Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.mft
File: NP8Aripv7u1qSYfLyRNGf9_vg-g.mft (raw, json)
Hash identifier: QdFIeftInXuP0bYZs8IgPGEL+PmvgkRkUCxn6XV6KlA=
Subject key identifier: 13:09:21:A7:84:7C:70:92:D7:70:66:F1:D7:CF:8C:01:E9:B2:50:00
Authority key identifier: 34:FF:00:AE:2A:6F:EE:ED:6A:49:87:CB:C9:13:46:7F:DF:EF:83:E8
Certificate issuer: /CN=34ff00ae2a6feeed6a4987cbc913467fdfef83e8
Certificate serial: 019A4DAB0DCF03E17C679EA6CF22ABFAE0D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NP8Aripv7u1qSYfLyRNGf9_vg-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.mft
Manifest number: 090C
Signing time: Tue 04 Nov 2025 07:00:47 +0000
Manifest this update: Tue 04 Nov 2025 07:00:47 +0000
Manifest next update: Wed 05 Nov 2025 07:00:47 +0000
Files and hashes: 1: NP8Aripv7u1qSYfLyRNGf9_vg-g.crl (hash: x52YWaPG436LEoiKPYnnPLshhxffiaFXejIWaKsrCCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NP8Aripv7u1qSYfLyRNGf9_vg-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:0d:cf:03:e1:7c:67:9e:a6:cf:22:ab:fa:e0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34ff00ae2a6feeed6a4987cbc913467fdfef83e8
Validity
Not Before: Nov 4 07:00:47 2025 GMT
Not After : Nov 5 07:00:47 2025 GMT
Subject: CN=130921a7847c7092d77066f1d7cf8c01e9b25000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:58:e0:ed:a4:73:e9:fd:1c:7c:1c:30:9c:b9:
a9:94:0a:5f:ce:9b:da:87:d5:77:ef:0d:53:98:51:
4c:ca:72:b1:38:28:eb:1b:92:37:26:69:5e:7d:8d:
72:9c:ab:4b:52:f0:97:0c:96:d0:08:f5:42:07:8e:
d5:07:73:8e:e2:66:ec:f2:2f:42:7f:cc:99:10:7c:
ce:2d:72:ea:29:91:7c:21:d6:fe:cc:07:bd:0c:08:
57:9e:0f:e2:ea:1f:46:22:cb:eb:66:da:84:cc:66:
7c:b2:f4:d5:f9:7e:7d:2d:be:8d:62:dc:4b:22:85:
84:f6:59:5b:aa:d5:45:98:d2:c0:2b:c4:fd:27:6b:
34:7a:71:7a:af:89:37:fa:f3:28:cf:79:57:3a:e1:
c6:59:94:2d:60:8f:74:ec:42:f8:e5:aa:ed:ee:45:
3d:c2:8c:75:03:ee:3c:7f:ae:a3:1d:d1:72:05:8c:
cf:c5:fd:02:55:19:f4:d1:ca:72:88:1d:90:e9:d3:
dc:8f:b0:37:94:9b:ae:fa:0b:5d:08:94:3c:aa:d4:
1e:ad:0b:5f:13:41:18:40:5d:a0:21:a1:f6:1b:8f:
36:7b:80:f7:e3:b3:45:0e:bd:0b:91:5f:47:b7:16:
0f:2d:8f:5e:fc:c6:f8:41:f4:82:a3:5d:8e:66:df:
0c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:09:21:A7:84:7C:70:92:D7:70:66:F1:D7:CF:8C:01:E9:B2:50:00
X509v3 Authority Key Identifier:
keyid:34:FF:00:AE:2A:6F:EE:ED:6A:49:87:CB:C9:13:46:7F:DF:EF:83:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NP8Aripv7u1qSYfLyRNGf9_vg-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f434e3-ca89-4a6d-a2ae-8b3e40063858/1/NP8Aripv7u1qSYfLyRNGf9_vg-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:5a:70:04:22:0d:6a:7c:89:50:a0:c9:2d:8b:08:0e:52:db:
1a:54:68:5a:ff:75:b5:6e:31:50:59:48:83:a8:11:fc:38:00:
42:ab:c9:16:c6:dc:00:9b:f7:98:89:58:23:4d:11:63:92:a5:
53:02:b6:e7:a5:eb:16:bc:35:30:d5:3b:5b:c9:05:fc:4f:d7:
9b:b3:44:3f:90:4b:c4:75:e3:f9:00:c0:87:0b:78:b8:87:ee:
f5:bf:9a:31:60:08:6e:71:2f:b5:58:dd:e7:a0:67:5e:d4:fb:
d4:3b:e7:c5:9c:ae:69:32:31:92:87:2f:db:ec:46:0a:4d:ac:
dc:29:e6:75:9a:aa:44:b4:a0:3c:5d:52:49:a2:73:06:6e:33:
25:7f:70:c2:7e:89:8b:7a:d2:99:01:a9:ea:05:41:69:af:86:
47:e6:4b:3d:7a:fc:ab:87:b1:c7:fa:28:40:77:88:a1:5a:86:
27:6a:f0:0b:4d:a2:34:c5:f3:2c:bc:9a:b9:dc:0d:ad:05:0b:
21:c1:85:94:94:04:5e:c5:74:70:55:56:7f:a8:70:03:8a:ee:
e6:5c:f0:57:10:02:6f:ac:49:45:8a:6a:2b:5e:db:54:16:b4:
ec:09:3a:45:d2:05:1b:2a:a7:4c:71:21:c5:e0:3e:0f:67:21:
e7:5c:22:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqw3PA+F8Z56mzyKr+uDQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZmYwMGFlMmE2ZmVlZWQ2YTQ5ODdjYmM5MTM0NjdmZGZl
ZjgzZTgwHhcNMjUxMTA0MDcwMDQ3WhcNMjUxMTA1MDcwMDQ3WjAzMTEwLwYDVQQD
EygxMzA5MjFhNzg0N2M3MDkyZDc3MDY2ZjFkN2NmOGMwMWU5YjI1MDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFjg7aRz6f0cfBwwnLmplApfzpva
h9V37w1TmFFMynKxOCjrG5I3JmlefY1ynKtLUvCXDJbQCPVCB47VB3OO4mbs8i9C
f8yZEHzOLXLqKZF8Idb+zAe9DAhXng/i6h9GIsvrZtqEzGZ8svTV+X59Lb6NYtxL
IoWE9llbqtVFmNLAK8T9J2s0enF6r4k3+vMoz3lXOuHGWZQtYI907EL45art7kU9
wox1A+48f66jHdFyBYzPxf0CVRn00cpyiB2Q6dPcj7A3lJuu+gtdCJQ8qtQerQtf
E0EYQF2gIaH2G482e4D347NFDr0LkV9HtxYPLY9e/Mb4QfSCo12OZt8McwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMJIaeEfHCS13Bm8dfPjAHpslAAMB8GA1UdIwQY
MBaAFDT/AK4qb+7takmHy8kTRn/f74PoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlA4QXJpcHY3dTFxU1lmTHlSTkdmOV92Zy1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mNDM0ZTMtY2E4OS00YTZkLWEyYWUt
OGIzZTQwMDYzODU4LzEvTlA4QXJpcHY3dTFxU1lmTHlSTkdmOV92Zy1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mNDM0ZTMtY2E4OS00YTZkLWEyYWUtOGIzZTQwMDYzODU4
LzEvTlA4QXJpcHY3dTFxU1lmTHlSTkdmOV92Zy1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhVpwBCIN
anyJUKDJLYsIDlLbGlRoWv91tW4xUFlIg6gR/DgAQqvJFsbcAJv3mIlYI00RY5Kl
UwK256XrFrw1MNU7W8kF/E/Xm7NEP5BLxHXj+QDAhwt4uIfu9b+aMWAIbnEvtVjd
56BnXtT71DvnxZyuaTIxkocv2+xGCk2s3CnmdZqqRLSgPF1SSaJzBm4zJX9wwn6J
i3rSmQGp6gVBaa+GR+ZLPXr8q4exx/ooQHeIoVqGJ2rwC02iNMXzLLyaudwNrQUL
IcGFlJQEXsV0cFVWf6hwA4ru5lzwVxACb6xJRYpqK17bVBa07Ak6RdIFGyqnTHEh
xeA+D2ch51wikQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:59:04 2025 by rpki-client