Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft
File: NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft (raw, json)
Hash identifier: BSY5bKFdWb+84PtJfhVyK9byr8tKWulkQut6B5Z5Zvc=
Subject key identifier: 85:FE:31:B5:6C:E7:C1:8A:7F:36:68:32:6B:AC:94:B2:EA:0A:FA:DB
Authority key identifier: 34:B0:C5:A4:03:E2:DA:D3:C4:7B:79:1F:DA:20:42:CF:71:50:09:CF
Certificate issuer: /CN=34b0c5a403e2dad3c47b791fda2042cf715009cf
Certificate serial: 0198D73BB43615CE6253DF6CC18A8E87B6E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft
Manifest number: 070D
Signing time: Sat 23 Aug 2025 14:01:10 +0000
Manifest this update: Sat 23 Aug 2025 14:01:10 +0000
Manifest next update: Sun 24 Aug 2025 14:01:10 +0000
Files and hashes: 1: NLDFpAPi2tPEe3kf2iBCz3FQCc8.crl (hash: wuFR3bRjR26vASOymB6aDg0HZ9kTBTJNjSvKCgrfoW0=)
2: XZf82C_CN-vLQbpUrT-DW4sm3Y0.roa (hash: pAKJ5T3FZi6TyLDIs/UxYmL+rXXkynL3g9BJ4W4ROUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:b4:36:15:ce:62:53:df:6c:c1:8a:8e:87:b6:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b0c5a403e2dad3c47b791fda2042cf715009cf
Validity
Not Before: Aug 23 14:01:10 2025 GMT
Not After : Aug 24 14:01:10 2025 GMT
Subject: CN=85fe31b56ce7c18a7f3668326bac94b2ea0afadb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:92:b8:19:c8:81:0d:d9:bc:cb:e1:8a:70:15:
f1:13:8f:7a:39:d0:6c:9e:a7:38:8a:5c:a5:19:41:
bf:51:94:5b:7f:ef:24:9f:92:5c:35:cd:9b:ef:ee:
38:b9:47:08:90:68:b9:18:9d:be:d6:1f:ba:e5:c3:
df:ad:8f:4a:eb:10:56:62:4b:18:2d:38:8e:e2:8a:
e8:d3:91:95:82:83:e3:13:d7:a3:2f:f2:98:4d:e9:
11:49:50:2d:0c:a0:78:d3:8e:8a:7e:74:66:34:80:
60:cf:1b:8c:89:5b:a4:61:1c:1e:d2:d0:57:ad:d7:
61:87:5d:57:d5:0e:85:33:e7:08:cc:81:b3:e9:ee:
26:f3:20:10:58:15:6a:c8:58:08:b7:60:1b:07:47:
b8:55:35:96:23:8e:9c:28:74:40:15:e1:9c:f2:00:
c3:d0:ee:4f:4e:f7:18:2e:ea:90:dc:fd:f0:a9:23:
61:d5:6b:e4:8d:83:e1:f2:ad:a6:d0:aa:d5:a4:f0:
c5:a6:f9:f4:7c:4e:2c:12:7b:bc:8b:2c:e5:03:50:
ee:ef:0b:66:17:21:6f:a9:d1:15:ea:8f:94:5f:a0:
4f:c2:be:01:da:42:01:5b:64:3e:b0:dd:1a:85:75:
6e:9f:bd:62:e1:0f:31:52:57:ac:12:f9:bb:09:7d:
c3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:FE:31:B5:6C:E7:C1:8A:7F:36:68:32:6B:AC:94:B2:EA:0A:FA:DB
X509v3 Authority Key Identifier:
keyid:34:B0:C5:A4:03:E2:DA:D3:C4:7B:79:1F:DA:20:42:CF:71:50:09:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:03:bc:4d:a5:0f:d3:19:d3:82:e9:bb:d3:ae:76:76:9f:a3:
6c:7d:a5:d9:68:5a:c8:f2:c1:91:f3:29:3b:a5:02:b4:eb:c6:
b3:2f:f5:49:74:71:79:4e:7c:42:42:83:da:a8:7d:c8:a5:20:
f5:4d:7d:17:7c:67:b2:fe:20:18:ae:52:04:ad:ec:04:82:bb:
83:91:42:28:2b:08:0d:d1:d4:2d:bd:57:a7:b3:c3:4d:14:f4:
6e:e2:05:db:32:c6:d0:67:e3:7c:89:77:32:a6:ea:61:a1:af:
68:69:a8:22:09:ac:9c:df:5d:7f:3a:0b:47:05:ca:12:de:5b:
19:be:b4:50:08:5a:8c:59:76:f9:25:2a:c2:50:44:2a:67:80:
47:03:b9:90:4b:30:e4:ae:95:93:5f:99:05:96:24:da:76:24:
2b:34:f9:6e:68:54:33:16:56:54:dd:e7:56:62:cd:21:67:6b:
a5:e7:df:b5:3f:11:bd:a7:ed:99:b4:42:30:81:56:63:4d:2f:
88:99:89:20:47:65:70:1f:2e:5f:7a:ea:7e:e9:3e:a7:64:c0:
45:cb:c0:9d:c6:a2:af:0e:1d:d6:8d:1b:8f:4f:7b:cf:55:66:
a5:89:66:45:7e:e3:f1:08:e8:1d:69:20:07:f9:0a:28:4b:8b:
8d:94:43:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:40:16 2025 by rpki-client