Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
File: nl1ITra0tWiaVEzwsTt--TJFfvE.mft (raw, json)
Hash identifier: 0P2xr9auBuu0VsdHdBCKHXDHvpNh+Mnth95cTqXa2hc=
Subject key identifier: F5:B2:A1:F4:0E:B8:4A:17:E9:9D:AB:F5:F7:61:01:B1:95:03:A0:13
Authority key identifier: 9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1
Certificate issuer: /CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1
Certificate serial: 0198D73B73BFC0C085D04C47BB2792C823CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
Manifest number: 1500
Signing time: Sat 23 Aug 2025 14:00:54 +0000
Manifest this update: Sat 23 Aug 2025 14:00:54 +0000
Manifest next update: Sun 24 Aug 2025 14:00:54 +0000
Files and hashes: 1: nl1ITra0tWiaVEzwsTt--TJFfvE.crl (hash: l+jiq88QDU6K4SDe57AlMbhzKMN80ySh2sYyuPezfJ8=)
2: z9Zyukoi2uOHQdEe-vCyq46DaFo.roa (hash: aTR5i5ZEuCcMlVNNZ8y9Ak4ulLNXmEOMB0JCISwIQQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:73:bf:c0:c0:85:d0:4c:47:bb:27:92:c8:23:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1
Validity
Not Before: Aug 23 14:00:54 2025 GMT
Not After : Aug 24 14:00:54 2025 GMT
Subject: CN=f5b2a1f40eb84a17e99dabf5f76101b19503a013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:21:52:d4:0b:3d:e2:29:ab:40:99:1d:e8:be:
7f:38:73:3e:75:9f:f1:4d:49:f3:fd:fc:f5:5a:92:
06:62:38:96:ff:06:2d:ba:2d:9d:32:19:91:0a:b7:
b2:62:e9:f7:5e:dd:eb:1e:c5:5a:44:1c:ac:2d:d1:
47:97:73:55:c0:5f:d9:ba:96:44:64:38:5a:27:75:
72:88:7b:3b:94:7f:2b:02:20:fc:ac:9d:84:96:c9:
fe:22:62:8b:e6:d3:37:eb:89:59:24:37:f3:f5:e9:
5f:5f:de:5e:bb:d7:f4:c0:ec:ba:b7:fc:60:53:15:
12:22:cd:b5:5b:8a:d6:d3:a1:d7:19:4e:de:38:00:
e7:db:52:1f:ed:48:76:cc:a5:dc:58:b1:c5:e8:bb:
7f:85:93:de:f4:32:5f:60:8b:47:93:a7:69:35:d0:
0e:15:85:a3:65:b6:07:2f:f3:30:ec:28:9f:c8:df:
13:5b:26:38:2c:ac:84:5c:31:dc:3d:22:a6:1f:9f:
93:17:8f:f9:b0:a9:5d:a8:3e:d8:8b:86:2c:2f:2b:
5e:37:68:1c:49:94:af:95:5c:55:8d:3e:f3:d2:46:
b5:ba:b6:aa:b0:ac:ec:95:91:e6:1a:db:8e:e6:d0:
66:4e:68:c7:9f:85:1f:ae:28:54:44:70:d8:fc:e1:
f0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B2:A1:F4:0E:B8:4A:17:E9:9D:AB:F5:F7:61:01:B1:95:03:A0:13
X509v3 Authority Key Identifier:
keyid:9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ca:35:6a:d1:c8:b6:40:88:4c:aa:65:96:10:4f:cb:9f:5c:
59:2d:57:69:87:37:04:39:6c:f1:86:98:36:83:a6:8a:c4:ee:
ee:52:5b:07:33:d5:c4:67:1b:d9:ff:8c:67:0d:d1:15:5d:81:
f7:56:c8:28:b0:48:4c:83:d6:2d:76:6b:2a:71:32:9a:e1:4b:
c0:ea:d0:a4:88:97:11:55:a2:5e:fb:71:5a:73:6e:b4:cb:c7:
87:66:4a:45:02:4a:df:a9:03:81:44:06:de:cd:6c:dd:cd:d5:
36:52:be:ee:ce:70:96:43:1f:0c:33:3d:e1:a2:d6:3b:c3:9d:
16:15:d4:b2:d6:ba:d6:61:9a:c8:89:97:d3:45:b9:71:42:c8:
21:6a:f5:b3:1c:67:56:63:a8:a4:db:e6:5b:14:cb:4c:15:99:
96:47:6e:b3:ad:b2:4d:5f:95:8d:2b:ec:10:43:fd:3d:2a:44:
61:e9:12:90:ed:76:95:ae:64:7a:98:ef:b8:97:df:72:6b:4f:
b7:f8:45:da:f4:0f:a7:bb:ce:d1:2c:06:70:9f:b5:b8:6d:cb:
7f:75:5b:98:cc:b1:60:a5:2b:5a:c6:6b:b4:00:ea:25:0a:79:
70:62:99:2e:29:f1:86:d3:b1:07:65:a0:a8:75:27:2f:13:20:
8b:34:a4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:08:18 2025 by rpki-client