Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft
File: npNqlnzlH9NBCUdGmWvO8WrL764.mft (raw, json)
Hash identifier: 9twNf/2DsOnCmZCzH8okmsBZFS2WzmkcBHaR40qM75k=
Subject key identifier: 01:99:61:8C:6C:54:7A:2B:1A:7B:FB:A6:80:4D:2F:2A:89:02:C9:0E
Authority key identifier: 9E:93:6A:96:7C:E5:1F:D3:41:09:47:46:99:6B:CE:F1:6A:CB:EF:AE
Certificate issuer: /CN=9e936a967ce51fd341094746996bcef16acbefae
Certificate serial: 0197488BFAE7F53A1A8B80F8D981A0B859B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npNqlnzlH9NBCUdGmWvO8WrL764.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft
Manifest number: 0C42
Signing time: Sat 07 Jun 2025 04:00:22 +0000
Manifest this update: Sat 07 Jun 2025 04:00:22 +0000
Manifest next update: Sun 08 Jun 2025 04:00:22 +0000
Files and hashes: 1: npNqlnzlH9NBCUdGmWvO8WrL764.crl (hash: RKS2XrRbKg8p0gxgV2f2fnBmHFAo7JQmIHfphWmaFeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft
rsync://rpki.ripe.net/repository/DEFAULT/npNqlnzlH9NBCUdGmWvO8WrL764.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8b:fa:e7:f5:3a:1a:8b:80:f8:d9:81:a0:b8:59:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e936a967ce51fd341094746996bcef16acbefae
Validity
Not Before: Jun 7 04:00:22 2025 GMT
Not After : Jun 8 04:00:22 2025 GMT
Subject: CN=0199618c6c547a2b1a7bfba6804d2f2a8902c90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:2c:4a:7f:bc:fa:ec:eb:5f:03:7c:a4:77:50:
c4:1d:58:e8:10:38:d7:c5:7e:e7:8c:ff:49:bb:e6:
8d:81:11:c3:ea:f6:cf:98:91:24:81:16:dd:fb:2a:
ec:18:c5:8a:fb:ac:ff:6d:57:f6:45:9a:09:65:de:
d1:0a:86:a5:5e:49:b5:65:91:0b:2b:c6:9b:10:a8:
2c:36:08:4d:d4:21:ac:77:3b:90:06:2c:4d:ab:cf:
1b:02:24:5f:68:30:14:01:a9:af:5c:bd:fc:d8:16:
47:52:02:a8:a8:9d:aa:39:cc:33:62:07:a1:6b:48:
dd:1e:45:be:67:b6:dd:96:6b:8a:87:4e:e2:a2:3f:
be:9a:6c:b8:4f:3b:9b:c0:81:21:b3:98:eb:30:9a:
3a:00:fb:35:1d:6c:67:c2:e0:b8:80:0a:97:50:72:
6b:99:bb:1d:97:b3:6c:8a:be:0a:bf:ec:9e:5b:0c:
bb:9e:e9:63:90:8e:60:c4:53:98:e8:3c:88:78:ea:
ec:74:25:c9:14:0f:db:d2:ea:4b:28:3a:06:33:72:
a7:06:71:e5:f8:75:af:a2:b0:ec:f5:8a:3d:57:c7:
f3:5f:95:73:07:25:a7:03:1c:f3:55:74:ed:47:a3:
b5:81:8f:3d:83:bb:5f:b5:1c:a4:48:6f:c4:73:f3:
83:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:99:61:8C:6C:54:7A:2B:1A:7B:FB:A6:80:4D:2F:2A:89:02:C9:0E
X509v3 Authority Key Identifier:
keyid:9E:93:6A:96:7C:E5:1F:D3:41:09:47:46:99:6B:CE:F1:6A:CB:EF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npNqlnzlH9NBCUdGmWvO8WrL764.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:99:3c:0c:4d:c4:8f:c2:83:2e:98:ed:dc:ea:8f:df:4f:b8:
fe:3a:ea:28:aa:1f:5a:c5:73:b6:61:9d:21:fd:69:cc:b2:18:
bd:be:47:a4:f2:5d:b4:8b:23:f9:ae:83:23:8d:00:9a:65:b8:
61:ad:a6:c9:63:c4:1f:65:f7:06:51:be:55:5c:05:c1:21:7a:
d2:11:ab:cc:36:a0:ad:01:5d:c7:68:92:99:f5:f4:76:25:2e:
16:2f:fe:bb:8c:a2:7d:e6:7a:bd:71:61:c1:b4:8c:69:0c:f1:
ae:0f:06:56:7c:ac:25:0f:8c:6c:8b:79:13:f4:91:79:d5:66:
42:0b:fc:c8:7f:41:c8:04:69:bc:2a:d1:90:6b:3c:5f:a2:d5:
03:0d:8e:49:0c:79:47:e2:b2:9a:5a:d4:9a:5f:b8:82:06:76:
56:7e:a4:34:40:cd:e8:2c:58:48:5f:be:e8:57:b4:e3:86:92:
ae:5f:6b:88:d4:1e:8d:19:b7:48:8e:c3:19:80:f5:9a:95:95:
7a:75:18:5f:68:4e:b0:c8:16:cb:0a:49:91:b3:e1:cd:b1:72:
f7:ec:3c:29:b0:a4:b8:0c:e4:6a:bd:c4:81:bf:46:74:6d:0f:
0e:3b:5b:d3:de:7e:64:2c:9c:48:b2:30:8c:1e:1b:b6:d8:53:
17:72:88:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:28:32 2025 by rpki-client