Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
File: NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft (raw, json)
Hash identifier: lr6GlykxvkWYMy2rBeZheqXZHxyUyNWBfnHdR6iVj7A=
Subject key identifier: 43:8E:4D:FE:07:E4:0F:49:4A:A8:04:77:45:FF:67:E2:FB:E6:78:FB
Authority key identifier: 34:F7:83:61:A0:77:B0:D7:89:13:5C:CD:68:B1:26:1D:B1:38:F9:50
Certificate issuer: /CN=34f78361a077b0d789135ccd68b1261db138f950
Certificate serial: 019A71B909B2CF0F5039DE48E11FF5ED2717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
Manifest number: 111A
Signing time: Tue 11 Nov 2025 07:02:23 +0000
Manifest this update: Tue 11 Nov 2025 07:02:23 +0000
Manifest next update: Wed 12 Nov 2025 07:02:23 +0000
Files and hashes: 1: BT-QKLCE4MZ0YtWA2nAk6qpxv6g.roa (hash: t+OljMW5uOHxrHIlucZj5mZPbb09wnIuaUx+FWzOywc=)
2: NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl (hash: JQSBKPi0Pp/alNGS9lfCoBUNpi0utgVeDz+TfMFtty4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:09:b2:cf:0f:50:39:de:48:e1:1f:f5:ed:27:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f78361a077b0d789135ccd68b1261db138f950
Validity
Not Before: Nov 11 07:02:23 2025 GMT
Not After : Nov 12 07:02:23 2025 GMT
Subject: CN=438e4dfe07e40f494aa8047745ff67e2fbe678fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9b:46:5c:9b:ea:0e:71:9d:d4:46:b3:bb:a5:
05:7e:66:35:e5:53:d1:0d:61:eb:ea:b2:e3:e9:03:
33:89:50:9e:48:9c:16:fa:c1:87:d7:5e:d2:4a:84:
e6:12:18:fd:77:08:4b:9a:bf:8d:2a:ed:81:64:4d:
dc:4f:2e:e1:79:f0:14:13:a5:bd:e1:96:97:4f:e8:
d3:73:35:22:0c:0e:05:24:89:1f:5f:0c:95:18:aa:
4b:56:9b:8a:fd:16:aa:91:8f:9a:95:df:81:9f:51:
9b:b3:cc:20:57:e2:b0:2e:34:d9:3f:c6:51:c6:cb:
4b:4d:13:99:4c:bf:b7:86:15:e9:b3:a1:31:02:36:
db:51:fd:a5:39:d7:8b:e7:41:a6:35:d7:80:5b:4e:
b2:1c:04:28:25:ee:c9:a9:a3:2c:96:0f:89:19:18:
26:12:98:aa:5a:a5:da:e7:e9:0f:e9:d6:2c:a2:e7:
d6:68:44:50:9c:09:d6:04:49:a2:47:f9:29:7a:ed:
74:e1:df:56:03:cc:74:34:42:89:99:46:7e:66:67:
02:0e:6e:2b:78:ce:60:60:d6:0f:01:0f:f8:43:e6:
db:de:46:e2:a8:ef:40:36:46:d7:a6:e5:36:b9:d5:
3c:a7:f4:9f:cb:28:3d:ee:9a:b9:0e:f8:4c:21:43:
98:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8E:4D:FE:07:E4:0F:49:4A:A8:04:77:45:FF:67:E2:FB:E6:78:FB
X509v3 Authority Key Identifier:
keyid:34:F7:83:61:A0:77:B0:D7:89:13:5C:CD:68:B1:26:1D:B1:38:F9:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:52:85:37:94:3a:ca:95:82:80:24:a8:2c:69:01:cc:70:10:
a1:05:00:17:80:4b:b4:08:8a:0f:ac:81:8e:40:70:41:4c:08:
a8:e1:97:8b:c7:7e:ab:0e:3a:40:95:c5:da:c5:d7:5c:bf:a9:
17:44:37:54:76:8c:b2:c7:d2:dc:6d:8f:62:f3:ac:7b:d5:5b:
e8:d9:90:c1:e3:98:17:98:b2:cb:37:58:53:d9:28:14:96:f7:
89:31:2f:52:65:12:dd:a3:28:87:dd:3a:7e:95:8d:5a:31:f0:
88:72:c5:45:51:17:cd:9d:09:5e:e6:15:2a:b2:54:d8:db:9f:
a2:b7:0a:97:13:16:30:b0:1e:82:85:d4:87:33:e3:20:86:5b:
71:97:fa:7f:bb:00:62:39:74:65:98:7d:04:07:2b:d5:ba:65:
96:dc:4c:d1:3b:ca:00:ac:85:21:06:e2:3a:de:10:a1:d6:bd:
a5:1f:38:9b:20:c9:ac:83:45:dc:18:dd:da:89:ef:1c:2d:0c:
46:6a:33:3c:75:0f:5b:83:d2:7c:4c:03:e8:d4:f2:e9:61:98:
48:83:35:38:e9:51:b6:b9:dc:b8:dc:0f:bb:0d:c3:bc:17:49:
de:6d:a5:a7:cf:8b:22:c0:95:01:52:c7:15:c6:d8:31:7d:1b:
a1:b2:54:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:09 2025 by rpki-client