:78:D4:AA:42:7A:79:12:C2
Authority key identifier: 34:F7:52:95:BB:95:B5:54:53:84:4F:32:D6:E3:95:09:D3:BE:CE:45
Certificate issuer: /CN=34f75295bb95b55453844f32d6e39509d3bece45
Certificate serial: 019923A0653B108E80AE568E510E15F09BE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPdSlbuVtVRThE8y1uOVCdO-zkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
Manifest number: E6
Signing time: Sun 07 Sep 2025 10:02:18 +0000
Manifest this update: Sun 07 Sep 2025 10:02:18 +0000
Manifest next update: Mon 08 Sep 2025 10:02:18 +0000
Files and hashes: 1: NPdSlbuVtVRThE8y1uOVCdO-zkU.crl (hash: pSTl8Nkq8aE6Wsj0iMsX8njEEysDV8k9+RDV8dtuop4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPdSlbuVtVRThE8y1uOVCdO-zkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:65:3b:10:8e:80:ae:56:8e:51:0e:15:f0:9b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f75295bb95b55453844f32d6e39509d3bece45
Validity
Not Before: Sep 7 10:02:18 2025 GMT
Not After : Sep 8 10:02:18 2025 GMT
Subject: CN=9a7c320a8b52c305cdbd209478d4aa427a7912c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c3:13:38:eb:43:df:bd:3d:ff:78:b5:11:34:
97:cd:4a:71:ea:f0:50:8a:66:aa:3b:4a:90:02:57:
26:a6:84:a8:58:4c:4f:18:e1:b9:cb:40:a8:ea:0e:
c6:ef:01:3f:ba:8a:ea:af:c0:41:df:b7:eb:53:fa:
d9:f8:12:1f:08:03:08:af:a2:f5:3f:94:f1:a9:b7:
08:1a:88:14:19:f1:71:a5:a0:99:ed:cb:bf:f0:3e:
d0:5a:a7:cf:0f:55:db:3a:8b:05:18:fe:44:f8:b8:
50:cc:df:bc:91:ab:ff:0b:34:ac:c2:cf:93:65:a3:
55:54:61:5f:24:09:74:94:62:9a:d7:bc:4c:7c:57:
7e:14:2a:df:11:35:f3:78:d8:24:16:4f:a0:90:ed:
f2:cf:dd:ea:a8:39:2e:54:ca:51:51:67:a4:09:65:
c9:d2:4b:97:cb:24:8c:c4:2f:7e:2e:2f:29:6b:10:
77:60:9b:a8:37:6c:04:00:ab:ee:30:23:a1:a9:79:
d6:71:60:50:eb:66:58:1f:86:cf:35:2d:2f:82:29:
a0:4f:db:d8:c3:e7:b7:47:15:62:ca:47:1f:01:04:
65:c0:61:b1:9a:2c:e7:ce:08:88:89:b5:b9:fa:b3:
0f:72:78:65:0c:cf:4f:43:14:d2:7f:7a:84:b3:63:
7c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7C:32:0A:8B:52:C3:05:CD:BD:20:94:78:D4:AA:42:7A:79:12:C2
X509v3 Authority Key Identifier:
keyid:34:F7:52:95:BB:95:B5:54:53:84:4F:32:D6:E3:95:09:D3:BE:CE:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPdSlbuVtVRThE8y1uOVCdO-zkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:32:86:cb:a2:88:7f:ef:76:d8:11:20:1e:98:c7:47:15:dc:
9c:38:01:c8:a1:e1:ce:e0:b5:f7:0c:e0:2c:91:2b:12:32:71:
45:aa:38:4b:94:c6:b2:57:80:88:14:a1:24:ee:bf:1c:ff:40:
e4:5e:fe:59:5a:5f:04:2d:39:78:75:2e:80:17:75:40:b2:03:
69:c8:c8:d9:c5:22:f1:25:ff:2f:a0:28:42:77:25:d2:76:ac:
91:27:21:43:ed:41:a6:e6:9f:7e:79:bc:e7:38:33:c1:2b:eb:
ee:7d:56:9a:57:5d:29:bb:e2:92:b8:b2:8f:31:21:3d:52:80:
a5:15:0a:35:e0:3e:9f:94:3d:42:5d:97:26:e1:8e:ba:20:cd:
5a:1d:d7:eb:85:35:98:af:bd:09:68:1b:37:52:af:c7:9c:da:
75:fc:36:a6:67:ab:d8:9e:fe:1f:fa:81:d5:14:f7:82:28:12:
ee:a5:f8:45:99:a1:33:06:f6:9c:19:5b:91:1b:a8:53:e4:10:
f1:06:3b:cc:7b:e7:65:bd:ea:cd:80:53:ef:b1:26:86:46:d4:
a6:3f:ea:90:4b:64:c7:b1:4b:7a:a6:6a:fa:f2:6a:62:45:53:
00:dc:10:f9:e3:bd:65:c3:af:88:2c:af:99:f0:01:ef:35:41:
e5:55:14:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoGU7EI6ArlaOUQ4V8JvmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0Zjc1Mjk1YmI5NWI1NTQ1Mzg0NGYzMmQ2ZTM5NTA5ZDNi
ZWNlNDUwHhcNMjUwOTA3MTAwMjE4WhcNMjUwOTA4MTAwMjE4WjAzMTEwLwYDVQQD
Eyg5YTdjMzIwYThiNTJjMzA1Y2RiZDIwOTQ3OGQ0YWE0MjdhNzkxMmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMMTOOtD3709/3i1ETSXzUpx6vBQ
imaqO0qQAlcmpoSoWExPGOG5y0Co6g7G7wE/uorqr8BB37frU/rZ+BIfCAMIr6L1
P5TxqbcIGogUGfFxpaCZ7cu/8D7QWqfPD1XbOosFGP5E+LhQzN+8kav/CzSsws+T
ZaNVVGFfJAl0lGKa17xMfFd+FCrfETXzeNgkFk+gkO3yz93qqDkuVMpRUWekCWXJ
0kuXyySMxC9+Li8paxB3YJuoN2wEAKvuMCOhqXnWcWBQ62ZYH4bPNS0vgimgT9vY
w+e3RxViykcfAQRlwGGxmiznzgiIibW5+rMPcnhlDM9PQxTSf3qEs2N8BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJp8MgqLUsMFzb0glHjUqkJ6eRLCMB8GA1UdIwQY
MBaAFDT3UpW7lbVUU4RPMtbjlQnTvs5FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlBkU2xidVZ0VlJUaEU4eTF1T1ZDZE8temtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85ZGMzZTAtOGRlMC00OTRiLThmZjUt
ZDk1ZTVhNjNhNDhlLzEvTlBkU2xidVZ0VlJUaEU4eTF1T1ZDZE8temtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85ZGMzZTAtOGRlMC00OTRiLThmZjUtZDk1ZTVhNjNhNDhl
LzEvTlBkU2xidVZ0VlJUaEU4eTF1T1ZDZE8temtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABTKGy6KI
f+922BEgHpjHRxXcnDgByKHhzuC19wzgLJErEjJxRao4S5TGsleAiBShJO6/HP9A
5F7+WVpfBC05eHUugBd1QLIDacjI2cUi8SX/L6AoQncl0naskSchQ+1Bpuaffnm8
5zgzwSvr7n1WmlddKbvikriyjzEhPVKApRUKNeA+n5Q9Ql2XJuGOuiDNWh3X64U1
mK+9CWgbN1Kvx5zadfw2pmer2J7+H/qB1RT3gigS7qX4RZmhMwb2nBlbkRuoU+QQ
8QY7zHvnZb3qzYBT77EmhkbUpj/qkEtkx7FLeqZq+vJqYkVTANwQ+eO9ZcOviCyv
mfAB7zVB5VUU/Q==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:28 2025 by rpki-client