Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft
File: NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft (raw, json)
Hash identifier: wMNSwl0DYGIqTWxCQBQR2a+5V2p5rpPaGPt6taB+Ji8=
Subject key identifier: ED:8E:AE:08:3F:34:CF:E9:07:08:A3:79:24:B6:5B:27:4F:9B:6C:18
Authority key identifier: 34:B0:C5:A4:03:E2:DA:D3:C4:7B:79:1F:DA:20:42:CF:71:50:09:CF
Certificate issuer: /CN=34b0c5a403e2dad3c47b791fda2042cf715009cf
Certificate serial: 0199FAD804BC8C934C27B314216E25F98742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft
Manifest number: 07A4
Signing time: Sun 19 Oct 2025 05:01:24 +0000
Manifest this update: Sun 19 Oct 2025 05:01:24 +0000
Manifest next update: Mon 20 Oct 2025 05:01:24 +0000
Files and hashes: 1: NLDFpAPi2tPEe3kf2iBCz3FQCc8.crl (hash: kBAdWaXCrDSETMujHSQK4TbIcmVaMCnJmezAALA7aNM=)
2: XZf82C_CN-vLQbpUrT-DW4sm3Y0.roa (hash: pAKJ5T3FZi6TyLDIs/UxYmL+rXXkynL3g9BJ4W4ROUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:04:bc:8c:93:4c:27:b3:14:21:6e:25:f9:87:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b0c5a403e2dad3c47b791fda2042cf715009cf
Validity
Not Before: Oct 19 05:01:24 2025 GMT
Not After : Oct 20 05:01:24 2025 GMT
Subject: CN=ed8eae083f34cfe90708a37924b65b274f9b6c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:51:85:0a:42:82:65:80:fc:fd:b6:bb:b0:2f:
7d:89:e3:e6:e1:e7:1c:59:82:93:1e:b5:29:db:fd:
02:e2:e6:4c:70:05:dc:34:03:a8:75:4d:b2:0c:07:
e9:35:4b:0d:c7:6e:09:63:92:62:db:8f:85:a0:84:
8e:51:e8:c8:61:4d:8f:ff:dd:5a:8d:bf:c0:7b:4a:
ca:70:d5:e8:9c:6f:f5:0b:37:48:19:db:82:c6:51:
a5:60:f7:ef:80:16:a2:69:57:47:2b:88:d3:0e:3e:
4a:40:dc:d8:ec:83:57:6a:60:41:0b:f4:5e:d2:59:
60:0d:12:86:16:c8:cd:36:8b:f9:0e:7f:70:e3:3e:
cf:62:ad:a0:4e:5a:b8:71:5b:22:2b:13:d5:a1:65:
6c:4d:41:da:99:af:5c:6c:9d:50:00:da:11:53:e0:
d7:b8:d1:57:71:ce:31:f7:55:cd:e2:61:ec:40:8d:
e4:74:1f:24:b9:39:b0:ea:a7:cd:94:b3:44:51:ca:
78:96:5f:9d:e8:c9:0c:66:3b:8b:1d:11:97:f0:7b:
9d:bc:27:9f:6b:f6:e4:c3:5a:5f:0f:3d:b0:f8:c1:
94:a3:61:87:2f:a7:88:8d:65:bf:53:f0:e5:19:f4:
6a:24:d7:4b:6b:c2:39:51:d2:50:f4:36:44:f4:b3:
3e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8E:AE:08:3F:34:CF:E9:07:08:A3:79:24:B6:5B:27:4F:9B:6C:18
X509v3 Authority Key Identifier:
keyid:34:B0:C5:A4:03:E2:DA:D3:C4:7B:79:1F:DA:20:42:CF:71:50:09:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:d1:ec:e8:0b:89:a1:4c:85:4d:c3:c8:6d:36:c4:78:e7:32:
70:84:8b:53:ec:d9:c5:5d:b8:79:0f:2b:b2:d6:67:c1:44:10:
c8:da:6d:ff:af:7e:e8:aa:25:08:2e:bf:fa:58:bc:b8:d4:67:
2b:5b:c4:65:31:51:19:54:0d:ad:a8:4a:42:42:8e:e8:3c:6c:
2c:53:d7:68:6c:be:d3:cf:a2:07:e3:c1:74:59:98:e8:f2:03:
65:99:c1:ed:9d:58:83:55:9c:10:76:96:09:d7:5c:cd:37:53:
c5:1c:e8:79:90:6e:59:03:de:f8:52:a8:b6:71:6b:37:12:94:
f9:0e:24:2b:c5:a2:e8:49:6f:f8:bf:1e:f8:6f:e2:20:0b:c1:
57:16:27:ba:bb:22:ce:e8:57:bd:74:84:c3:1a:0e:f9:c2:3a:
93:c3:d0:d5:52:33:2b:e4:51:db:53:aa:85:2e:55:1d:94:06:
6e:a2:48:0b:0b:da:e2:15:25:db:89:d2:44:d1:77:e2:98:ef:
4c:a8:a1:3b:9e:e4:ef:2d:c0:27:77:34:c4:1f:bc:67:39:06:
3d:42:e4:99:9f:99:58:36:90:6f:2a:cc:58:b0:2d:f3:7f:3f:
4a:bd:98:0c:6b:b7:ea:6e:f8:f7:3b:d8:c1:91:b1:29:5c:c9:
6b:04:70:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:43 2025 by rpki-client