Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.mft
File: naPpS0JKXF0_MDICt1QWm4sMlfo.mft (raw, json)
Hash identifier: k9jyhgveCqv2tn1GvsEL5qnttGEdJ7eLMriBIQ99Tvs=
Subject key identifier: 0C:5D:37:C4:6D:B5:70:3D:E0:7C:7F:A1:B1:48:61:DD:71:9F:2F:73
Authority key identifier: 9D:A3:E9:4B:42:4A:5C:5D:3F:30:32:02:B7:54:16:9B:8B:0C:95:FA
Certificate issuer: /CN=9da3e94b424a5c5d3f303202b754169b8b0c95fa
Certificate serial: 019A26D498FBF731DBBA51AC64FBF86B2C4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naPpS0JKXF0_MDICt1QWm4sMlfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.mft
Manifest number: 07DF
Signing time: Mon 27 Oct 2025 18:00:58 +0000
Manifest this update: Mon 27 Oct 2025 18:00:58 +0000
Manifest next update: Tue 28 Oct 2025 18:00:58 +0000
Files and hashes: 1: naPpS0JKXF0_MDICt1QWm4sMlfo.crl (hash: QCKosrYCnunj5eFE3ZJWr1vwPqhwy7u+Y/zHZapZrWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/naPpS0JKXF0_MDICt1QWm4sMlfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 18:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:d4:98:fb:f7:31:db:ba:51:ac:64:fb:f8:6b:2c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da3e94b424a5c5d3f303202b754169b8b0c95fa
Validity
Not Before: Oct 27 18:00:58 2025 GMT
Not After : Oct 28 18:00:58 2025 GMT
Subject: CN=0c5d37c46db5703de07c7fa1b14861dd719f2f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d3:ac:ef:54:4e:e7:72:54:1b:09:d7:14:d0:
cc:01:2e:49:4b:ee:44:6f:55:97:e5:fc:5d:fb:49:
8c:39:5c:2b:53:75:3a:9d:ee:39:50:91:d9:ab:7a:
44:1d:1a:60:8a:38:48:b0:de:7c:ca:63:e7:e8:68:
64:9e:23:b3:51:5c:77:aa:f6:e7:e8:d2:b3:6a:92:
25:7d:b3:5a:57:7f:b5:e6:21:68:62:cc:46:82:f9:
ad:0f:af:db:14:80:45:22:b2:30:15:60:ea:9f:ce:
43:44:64:85:ea:f9:2f:a1:93:a0:3c:0d:9c:e3:ca:
a2:41:f9:85:be:9d:31:da:0a:4a:26:fb:c2:35:11:
4f:5a:2a:fa:86:0f:99:23:aa:0e:59:3b:7a:7b:4e:
43:50:7f:42:f3:11:8c:88:d8:2f:84:4e:99:b7:07:
5b:8c:50:a2:90:ba:67:87:94:9c:3c:b5:c5:3c:71:
48:9c:5c:c6:8a:78:62:40:d5:e1:48:e9:86:e0:86:
18:fc:7c:4d:4a:d9:21:74:37:1a:2d:cb:c1:34:83:
c0:e1:ba:25:53:e0:bd:ce:14:4b:41:d5:01:3b:0c:
1b:7a:12:45:42:c7:28:7e:1e:0a:f0:bb:fa:e9:b7:
02:4a:a6:50:e9:12:1e:a3:70:76:66:a7:3e:4a:79:
0d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5D:37:C4:6D:B5:70:3D:E0:7C:7F:A1:B1:48:61:DD:71:9F:2F:73
X509v3 Authority Key Identifier:
keyid:9D:A3:E9:4B:42:4A:5C:5D:3F:30:32:02:B7:54:16:9B:8B:0C:95:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naPpS0JKXF0_MDICt1QWm4sMlfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8bbd74-e03e-4aea-ac8c-a5a5d6eb840f/1/naPpS0JKXF0_MDICt1QWm4sMlfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e3:3a:01:20:72:69:21:fd:00:29:fb:a8:6c:88:c9:94:4f:
