Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
File: NlHOpaznf01_TdKC8Qq5yw7k0ew.mft (raw, json)
Hash identifier: UDujOy342qH8VxMZni3W3XZ4tk58i0NC27SjqZUVIA8=
Subject key identifier: 10:5D:B9:07:B0:A0:56:BC:A3:06:76:ED:6F:81:80:89:6A:BB:F6:88
Authority key identifier: 36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC
Certificate issuer: /CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec
Certificate serial: 0199FD340762DA807D50C0709A5CC99380E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
Manifest number: 11E2
Signing time: Sun 19 Oct 2025 16:01:09 +0000
Manifest this update: Sun 19 Oct 2025 16:01:09 +0000
Manifest next update: Mon 20 Oct 2025 16:01:09 +0000
Files and hashes: 1: NlHOpaznf01_TdKC8Qq5yw7k0ew.crl (hash: 94uStUq5UAgVkLVNFImI0knj5+OAfDaKwUvCyqdwFCs=)
2: XPkovunJ2mYG9xru2HKfkrigcMA.roa (hash: ZBoNLDdsfMiH4Qvw9YL8Os7NUZ9E42iEu1OMEgsfl7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:07:62:da:80:7d:50:c0:70:9a:5c:c9:93:80:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec
Validity
Not Before: Oct 19 16:01:09 2025 GMT
Not After : Oct 20 16:01:09 2025 GMT
Subject: CN=105db907b0a056bca30676ed6f8180896abbf688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ea:d7:ac:6b:52:4d:79:de:d3:10:8b:64:1d:
ab:b3:f2:f6:62:7b:b3:04:39:1a:e6:9e:eb:cc:f3:
35:62:4f:5b:79:8c:f9:c4:1f:44:5e:c0:04:6f:fd:
61:2b:52:07:27:93:8f:d4:47:b8:12:53:c8:03:fd:
6e:e3:15:6f:fc:36:3e:30:9a:4e:d2:37:95:01:bc:
d0:6d:31:c9:68:b2:dd:73:71:f3:c1:d5:2e:e7:7e:
c7:81:69:9e:3e:ed:51:2e:6e:64:f4:f9:05:07:60:
b1:c0:1c:d5:0f:04:82:ff:4b:86:43:f9:6a:c3:bb:
86:1f:bd:b4:f0:3e:12:6c:ca:6d:52:9d:ce:80:56:
f9:9e:7b:95:ce:80:dc:8c:51:67:ce:9b:f6:86:6d:
47:ba:c5:c2:de:39:f7:fc:92:3d:af:80:05:ff:28:
dd:42:78:e4:4e:8d:9d:2c:20:ec:7c:b4:4e:5a:1a:
98:21:87:72:d6:b3:e4:73:64:d6:7e:43:5d:68:27:
a0:8a:14:6e:3b:30:4a:a1:e4:5e:c6:08:85:b6:0c:
c6:40:db:60:f7:5d:1f:15:c6:aa:9d:f2:4c:d7:c6:
20:18:31:2e:aa:83:0c:19:2c:de:87:23:4e:e8:1a:
4a:ab:20:82:4b:17:84:92:18:b6:97:5e:92:1d:ec:
90:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:5D:B9:07:B0:A0:56:BC:A3:06:76:ED:6F:81:80:89:6A:BB:F6:88
X509v3 Authority Key Identifier:
keyid:36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:7d:45:06:81:02:81:85:de:c0:cf:c3:f7:77:20:c5:b6:0a:
48:a9:84:a4:df:46:9e:41:4d:e1:03:ef:53:11:cf:44:17:20:
3d:ec:67:0b:28:86:bf:ba:57:c4:58:9d:ae:57:56:da:38:f1:
e5:d8:db:0a:a2:f6:a8:8e:7c:15:db:80:ac:c4:cb:2a:b8:e8:
2a:65:45:3e:c2:2e:46:e8:60:21:5a:01:b4:fc:54:55:9c:a6:
f2:e1:8c:26:c9:ba:5c:f8:26:62:38:48:c6:32:2f:72:19:39:
21:b9:e4:6e:d9:c2:e4:db:0a:79:cf:0b:b6:2c:d3:aa:71:68:
21:be:f7:b1:3e:fb:ad:28:ee:72:c5:1d:ae:62:12:5e:2b:44:
15:92:f1:5a:23:b5:44:64:7b:64:bb:9d:d3:84:8c:d2:fd:c9:
43:65:bb:3f:50:d6:f4:0a:7f:4c:6b:b1:bd:4d:a7:77:c4:01:
08:d9:7b:fc:97:d7:41:7d:6f:1e:ca:04:63:3c:1d:0a:be:fa:
75:3e:27:23:28:ad:fb:18:65:8f:6e:df:0e:11:b3:98:b1:af:
01:a2:21:0f:c6:92:a7:c1:8d:dd:83:d9:99:45:b4:d5:0e:a9:
9d:59:49:50:dc:63:b5:00:95:04:bc:eb:08:9e:29:39:ff:6b:
48:a8:49:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NAdi2oB9UMBwmlzJk4DgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NTFjZWE1YWNlNzdmNGQ3ZjRkZDI4MmYxMGFiOWNiMGVl
NGQxZWMwHhcNMjUxMDE5MTYwMTA5WhcNMjUxMDIwMTYwMTA5WjAzMTEwLwYDVQQD
EygxMDVkYjkwN2IwYTA1NmJjYTMwNjc2ZWQ2ZjgxODA4OTZhYmJmNjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAserXrGtSTXne0xCLZB2rs/L2Ynuz
BDka5p7rzPM1Yk9beYz5xB9EXsAEb/1hK1IHJ5OP1Ee4ElPIA/1u4xVv/DY+MJpO
0jeVAbzQbTHJaLLdc3HzwdUu537HgWmePu1RLm5k9PkFB2CxwBzVDwSC/0uGQ/lq
w7uGH7208D4SbMptUp3OgFb5nnuVzoDcjFFnzpv2hm1HusXC3jn3/JI9r4AF/yjd
QnjkTo2dLCDsfLROWhqYIYdy1rPkc2TWfkNdaCegihRuOzBKoeRexgiFtgzGQNtg
910fFcaqnfJM18YgGDEuqoMMGSzehyNO6BpKqyCCSxeEkhi2l16SHeyQWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBBduQewoFa8owZ27W+BgIlqu/aIMB8GA1UdIwQY
MBaAFDZRzqWs539Nf03SgvEKucsO5NHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmxIT3Bhem5mMDFfVGRLQzhRcTV5dzdrMGV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9hYzIxNGItMzc3Mi00ODEwLTkyMDYt
YjkyYjA5NGYzYTNjLzEvTmxIT3Bhem5mMDFfVGRLQzhRcTV5dzdrMGV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9hYzIxNGItMzc3Mi00ODEwLTkyMDYtYjkyYjA5NGYzYTNj
LzEvTmxIT3Bhem5mMDFfVGRLQzhRcTV5dzdrMGV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtX1FBoEC
gYXewM/D93cgxbYKSKmEpN9GnkFN4QPvUxHPRBcgPexnCyiGv7pXxFidrldW2jjx
5djbCqL2qI58FduArMTLKrjoKmVFPsIuRuhgIVoBtPxUVZym8uGMJsm6XPgmYjhI
xjIvchk5IbnkbtnC5NsKec8LtizTqnFoIb73sT77rSjucsUdrmISXitEFZLxWiO1
RGR7ZLud04SM0v3JQ2W7P1DW9Ap/TGuxvU2nd8QBCNl7/JfXQX1vHsoEYzwdCr76
dT4nIyit+xhlj27fDhGzmLGvAaIhD8aSp8GN3YPZmUW01Q6pnVlJUNxjtQCVBLzr
CJ4pOf9rSKhJOA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:53:45 2025 by rpki-client