Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
File: NlHOpaznf01_TdKC8Qq5yw7k0ew.mft (raw, json)
Hash identifier: CYxGekkibBKFk1z5JxV32CNZ3Ylwvi81b0EvsfURxUo=
Subject key identifier: E0:2B:9D:5A:64:E2:18:F0:66:42:28:2E:F4:33:D7:00:40:F6:A0:3D
Authority key identifier: 36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC
Certificate issuer: /CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec
Certificate serial: 0197B7EA3B497A31BEE80A364A5AD2509658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
Manifest number: 10B5
Signing time: Sat 28 Jun 2025 19:01:10 +0000
Manifest this update: Sat 28 Jun 2025 19:01:10 +0000
Manifest next update: Sun 29 Jun 2025 19:01:10 +0000
Files and hashes: 1: NlHOpaznf01_TdKC8Qq5yw7k0ew.crl (hash: 02meovvBfGJb38FJfbRA1dh6h+BxTFhX2plBOQFX6Uo=)
2: XPkovunJ2mYG9xru2HKfkrigcMA.roa (hash: ZBoNLDdsfMiH4Qvw9YL8Os7NUZ9E42iEu1OMEgsfl7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:3b:49:7a:31:be:e8:0a:36:4a:5a:d2:50:96:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec
Validity
Not Before: Jun 28 19:01:10 2025 GMT
Not After : Jun 29 19:01:10 2025 GMT
Subject: CN=e02b9d5a64e218f06642282ef433d70040f6a03d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a2:1c:8d:1f:ef:5e:53:51:ce:0c:73:c7:55:
e4:2c:dc:e2:d4:a0:c1:78:08:3c:42:ba:80:59:d3:
0f:b3:66:f3:63:49:9b:19:9b:a8:31:07:b6:04:89:
32:d5:4e:97:f9:dd:c8:d7:38:42:cd:db:85:21:55:
58:1e:ec:d3:e2:66:e6:d9:5b:a2:11:cd:fd:99:e0:
65:2d:ce:6d:36:93:7a:54:9a:87:ee:28:8b:ad:b5:
83:2e:e5:e4:21:70:63:73:01:0b:28:79:b5:6a:fb:
97:09:84:bc:7b:5b:4b:88:50:e7:81:6e:05:c9:7e:
f8:70:a1:dd:56:66:d7:ec:4e:22:4b:64:8b:46:4b:
11:ea:fb:6c:79:b9:55:64:d2:8c:3e:d1:a5:1c:24:
2d:fb:3b:fc:92:e6:53:5c:22:46:66:46:89:bc:e7:
52:62:80:10:fe:e1:64:24:5d:87:1c:73:49:0f:10:
87:5f:0e:5c:2a:b6:1d:6d:ec:22:9c:24:c9:93:0c:
63:fc:c6:b0:8b:f3:ef:d2:02:c1:75:17:12:d3:c7:
58:c4:10:41:e0:5d:a4:6e:be:3f:e2:ae:c8:34:77:
c4:d9:50:6b:97:f5:72:3b:43:f3:50:37:6b:e4:8d:
79:39:78:ac:86:ff:b1:04:18:77:92:0c:c9:ac:0b:
79:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2B:9D:5A:64:E2:18:F0:66:42:28:2E:F4:33:D7:00:40:F6:A0:3D
X509v3 Authority Key Identifier:
keyid:36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ee:ce:25:30:43:ad:4e:66:54:ad:0d:a2:43:1c:2e:2d:76:
84:46:31:49:84:e0:f4:7f:86:66:d1:91:65:38:19:06:96:dd:
0e:c9:15:56:18:c0:5d:6d:03:9e:8d:63:ee:7d:a2:e8:06:12:
c8:d8:73:1c:ee:30:a3:fa:5c:3d:dd:74:c3:92:74:c5:de:9b:
20:6f:d6:77:7e:b9:f6:7b:e3:57:a5:f9:56:70:a1:ba:17:d2:
72:6a:1f:42:c9:bb:b5:b5:71:22:bb:0a:22:9d:21:05:80:fa:
ee:71:59:86:c1:c5:05:1f:dd:6e:03:69:06:0b:5b:0c:23:0c:
1f:b3:3b:c2:40:a4:6b:0e:43:72:5e:87:52:d5:f7:53:ca:61:
5c:ab:35:73:0c:ca:13:a7:f6:c8:40:ed:dc:45:46:f1:f6:23:
17:bd:d9:d8:2c:2b:6d:2b:a4:75:5c:c8:d1:d8:ff:a6:3d:47:
33:d4:1f:03:e4:bc:6f:0d:71:d2:a7:98:bb:47:30:a0:26:84:
36:96:c7:a4:d0:ca:25:cb:c3:b7:68:63:ea:28:20:5e:79:d1:
17:2b:e9:32:08:29:02:30:de:84:e9:f6:de:a9:54:c9:39:6e:
33:bb:fc:a4:61:f8:4d:d7:46:e0:6e:75:5b:d8:d1:93:da:08:
31:18:8e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:38:55 2025 by rpki-client