Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft
File: NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft (raw, json)
Hash identifier: GMP2d3XaExtWz0mV5F7usZ6T5r3ddsmq/YyDn04mgJc=
Subject key identifier: 90:E8:63:39:FE:F5:DA:04:99:37:26:6E:38:CD:78:ED:D8:F6:61:94
Authority key identifier: 34:B9:60:F6:F1:92:55:EA:39:66:6F:83:3E:BE:27:17:61:99:4B:15
Certificate issuer: /CN=34b960f6f19255ea39666f833ebe271761994b15
Certificate serial: 0199FCFD3D6C4202A0252D3F9B5779789AA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft
Manifest number: 087C
Signing time: Sun 19 Oct 2025 15:01:18 +0000
Manifest this update: Sun 19 Oct 2025 15:01:18 +0000
Manifest next update: Mon 20 Oct 2025 15:01:18 +0000
Files and hashes: 1: NLlg9vGSVeo5Zm-DPr4nF2GZSxU.crl (hash: vKdLZRvUD6PGjiSgyxMR+KdjUEvT3MZ5wYK5g4PZD8o=)
2: uvlLUALpDF1wh1MewC4fR9s0Hsc.roa (hash: M16EAVQJOFd1bjjRXsF6MezxtZfD4eItTZd4rdVVcXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:3d:6c:42:02:a0:25:2d:3f:9b:57:79:78:9a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b960f6f19255ea39666f833ebe271761994b15
Validity
Not Before: Oct 19 15:01:18 2025 GMT
Not After : Oct 20 15:01:18 2025 GMT
Subject: CN=90e86339fef5da049937266e38cd78edd8f66194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9f:9e:42:8c:46:46:a4:f5:2f:bb:ce:12:67:
b8:ce:18:a8:86:3f:d9:45:dd:25:87:99:5e:a2:70:
01:bf:6e:97:b5:47:4b:37:da:6a:51:91:85:65:3a:
30:e9:13:8e:b8:93:06:51:4f:4f:f9:4f:22:27:23:
24:d6:1e:54:05:27:3b:33:e0:d7:8c:b9:a2:46:5a:
13:e7:00:b3:2b:03:93:f9:df:00:8f:f6:56:8b:b7:
c9:28:ac:42:fc:b0:bf:8b:e6:47:f9:02:26:37:0d:
5c:52:06:51:01:59:20:cb:52:3f:d9:0c:d8:6f:ff:
41:ae:e4:39:84:69:4c:15:1b:68:a2:5c:f3:65:17:
d1:4e:26:16:7f:4d:1c:4b:cf:f1:76:f3:ee:13:75:
93:26:06:02:b1:f3:0b:54:85:a3:68:33:7c:39:95:
28:1e:9e:45:63:40:2c:1d:f3:6c:b3:43:67:1c:db:
66:3a:46:2d:a0:db:35:8b:d4:13:5f:b2:4f:32:f8:
31:99:37:31:29:a6:47:7c:c1:b2:c1:e2:ce:87:50:
a9:2a:bf:9f:af:70:bb:bb:c2:8e:fd:89:d4:20:31:
0e:35:b5:a9:31:1c:a1:34:f8:63:e5:d0:16:8f:0b:
46:1a:45:54:8e:53:a8:ba:6d:30:bd:ab:99:19:4f:
57:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E8:63:39:FE:F5:DA:04:99:37:26:6E:38:CD:78:ED:D8:F6:61:94
X509v3 Authority Key Identifier:
keyid:34:B9:60:F6:F1:92:55:EA:39:66:6F:83:3E:BE:27:17:61:99:4B:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:13:8e:2c:0c:72:64:15:99:7d:28:37:00:17:b2:69:3f:f2:
