Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/8ce83c-ccc8-45dd-b67e-a79d09644779/1/NPuMu3pio_Drqk5fRqvjHiXRfP0.mft
File: NPuMu3pio_Drqk5fRqvjHiXRfP0.mft (raw, json)
Hash identifier: 7uFIfQAdvJF7k1qNyJfxAYV6hUpgdAneUm7RIzOIlw4=
Subject key identifier: D8:F5:F6:5F:F7:56:51:51:30:BD:12:46:4D:3F:53:49:5B:EE:AF:FB
Authority key identifier: 34:FB:8C:BB:7A:62:A3:F0:EB:AA:4E:5F:46:AB:E3:1E:25:D1:7C:FD
Certificate issuer: /CN=34fb8cbb7a62a3f0ebaa4e5f46abe31e25d17cfd
Certificate serial: 019A71EE8E35E7795AB93BF7A6A698C53D9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPuMu3pio_Drqk5fRqvjHiXRfP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/8ce83c-ccc8-45dd-b67e-a79d09644779/1/NPuMu3pio_Drqk5fRqvjHiXRfP0.mft
Manifest number: 0643
Signing time: Tue 11 Nov 2025 08:00:50 +0000
Manifest this update: Tue 11 Nov 2025 08:00:50 +0000
Manifest next update: Wed 12 Nov 2025 08:00:50 +0000
Files and hashes: 1: NPuMu3pio_Drqk5fRqvjHiXRfP0.crl (hash: NFtS0Yr/1W/kfVj0WLZvw+Hxq7ayG0NEl+7wMpVPCHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/8ce83c-ccc8-45dd-b67e-a79d09644779/1/NPuMu3pio_Drqk5fRqvjHiXRfP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/8ce83c-ccc8-45dd-b67e-a79d09644779/1/NPuMu3pio_Drqk5fRqvjHiXRfP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPuMu3pio_Drqk5fRqvjHiXRfP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:8e:35:e7:79:5a:b9:3b:f7:a6:a6:98:c5:3d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34fb8cbb7a62a3f0ebaa4e5f46abe31e25d17cfd
Validity
Not Before: Nov 11 08:00:50 2025 GMT
Not After : Nov 12 08:00:50 2025 GMT
Subject: CN=d8f5f65ff756515130bd12464d3f53495beeaffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:11:42:b3:44:80:1f:48:87:57:2a:55:19:e6:
1c:7f:d8:5f:d4:a5:d5:10:3c:5d:f9:20:8f:6c:d7:
d1:0d:c9:35:71:cf:c7:93:eb:a1:b7:c1:dd:23:07:
ad:51:92:35:51:7b:8e:3d:99:71:9c:aa:02:5e:80:
50:36:64:ee:3b:7d:60:a0:f5:40:16:e0:cd:bb:77:
9c:ae:95:21:3a:f1:8f:c2:77:0f:50:bf:b8:f8:11:
3f:f5:93:52:17:00:b5:16:81:04:6f:e2:e9:8c:0e:
61:67:fa:01:bd:bf:cf:f6:d5:15:88:08:2e:45:81:
fc:0b:8e:05:28:cf:56:0d:cf:66:fd:8f:75:b4:6f:
f9:fc:73:ee:ef:00:b8:72:34:1b:ff:7d:42:ed:61:
2b:88:74:2e:41:28:bc:d4:57:7b:88:fb:49:f3:d7:
bc:ad:23:02:16:0c:64:b0:43:5f:e6:26:2a:56:e4:
0a:66:fe:7f:c0:a4:26:ef:5a:46:14:40:94:e7:9a:
b6:e6:50:ec:4b:85:90:59:95:78:df:86:d6:54:70:
00:04:f0:fc:bc:24:c7:f0:ce:93:1b:92:3d:f4:a9:
d3:85:0e:db:9c:3a:f9:6c:ec:07:80:7a:fa:1f:b4:
d6:74:93:92:b7:9b:e8:43:18:a0:37:49:85:e8:47:
b9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F5:F6:5F:F7:56:51:51:30:BD:12:46:4D:3F:53:49:5B:EE:AF:FB
X509v3 Authority Key Identifier:
keyid:34:FB:8C:BB:7A:62:A3:F0:EB:AA:4E:5F:46:AB:E3:1E:25:D1:7C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPuMu3pio_Drqk5fRqvjHiXRfP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/8ce83c-ccc8-45dd-b67e-a79d09644779/1/NPuMu3pio_Drqk5fRqvjHiXRfP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/8ce83c-ccc8-45dd-b67e-a79d09644779/1/NPuMu3pio_Drqk5fRqvjHiXRfP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e1:94:a3:8b:53:02:3e:66:d7:61:cc:cc:79:ec:5d:a3:82:
24:92:f7:a6:93:c2:a9:69:2f:c1:b0:77:d1:8c:7b:4f:83:4a:
bf:ab:80:01:db:07:a8:8f:0a:70:b4:18:3b:ae:1e:1e:8c:7d:
44:89:c8:ae:64:28:02:3f:97:9c:84:0d:b9:84:f1:1e:04:c0:
07:32:4e:52:7d:88:42:28:49:9b:e9:cf:30:bb:3c:db:85:a0:
23:e0:55:4e:83:8e:92:b4:b6:99:71:1d:7c:70:8f:bc:d4:65:
5b:af:d4:61:cd:82:f0:27:4c:9d:fe:de:81:48:a5:c3:98:5a:
28:dd:32:59:5c:fa:35:9a:c1:8b:06:ed:12:8a:68:e6:52:86:
37:e2:6f:71:85:13:d9:4c:e4:6b:f6:e3:66:b3:b2:1a:86:47:
4b:51:95:b2:eb:d4:d5:62:33:0f:33:72:e1:57:74:d3:77:58:
4b:95:ac:00:32:d4:c3:aa:76:40:fb:96:2d:fb:03:11:e5:af:
a7:e5:d6:23:0c:cd:79:14:f6:23:36:75:2e:23:9e:e4:64:2f:
a2:67:d2:59:25:41:ec:e5:e6:f4:50:5e:7d:a6:89:a4:ca:b6:
a4:be:35:aa:1d:74:f4:09:3a:59:58:f1:e2:18:3f:a9:30:f3:
32:59:fe:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:55 2025 by rpki-client