Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
File: npzXqbifTgVovUoLbCwRzRfn8OE.mft (raw, json)
Hash identifier: VB4NK1QvPOiAu3LnTG85wHW64a4NeVkb87t1dX8w45A=
Subject key identifier: 86:95:6B:6E:F7:07:47:C2:5D:C6:6D:B8:E8:3B:E6:FA:D0:86:86:F0
Authority key identifier: 9E:9C:D7:A9:B8:9F:4E:05:68:BD:4A:0B:6C:2C:11:CD:17:E7:F0:E1
Certificate issuer: /CN=9e9cd7a9b89f4e0568bd4a0b6c2c11cd17e7f0e1
Certificate serial: 019874508E0047A2EFA6F7C3635EBE5130A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npzXqbifTgVovUoLbCwRzRfn8OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
Manifest number: 03C9
Signing time: Mon 04 Aug 2025 09:01:32 +0000
Manifest this update: Mon 04 Aug 2025 09:01:32 +0000
Manifest next update: Tue 05 Aug 2025 09:01:32 +0000
Files and hashes: 1: npzXqbifTgVovUoLbCwRzRfn8OE.crl (hash: iVVRTnvTDDTcTBG/Td3W1Y450qvjWPiOfln/fFm5db0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/npzXqbifTgVovUoLbCwRzRfn8OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:8e:00:47:a2:ef:a6:f7:c3:63:5e:be:51:30:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e9cd7a9b89f4e0568bd4a0b6c2c11cd17e7f0e1
Validity
Not Before: Aug 4 09:01:32 2025 GMT
Not After : Aug 5 09:01:32 2025 GMT
Subject: CN=86956b6ef70747c25dc66db8e83be6fad08686f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:48:13:47:51:4a:0f:16:05:65:cf:bd:9f:47:
b8:4f:c1:98:d3:27:99:f2:6e:08:27:00:a2:29:9f:
49:cd:f7:96:9a:ad:0e:4f:db:71:1e:30:5f:fb:36:
f3:cc:52:b4:ed:4a:b7:a4:38:1f:f8:0a:9f:98:e1:
a7:40:53:9c:14:1f:cd:6e:08:0f:34:1e:17:1f:89:
fd:22:93:82:d8:5c:3e:3e:f7:c3:df:89:52:ec:8f:
a5:40:51:e3:5a:c4:9f:a0:50:47:7d:2b:e4:80:f1:
a5:1e:b1:b3:1f:3e:80:5e:61:d1:ef:44:a9:2f:86:
8e:e7:66:d5:52:6e:c5:11:7f:b5:0e:85:c2:28:df:
1a:6b:19:4d:5d:cf:61:8c:20:21:4d:7f:1d:1f:90:
ac:f7:bc:1f:00:9c:e7:53:21:15:48:8e:77:4a:19:
b0:29:57:67:24:81:e0:55:d2:de:11:96:9c:f1:fc:
c7:22:03:6e:d2:62:85:e4:50:b9:fd:78:2c:f4:85:
03:eb:1f:b2:b9:00:89:4e:ac:fb:61:21:93:74:b0:
c9:58:02:9d:38:0f:46:1e:cc:c8:63:7f:96:4d:75:
2c:c8:5d:57:52:7f:38:01:5f:8d:da:7e:8f:f0:be:
4e:f4:42:61:df:19:f4:2a:0a:80:d7:06:05:c8:ac:
f3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:95:6B:6E:F7:07:47:C2:5D:C6:6D:B8:E8:3B:E6:FA:D0:86:86:F0
X509v3 Authority Key Identifier:
keyid:9E:9C:D7:A9:B8:9F:4E:05:68:BD:4A:0B:6C:2C:11:CD:17:E7:F0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npzXqbifTgVovUoLbCwRzRfn8OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:d2:11:6d:2e:51:7e:63:30:96:16:c1:c4:0b:6b:0e:f5:f6:
0a:2e:48:c7:3f:ed:4d:a8:be:bc:95:20:bc:ab:70:be:18:f6:
bc:f7:49:71:38:86:be:55:72:05:b2:e0:a3:c0:21:23:d5:3f:
d2:4e:1e:11:f0:6f:0e:e5:19:03:d3:8f:20:1e:e5:8f:d4:2c:
e2:63:3a:1e:a0:32:74:96:ae:5f:5d:ba:40:43:91:4f:7d:89:
01:9f:f4:56:9e:88:45:18:36:f3:67:05:f8:0a:f4:df:5f:fd:
38:9a:64:ff:cd:5d:67:ff:c5:48:b7:da:bb:ab:d6:0c:0b:d5:
a7:91:97:4b:de:82:e4:4c:d3:c2:33:7a:3f:4c:b4:40:f2:b4:
c1:5a:3b:a2:72:26:f9:1e:3a:92:7c:7c:ec:df:db:0d:20:c7:
ba:0f:c1:b5:57:6c:a5:a6:b0:15:49:b9:56:51:d7:57:41:53:
71:51:14:5e:df:a1:56:28:38:66:11:05:7a:e1:60:5d:b1:2b:
58:82:1e:d0:88:b0:66:4f:5a:10:5f:93:c9:38:c7:4f:40:ab:
d4:44:09:0a:01:f2:b0:6a:1c:cc:1f:fd:2d:da:6b:04:7d:69:
25:2a:9f:f1:01:0f:cf:d5:85:3d:86:95:a4:1b:df:d1:8c:76:
12:13:75:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:14:43 2025 by rpki-client