Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
File: NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft (raw, json)
Hash identifier: LfKmA9+4sLAnoIAS1KcP4aMCFfqLuhuJzvYfiMHGLUU=
Subject key identifier: 42:07:82:DD:17:AE:63:C1:7A:44:7F:03:C5:A6:6B:52:3B:05:D6:72
Authority key identifier: 34:F7:83:61:A0:77:B0:D7:89:13:5C:CD:68:B1:26:1D:B1:38:F9:50
Certificate issuer: /CN=34f78361a077b0d789135ccd68b1261db138f950
Certificate serial: 019A4EF55DA0AA6C44F04BED693F9166F962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
Manifest number: 1108
Signing time: Tue 04 Nov 2025 13:01:34 +0000
Manifest this update: Tue 04 Nov 2025 13:01:34 +0000
Manifest next update: Wed 05 Nov 2025 13:01:34 +0000
Files and hashes: 1: BT-QKLCE4MZ0YtWA2nAk6qpxv6g.roa (hash: t+OljMW5uOHxrHIlucZj5mZPbb09wnIuaUx+FWzOywc=)
2: NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl (hash: eZh+2H/BIzyxIQSRmoIYDR8/ppfpEmYCsuqvIxN4UYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:5d:a0:aa:6c:44:f0:4b:ed:69:3f:91:66:f9:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f78361a077b0d789135ccd68b1261db138f950
Validity
Not Before: Nov 4 13:01:34 2025 GMT
Not After : Nov 5 13:01:34 2025 GMT
Subject: CN=420782dd17ae63c17a447f03c5a66b523b05d672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cf:19:02:c6:34:31:92:39:a8:23:cd:5a:dd:
4a:53:e0:f8:10:11:a9:40:23:65:0a:37:e6:04:6a:
dc:7f:0e:99:dc:c7:75:96:d9:00:24:07:e0:43:6d:
f4:be:48:dc:01:4e:21:59:62:1b:e6:19:a2:f8:85:
7d:aa:74:28:56:b6:bf:d2:d3:02:fd:5a:a2:d3:b5:
d5:44:98:ed:23:fc:c9:e5:8f:39:50:2e:e9:a4:d2:
87:ac:aa:d0:a2:23:a7:66:8c:de:c5:5c:bb:ba:a0:
98:84:be:d3:4e:a0:ef:26:a8:7c:96:e0:4b:f9:e4:
a8:d2:19:11:8c:83:0a:c9:4d:f9:c8:a0:61:5d:5d:
75:ba:a2:1b:e5:1f:63:41:e7:83:0e:ae:bd:63:e7:
2a:c1:0f:22:c6:58:f6:3c:7d:48:73:3a:a7:f8:8e:
ff:ac:d4:7d:3d:90:64:d2:dd:32:67:c3:c9:0c:ed:
88:d0:ff:b3:e3:f7:98:6f:d1:2d:fc:8b:01:ea:59:
19:fe:0e:e0:0e:35:49:f0:ba:2e:fd:b3:42:58:78:
f6:99:89:97:7a:20:cc:b6:e3:cb:51:4b:87:38:f3:
03:9c:67:18:8b:03:c7:88:73:31:fd:97:d0:d1:35:
c2:e8:74:7e:13:ba:0a:a3:f9:41:65:04:96:8f:ac:
fb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:07:82:DD:17:AE:63:C1:7A:44:7F:03:C5:A6:6B:52:3B:05:D6:72
X509v3 Authority Key Identifier:
keyid:34:F7:83:61:A0:77:B0:D7:89:13:5C:CD:68:B1:26:1D:B1:38:F9:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPeDYaB3sNeJE1zNaLEmHbE4-VA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9df9f2-a20a-429c-82e8-a5716865fd35/1/NPeDYaB3sNeJE1zNaLEmHbE4-VA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9f:13:41:ae:94:0b:13:44:8b:0e:6f:52:42:0f:51:76:77:
bd:6b:ba:fb:25:43:09:db:cb:f4:34:df:5e:11:d5:08:42:44:
a0:01:04:53:14:5e:35:4d:d2:32:c4:a3:aa:3c:f3:15:1d:30:
ac:2b:17:c8:06:f4:75:b1:76:60:36:94:f8:be:d3:e3:89:03:
ee:1a:a9:32:e7:a2:28:6f:2f:0e:3f:df:ae:29:26:5f:a0:ac:
67:21:e9:d5:a8:97:99:12:44:70:8a:35:b3:e2:c3:21:77:91:
a6:66:81:b8:0a:9a:36:a9:4a:79:ac:53:66:77:d8:84:33:55:
bb:11:09:a2:9c:ff:c4:17:a3:db:1b:3a:65:ce:9c:56:a1:56:
f8:41:26:bb:71:31:80:c8:9b:ce:6b:6c:11:2f:dd:9c:48:05:
7c:14:18:78:1b:65:cc:ad:a4:60:99:4d:68:94:f2:8f:d7:12:
40:9f:a0:12:17:2e:00:65:a9:4e:10:fd:09:da:3c:2b:f8:b9:
d0:9e:04:0c:13:dd:00:4b:e8:0f:81:35:8a:6d:10:cb:6e:d5:
b8:d1:57:e7:d6:b2:5b:80:bd:3c:45:2c:e5:30:df:23:f3:21:
fc:99:a4:2f:e5:46:c4:c7:3a:a3:08:84:e8:30:3a:dc:ac:05:
77:ef:5e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:57:08 2025 by rpki-client