b9:2d:6b:36:8a:1b:38:1a:85:01:f6:90:ac:40:35:61:75:9b:
ab:d1:f9:5e:09:f7:e8:5f:c6:ff:1d:ae:3c:dc:53:65:68:5b:
10:19:06:d6:fe:54:2a:2b:25:a7:28:bc:75:5f:2c:d8:55:f5:
12:2e:6a:51:50:26:2e:fe:bb:4a:bc:a4:8e:50:ca:56:f6:7f:
87:70:b5:6c:60:cb:0d:a0:4a:ee:18:de:eb:58:80:46:0b:55:
6e:e2:2e:cc:a6:6d:72:ef:63:df:48:52:b9:6d:b1:28:0c:b7:
7b:80:25:28:65:7a:99:b2:37:ad:86:3b:68:1e:00:2b:10:b0:
dc:89:34:a3:40:1a:8f:3d:55:22:bb:ab:5e:55:de:94:cf:08:
0c:8f:8b:f6:45:24:13:ac:4e:91:fd:07:68:3a:1e:96:cc:af:
b0:e4:c4:0a:fc:cc:94:fa:f2:62:13:25:be:c7:b9:b6:1e:46:
a9:16:10:d6:73:cf:bf:bc:92:1d:d1:27:fc:b1:ef:51:59:b2:
b5:c1:a7:a2:37:14:21:8d:36:0b:72:80:b7:a1:1e:cd:71:ee:
20:f0:ba:3b:f2:43:b4:d4:aa:be:30:50:52:ba:74:68:82:7c:
d7:a3:35:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZom1Jj79zHbulGsZPv4ayxOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYTNlOTRiNDI0YTVjNWQzZjMwMzIwMmI3NTQxNjliOGIw
Yzk1ZmEwHhcNMjUxMDI3MTgwMDU4WhcNMjUxMDI4MTgwMDU4WjAzMTEwLwYDVQQD
EygwYzVkMzdjNDZkYjU3MDNkZTA3YzdmYTFiMTQ4NjFkZDcxOWYyZjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59Os71RO53JUGwnXFNDMAS5JS+5E
b1WX5fxd+0mMOVwrU3U6ne45UJHZq3pEHRpgijhIsN58ymPn6GhkniOzUVx3qvbn
6NKzapIlfbNaV3+15iFoYsxGgvmtD6/bFIBFIrIwFWDqn85DRGSF6vkvoZOgPA2c
48qiQfmFvp0x2gpKJvvCNRFPWir6hg+ZI6oOWTt6e05DUH9C8xGMiNgvhE6Ztwdb
jFCikLpnh5ScPLXFPHFInFzGinhiQNXhSOmG4IYY/HxNStkhdDcaLcvBNIPA4bol
U+C9zhRLQdUBOwwbehJFQscofh4K8Lv66bcCSqZQ6RIeo3B2Zqc+SnkNjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAxdN8RttXA94Hx/obFIYd1xny9zMB8GA1UdIwQY
MBaAFJ2j6UtCSlxdPzAyArdUFpuLDJX6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmFQcFMwSktYRjBfTURJQ3QxUVdtNHNNbGZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS84YmJkNzQtZTAzZS00YWVhLWFjOGMt
YTVhNWQ2ZWI4NDBmLzEvbmFQcFMwSktYRjBfTURJQ3QxUVdtNHNNbGZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS84YmJkNzQtZTAzZS00YWVhLWFjOGMtYTVhNWQ2ZWI4NDBm
LzEvbmFQcFMwSktYRjBfTURJQ3QxUVdtNHNNbGZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjuM6ASBy
aSH9ACn7qGyIyZRPuS1rNoobOBqFAfaQrEA1YXWbq9H5Xgn36F/G/x2uPNxTZWhb
EBkG1v5UKislpyi8dV8s2FX1Ei5qUVAmLv67SrykjlDKVvZ/h3C1bGDLDaBK7hje
61iARgtVbuIuzKZtcu9j30hSuW2xKAy3e4AlKGV6mbI3rYY7aB4AKxCw3Ik0o0Aa
jz1VIrurXlXelM8IDI+L9kUkE6xOkf0HaDoelsyvsOTECvzMlPryYhMlvse5th5G
qRYQ1nPPv7ySHdEn/LHvUVmytcGnojcUIY02C3KAt6EezXHuIPC6O/JDtNSqvjBQ
Urp0aIJ816M1WQ==
-----END CERTIFICATE-----
Generated at Tue Oct 28 04:15:47 2025 by rpki-client