Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft
File: NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft (raw, json)
Hash identifier: 3nXRQ7eLO3/rTO0lsRzdAvtXNNawqrJeLX7gK/nq/2I=
Subject key identifier: 03:CF:6F:29:81:82:92:5D:6B:5D:76:00:DA:13:72:0C:40:45:E0:69
Authority key identifier: 34:B0:C5:A4:03:E2:DA:D3:C4:7B:79:1F:DA:20:42:CF:71:50:09:CF
Certificate issuer: /CN=34b0c5a403e2dad3c47b791fda2042cf715009cf
Certificate serial: 0197B77C35D063C8CA4E944E707D717E2803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft
Manifest number: 0678
Signing time: Sat 28 Jun 2025 17:00:59 +0000
Manifest this update: Sat 28 Jun 2025 17:00:59 +0000
Manifest next update: Sun 29 Jun 2025 17:00:59 +0000
Files and hashes: 1: NLDFpAPi2tPEe3kf2iBCz3FQCc8.crl (hash: w3DttqiHnnxqIhUJCi4I+IWqsJdLevActkA9+K8pU4Y=)
2: XZf82C_CN-vLQbpUrT-DW4sm3Y0.roa (hash: pAKJ5T3FZi6TyLDIs/UxYmL+rXXkynL3g9BJ4W4ROUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:35:d0:63:c8:ca:4e:94:4e:70:7d:71:7e:28:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b0c5a403e2dad3c47b791fda2042cf715009cf
Validity
Not Before: Jun 28 17:00:59 2025 GMT
Not After : Jun 29 17:00:59 2025 GMT
Subject: CN=03cf6f298182925d6b5d7600da13720c4045e069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0e:e0:80:6c:03:b1:27:0a:ae:a0:74:cb:3b:
31:7e:dc:28:30:75:70:d9:f3:e1:5a:c4:7c:93:c5:
58:7d:0f:af:12:24:f1:17:ed:6a:d8:02:2b:0d:3f:
ac:a5:39:93:d2:50:9c:58:33:a0:61:b7:7d:11:0f:
ed:42:6e:9f:d6:b3:3d:f9:ee:75:b8:e6:14:0e:01:
77:bb:16:b8:49:4c:8f:73:d1:31:27:b2:22:eb:18:
cd:9b:e7:5f:2f:8f:97:0f:a3:55:8a:3f:c8:85:97:
eb:95:b0:23:d5:a6:ee:fe:1f:e6:1e:a4:34:15:87:
a0:2c:d0:8b:c1:57:69:12:c6:ea:58:57:b0:96:bd:
ba:3b:07:c4:e1:3e:dd:2c:53:61:eb:b2:13:0c:30:
6a:94:a6:2b:4a:34:65:1d:e3:f9:68:ba:5f:7f:e2:
32:27:f7:ef:d1:28:2f:6e:36:8a:0e:0b:94:bb:95:
2b:90:fe:20:81:7b:09:e0:aa:71:27:56:e6:e7:cd:
a9:0f:ef:e1:37:54:de:ed:a7:94:f6:32:0f:e0:c7:
4b:13:ba:85:b0:aa:71:9b:bb:99:e5:f7:7b:59:02:
b1:d7:ea:7d:29:7c:8b:7b:54:e1:07:d0:e4:33:ef:
7d:1e:15:62:e8:db:f7:79:bc:d0:59:b6:a1:44:21:
6b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CF:6F:29:81:82:92:5D:6B:5D:76:00:DA:13:72:0C:40:45:E0:69
X509v3 Authority Key Identifier:
keyid:34:B0:C5:A4:03:E2:DA:D3:C4:7B:79:1F:DA:20:42:CF:71:50:09:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:dd:da:9e:dc:9b:fe:39:19:b0:ba:22:b3:d6:60:8b:70:f5:
d3:05:09:39:ca:c2:1e:e8:e8:78:39:1a:e0:3d:73:47:b3:b2:
1a:b0:6c:0e:a3:7e:e3:dc:29:3d:3b:92:cb:4c:71:95:ce:33:
8e:32:c3:3e:91:9d:92:13:69:ab:20:cf:9b:65:77:54:b1:44:
d2:42:81:d6:b7:b7:82:de:7e:40:cd:56:94:30:cb:ef:5c:50:
f9:64:f8:bf:c0:05:9c:ce:11:d7:1c:5f:f1:a3:ee:88:a2:b6:
4b:61:d6:35:de:79:f1:bb:7e:02:51:96:c8:02:01:09:dd:68:
63:4c:ec:e7:53:1a:80:cd:34:99:50:4b:8c:25:25:67:91:7a:
f0:3e:a2:68:73:27:9e:41:10:d4:af:35:cc:9e:f7:0e:ff:23:
c0:d7:45:c7:71:0c:5e:f4:a0:7c:ae:a3:0a:d5:b8:2d:31:e2:
fb:9b:9f:b7:bc:9f:05:48:09:32:5f:89:f2:a2:ec:33:7f:cb:
78:b7:ee:35:be:3e:1d:12:56:79:fa:f5:5d:d5:e1:68:40:a6:
ab:10:c8:3c:f2:80:32:23:34:b1:fe:f0:c6:58:d6:3e:7a:ff:
c2:d1:4c:8b:7c:8a:51:1d:83:d0:e4:83:01:3e:34:88:a8:09:
ba:5b:2a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:37:20 2025 by rpki-client