4f:00:dd:4b:f9:07:9c:85:e7:c5:c7:c2:e2:8e:2d:d1:b6:f5:
f0:ed:49:ef:b3:66:74:04:28:76:9c:29:cd:bc:f0:96:8c:74:
8d:ae:9a:af:ce:b2:9f:e8:89:15:24:3b:bc:32:3a:c8:2f:29:
d1:d2:43:00:fd:6c:48:86:c6:36:48:a5:e0:46:c8:70:da:14:
42:c5:ca:8d:4f:7a:2e:2f:ee:e4:f8:17:a8:49:97:41:15:38:
a6:b3:e5:b6:85:8e:9e:74:be:36:c6:a0:59:0a:cd:5e:03:f0:
a3:22:c0:10:e8:4e:49:3f:6e:58:82:c3:7a:2d:27:40:7d:e6:
1d:c7:fe:4c:2c:0a:de:32:92:09:53:2a:88:3b:9a:33:9a:52:
1c:81:0c:da:4c:8d:28:7b:03:cb:6d:91:14:af:0b:cc:0d:d8:
18:c1:67:b7:10:a5:6d:9d:c5:d6:d7:58:5d:8e:2b:db:86:11:
16:92:f9:35:b4:66:7c:64:d2:f9:9a:a2:7f:3d:05:48:c1:bd:
65:22:df:6c:76:d7:86:be:e6:bb:09:d9:ad:a2:df:81:40:51:
c9:ca:96:95:48:b3:4b:8e:ca:9c:da:8d:a3:13:2c:66:de:98:
21:11:b3:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/T1sQgKgJS0/m1d5eJqlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0Yjk2MGY2ZjE5MjU1ZWEzOTY2NmY4MzNlYmUyNzE3NjE5
OTRiMTUwHhcNMjUxMDE5MTUwMTE4WhcNMjUxMDIwMTUwMTE4WjAzMTEwLwYDVQQD
Eyg5MGU4NjMzOWZlZjVkYTA0OTkzNzI2NmUzOGNkNzhlZGQ4ZjY2MTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5J+eQoxGRqT1L7vOEme4zhiohj/Z
Rd0lh5leonABv26XtUdLN9pqUZGFZTow6ROOuJMGUU9P+U8iJyMk1h5UBSc7M+DX
jLmiRloT5wCzKwOT+d8Aj/ZWi7fJKKxC/LC/i+ZH+QImNw1cUgZRAVkgy1I/2QzY
b/9BruQ5hGlMFRtoolzzZRfRTiYWf00cS8/xdvPuE3WTJgYCsfMLVIWjaDN8OZUo
Hp5FY0AsHfNss0NnHNtmOkYtoNs1i9QTX7JPMvgxmTcxKaZHfMGyweLOh1CpKr+f
r3C7u8KO/YnUIDEONbWpMRyhNPhj5dAWjwtGGkVUjlOoum0wvauZGU9XxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJDoYzn+9doEmTcmbjjNeO3Y9mGUMB8GA1UdIwQY
MBaAFDS5YPbxklXqOWZvgz6+JxdhmUsVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkxsZzl2R1NWZW81Wm0tRFByNG5GMkdaU3hVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9iNzBmNWMtZTgzMS00MjdhLWFkYTQt
M2E3M2JlOTBhNTA2LzEvTkxsZzl2R1NWZW81Wm0tRFByNG5GMkdaU3hVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9iNzBmNWMtZTgzMS00MjdhLWFkYTQtM2E3M2JlOTBhNTA2
LzEvTkxsZzl2R1NWZW81Wm0tRFByNG5GMkdaU3hVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYxOOLAxy
ZBWZfSg3ABeyaT/yTwDdS/kHnIXnxcfC4o4t0bb18O1J77NmdAQodpwpzbzwlox0
ja6ar86yn+iJFSQ7vDI6yC8p0dJDAP1sSIbGNkil4EbIcNoUQsXKjU96Li/u5PgX
qEmXQRU4prPltoWOnnS+NsagWQrNXgPwoyLAEOhOST9uWILDei0nQH3mHcf+TCwK
3jKSCVMqiDuaM5pSHIEM2kyNKHsDy22RFK8LzA3YGMFntxClbZ3F1tdYXY4r24YR
FpL5NbRmfGTS+Zqifz0FSMG9ZSLfbHbXhr7muwnZraLfgUBRycqWlUizS47KnNqN
oxMsZt6YIRGzig==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:38 2025 by rpki-client