Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
File: NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft (raw, json)
Hash identifier: EZZJYhWCNSoCOd0oN1izyid4kOXiMFet2U7DChhvFQ4=
Subject key identifier: AB:6E:A1:09:AB:2D:64:2B:1D:72:86:19:90:C4:1B:C3:01:3C:9B:6E
Authority key identifier: 34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
Certificate issuer: /CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
Certificate serial: 019A507512E46762E242EF8AAF6D57CF7B21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 20:00:41 +0000
Manifest this update: Tue 04 Nov 2025 20:00:41 +0000
Manifest next update: Wed 05 Nov 2025 20:00:41 +0000
Files and hashes: 1: NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl (hash: F7DycmhK99lmi/+BJBUD4iSX7t7Ho8jX6bHkU8tBOmc=)
2: n9slDOW816oCeV0oI8sGph9zEHY.roa (hash: qD/TRD91aBYWewYzdvChC8Edlu2GICT4uFezEduAc7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:12:e4:67:62:e2:42:ef:8a:af:6d:57:cf:7b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
Validity
Not Before: Nov 4 20:00:41 2025 GMT
Not After : Nov 5 20:00:41 2025 GMT
Subject: CN=ab6ea109ab2d642b1d72861990c41bc3013c9b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d5:ff:8b:a8:46:fc:45:6e:0c:b7:b7:df:e9:
64:25:26:07:d2:2f:45:91:f9:3e:ad:85:b2:6b:37:
9a:1a:0f:1a:d2:58:1c:49:8f:89:fb:a5:73:d0:5f:
b6:d3:53:54:d2:18:3b:4a:07:3a:e2:42:04:35:8f:
97:74:89:1b:6e:c2:16:28:f4:fc:c8:94:f4:5a:98:
18:5c:7f:ce:cb:59:68:94:c9:9d:df:19:b9:d8:0d:
37:b2:6b:ff:26:42:1d:cb:f1:e6:a2:bb:ff:21:e9:
ae:8f:d3:34:3c:f6:3a:34:4b:f2:b7:1c:96:cd:33:
f9:8b:90:27:13:16:78:88:0f:66:18:9e:d6:e3:39:
85:a4:cd:22:10:1e:15:f6:77:69:f1:28:86:83:55:
d5:0c:51:33:30:2a:0f:6b:cf:c7:6d:40:64:6d:98:
1e:1d:4f:11:8b:a8:d1:b4:66:06:8d:c9:14:fd:29:
0c:cf:03:2c:bb:34:c6:d8:93:b1:6c:78:a2:e9:58:
24:ba:ed:3d:ef:54:5f:fa:8d:72:dc:84:02:53:94:
19:55:9e:1d:54:43:26:f7:f0:a0:de:56:de:d4:d1:
f7:e8:df:31:af:4b:a3:a6:5a:c0:e5:67:15:2c:c7:
06:6a:b2:70:20:5b:23:aa:74:f3:3a:c1:2a:d2:4b:
18:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6E:A1:09:AB:2D:64:2B:1D:72:86:19:90:C4:1B:C3:01:3C:9B:6E
X509v3 Authority Key Identifier:
keyid:34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:cb:f6:6f:a1:52:4b:a8:32:b4:80:0e:1c:e8:57:98:bc:a9:
3a:1f:ee:5b:55:ac:0e:18:3e:74:5b:8f:dd:a2:b7:b0:fe:92:
d7:42:93:f1:d3:1d:27:3f:fe:50:b1:90:fe:c3:da:ed:1f:8a:
99:46:f9:10:c2:19:2b:ba:48:0c:89:f1:e2:25:f3:b1:e7:1d:
19:be:30:3e:77:44:62:34:c6:c8:ab:dd:2c:89:7b:48:1e:b3:
c3:f7:25:12:b2:3b:64:e9:c9:db:97:bc:c9:6a:47:ac:a0:5c:
74:1a:5c:18:9d:b2:7c:2c:37:7d:30:21:3f:dd:28:4b:a3:3f:
86:c6:0c:e5:c4:cd:a8:67:cd:a7:d0:27:8c:ef:8a:7f:14:a7:
4d:60:fc:95:4c:7e:3d:76:94:06:58:a5:62:b0:b5:20:a8:72:
81:ca:a4:27:b9:93:e1:bf:46:60:9d:a3:ad:7a:ac:9a:fe:f4:
69:ce:93:ca:b0:0f:4b:71:a3:2a:91:b9:7d:6a:a7:b9:f1:fd:
90:17:9e:56:3b:8f:38:63:dd:cf:fe:24:3b:bb:e1:af:fd:dc:
c2:fe:b4:27:52:f5:65:df:11:d5:6a:af:9c:97:11:a4:85:05:
9b:e0:8e:3a:86:ff:29:d6:89:b9:a2:29:e8:fe:e2:2d:65:64:
31:28:21:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:05:52 2025 by rpki-client