Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
File: NPdSlbuVtVRThE8y1uOVCdO-zkU.mft (raw, json)
Hash identifier: ax5MIUGC8z138pANpTFwKq8Sy+mai4Fm//PqbYQfFTo=
Subject key identifier: 33:B5:70:B2:C2:45:CA:99:24:AB:6F:18:02:EB:4E:F7:DF:CC:49:EE
Authority key identifier: 34:F7:52:95:BB:95:B5:54:53:84:4F:32:D6:E3:95:09:D3:BE:CE:45
Certificate issuer: /CN=34f75295bb95b55453844f32d6e39509d3bece45
Certificate serial: 019A71B8DE807B376F86915F26B13F3D00B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPdSlbuVtVRThE8y1uOVCdO-zkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
Manifest number: 0193
Signing time: Tue 11 Nov 2025 07:02:12 +0000
Manifest this update: Tue 11 Nov 2025 07:02:12 +0000
Manifest next update: Wed 12 Nov 2025 07:02:12 +0000
Files and hashes: 1: NPdSlbuVtVRThE8y1uOVCdO-zkU.crl (hash: ets29zG7GPCJNeY6TVH9aJ/h/xDAOoCNKmqqTTXvfpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPdSlbuVtVRThE8y1uOVCdO-zkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:de:80:7b:37:6f:86:91:5f:26:b1:3f:3d:00:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f75295bb95b55453844f32d6e39509d3bece45
Validity
Not Before: Nov 11 07:02:12 2025 GMT
Not After : Nov 12 07:02:12 2025 GMT
Subject: CN=33b570b2c245ca9924ab6f1802eb4ef7dfcc49ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a8:ca:4e:0f:b4:f8:59:f9:89:6c:26:6e:87:
33:8d:78:5c:18:cb:f5:45:e5:b3:31:80:b6:cb:12:
6f:1e:72:f3:9c:28:b0:dc:d5:e9:cc:6b:3a:1d:2b:
80:22:ac:89:63:0a:28:7b:72:20:e3:eb:d4:76:78:
6d:a6:87:d0:db:1d:25:c4:64:33:37:66:05:7a:1d:
e1:6e:48:50:db:ce:9f:e1:43:6d:68:2d:5a:c6:b6:
dc:5f:c6:5c:f1:c3:f6:e5:6a:ee:42:a8:48:a5:02:
9f:ee:26:79:af:37:a4:f4:19:7e:78:b4:95:ec:5b:
86:36:2c:0d:7b:0a:dc:15:45:38:18:b3:ae:5c:cd:
49:17:a6:47:e3:04:60:d2:26:7e:6d:53:32:6b:9b:
5b:c2:32:0d:4a:0f:7b:ca:a5:f0:19:2c:e8:7a:ea:
96:2e:ce:bb:c3:35:a8:a1:9e:ce:6d:71:62:3b:26:
ae:6d:8c:25:11:4e:68:86:36:e6:31:13:a8:89:8c:
d8:af:51:72:34:7b:6a:80:8c:59:6a:de:bf:01:a0:
ff:a8:79:46:b6:4d:f5:c8:47:7b:a0:ef:00:d1:1e:
c3:fb:7d:0c:c3:fa:f5:00:a1:fb:c3:c5:4f:f1:95:
a6:ab:ac:b6:37:36:30:c4:40:d1:63:25:9f:4e:24:
81:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B5:70:B2:C2:45:CA:99:24:AB:6F:18:02:EB:4E:F7:DF:CC:49:EE
X509v3 Authority Key Identifier:
keyid:34:F7:52:95:BB:95:B5:54:53:84:4F:32:D6:E3:95:09:D3:BE:CE:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPdSlbuVtVRThE8y1uOVCdO-zkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:82:ca:42:95:63:eb:19:a9:44:82:4f:1b:49:05:38:bb:e6:
43:49:a9:06:6f:db:1f:bf:56:f1:62:90:56:c6:d6:ac:63:f4:
5a:d2:d8:e8:ca:af:d7:de:ed:35:23:8d:68:3b:08:7a:89:f1:
7c:95:cc:9b:b0:f0:57:75:11:d9:0e:31:d0:23:e3:6a:ec:2f:
67:53:a3:b5:dc:3b:94:5c:8b:5d:56:ff:58:41:15:30:19:8d:
c7:a6:aa:b9:34:c1:a0:d7:f2:a5:d2:a6:13:e3:a8:72:30:a5:
b1:af:b9:31:4b:c9:9c:61:ad:3e:f0:87:86:6d:73:49:27:00:
59:22:3a:1b:1d:89:d4:2b:53:7f:15:18:96:44:69:e7:04:35:
d5:13:f2:54:b8:7d:e2:81:e8:7e:78:30:f3:4d:4b:79:60:fe:
a9:fa:64:83:98:3a:c8:5e:47:52:2c:51:0f:3e:20:46:f6:95:
96:71:26:97:1a:ef:99:2c:d9:3b:cb:98:9f:ff:11:c8:fc:08:
80:b8:3a:1a:44:1f:da:e6:1e:e3:47:54:3a:cd:5c:0d:11:e6:
69:a9:e4:e4:94:58:9f:8f:48:7f:9d:9f:2e:04:b9:89:a5:64:
ef:d6:66:d9:08:b1:06:4b:a9:1d:6c:98:01:11:0f:f7:f4:1e:
fc:f9:35:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuN6AezdvhpFfJrE/PQC0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0Zjc1Mjk1YmI5NWI1NTQ1Mzg0NGYzMmQ2ZTM5NTA5ZDNi
ZWNlNDUwHhcNMjUxMTExMDcwMjEyWhcNMjUxMTEyMDcwMjEyWjAzMTEwLwYDVQQD
EygzM2I1NzBiMmMyNDVjYTk5MjRhYjZmMTgwMmViNGVmN2RmY2M0OWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqjKTg+0+Fn5iWwmboczjXhcGMv1
ReWzMYC2yxJvHnLznCiw3NXpzGs6HSuAIqyJYwooe3Ig4+vUdnhtpofQ2x0lxGQz
N2YFeh3hbkhQ286f4UNtaC1axrbcX8Zc8cP25WruQqhIpQKf7iZ5rzek9Bl+eLSV
7FuGNiwNewrcFUU4GLOuXM1JF6ZH4wRg0iZ+bVMya5tbwjINSg97yqXwGSzoeuqW
Ls67wzWooZ7ObXFiOyaubYwlEU5ohjbmMROoiYzYr1FyNHtqgIxZat6/AaD/qHlG
tk31yEd7oO8A0R7D+30Mw/r1AKH7w8VP8ZWmq6y2NzYwxEDRYyWfTiSBkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDO1cLLCRcqZJKtvGALrTvffzEnuMB8GA1UdIwQY
MBaAFDT3UpW7lbVUU4RPMtbjlQnTvs5FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlBkU2xidVZ0VlJUaEU4eTF1T1ZDZE8temtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85ZGMzZTAtOGRlMC00OTRiLThmZjUt
ZDk1ZTVhNjNhNDhlLzEvTlBkU2xidVZ0VlJUaEU4eTF1T1ZDZE8temtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85ZGMzZTAtOGRlMC00OTRiLThmZjUtZDk1ZTVhNjNhNDhl
LzEvTlBkU2xidVZ0VlJUaEU4eTF1T1ZDZE8temtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgoLKQpVj
6xmpRIJPG0kFOLvmQ0mpBm/bH79W8WKQVsbWrGP0WtLY6Mqv197tNSONaDsIeonx
fJXMm7DwV3UR2Q4x0CPjauwvZ1Ojtdw7lFyLXVb/WEEVMBmNx6aquTTBoNfypdKm
E+OocjClsa+5MUvJnGGtPvCHhm1zSScAWSI6Gx2J1CtTfxUYlkRp5wQ11RPyVLh9
4oHofngw801LeWD+qfpkg5g6yF5HUixRDz4gRvaVlnEmlxrvmSzZO8uYn/8RyPwI
gLg6GkQf2uYe40dUOs1cDRHmaank5JRYn49If52fLgS5iaVk79Zm2QixBkupHWyY
AREP9/Qe/Pk10g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:36:52 2025 by rpki-client