Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft
File: NLFHrBz3fVyPsq90-tO3O10TeyY.mft (raw, json)
Hash identifier: eElbs6NScFtuuHfSKdLJ6ZodZd4M3GO0myHi+Wxw8co=
Subject key identifier: 70:87:6A:EF:28:62:C9:80:91:47:5E:A1:32:1D:59:59:FC:8C:C1:D7
Authority key identifier: 34:B1:47:AC:1C:F7:7D:5C:8F:B2:AF:74:FA:D3:B7:3B:5D:13:7B:26
Certificate issuer: /CN=34b147ac1cf77d5c8fb2af74fad3b73b5d137b26
Certificate serial: 0198D5BB8291C7A54F5A6006DED179BF7702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLFHrBz3fVyPsq90-tO3O10TeyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft
Manifest number: 01DD
Signing time: Sat 23 Aug 2025 07:01:32 +0000
Manifest this update: Sat 23 Aug 2025 07:01:32 +0000
Manifest next update: Sun 24 Aug 2025 07:01:32 +0000
Files and hashes: 1: NLFHrBz3fVyPsq90-tO3O10TeyY.crl (hash: 0yzl1UNER0kyDPVstBs9iz9q9NRGHFepRyBddsyHsqc=)
2: THnq9fycftVoi9SRyG2RAgjh-xM.roa (hash: CvE6vZRBpMVjaRZR6SZYXH1U/C4JGawX5FU1BEkF3Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLFHrBz3fVyPsq90-tO3O10TeyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:82:91:c7:a5:4f:5a:60:06:de:d1:79:bf:77:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b147ac1cf77d5c8fb2af74fad3b73b5d137b26
Validity
Not Before: Aug 23 07:01:32 2025 GMT
Not After : Aug 24 07:01:32 2025 GMT
Subject: CN=70876aef2862c98091475ea1321d5959fc8cc1d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7a:f1:3c:9e:9a:1b:5f:93:c3:86:fe:07:57:
4e:fd:37:cd:b9:63:11:42:a7:40:1d:fd:73:bd:38:
bf:02:c0:bc:ee:18:77:66:28:34:f2:d4:80:52:1a:
53:be:f5:e0:09:3a:1e:53:19:f3:83:30:2c:0a:49:
3c:66:0c:85:1f:98:ef:3b:e7:23:0c:5b:c0:7e:cf:
15:25:0c:67:cb:57:9c:02:c2:91:3d:01:31:b9:0d:
a5:9a:13:92:c4:8a:2f:0b:ad:28:e9:1f:98:55:38:
9e:65:15:c7:d3:41:49:53:85:84:82:6a:c0:12:b9:
2a:3e:c9:e0:ae:29:ad:da:b6:99:2f:c3:55:46:af:
c4:06:28:56:ce:85:2b:fc:84:9f:ed:1c:c2:be:68:
a4:e6:c5:45:2a:b8:c7:d6:b6:28:6c:30:65:ae:25:
d7:9a:06:dd:be:22:9d:d4:6d:4e:dc:cb:54:88:72:
e1:5e:5d:49:1c:8a:52:c5:67:22:68:5c:4c:cc:82:
6f:49:ad:5b:5c:af:98:b9:0f:d1:f8:f9:c3:53:40:
a2:80:d0:11:27:14:9e:b6:b8:27:54:1a:6a:5e:bd:
eb:54:f9:e0:68:92:df:1c:e5:df:fe:e4:ac:b6:f2:
c3:8a:8f:65:f4:0b:14:75:08:d8:15:b3:62:fe:e8:
54:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:87:6A:EF:28:62:C9:80:91:47:5E:A1:32:1D:59:59:FC:8C:C1:D7
X509v3 Authority Key Identifier:
keyid:34:B1:47:AC:1C:F7:7D:5C:8F:B2:AF:74:FA:D3:B7:3B:5D:13:7B:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLFHrBz3fVyPsq90-tO3O10TeyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:18:6b:4d:fd:66:0a:e4:a2:6f:3f:2d:ba:85:cd:99:48:2b:
9d:44:3c:2d:e6:93:70:24:d2:ae:42:23:ef:62:8d:2f:a3:6d:
68:1f:aa:a6:ae:93:50:8e:24:fc:e5:f1:18:3a:14:be:f1:5a:
2a:ef:ff:24:81:08:07:65:d2:f3:c5:f0:30:03:77:cb:c8:a2:
66:76:c0:27:ef:5a:49:3d:84:d3:9b:4a:e4:43:d6:e8:6a:41:
0f:45:55:ff:e1:42:6b:11:bd:ac:e0:aa:9b:39:38:0f:b3:03:
4d:3e:51:5d:a9:ca:ca:75:7b:4a:4b:cb:5e:e2:03:7b:0f:01:
10:b3:2f:cc:7c:7d:94:4e:eb:f7:a7:d6:5d:c3:dd:32:84:2c:
38:5e:3d:7b:0f:01:ac:52:26:d4:9f:6f:89:a2:eb:d7:90:83:
dd:2a:1d:bf:8b:02:bc:37:fe:57:52:15:c1:a7:63:12:24:e9:
45:d3:1c:b9:61:36:76:11:0a:8c:93:db:3a:9b:d3:f1:f8:33:
96:4c:92:6b:2f:59:d1:a3:af:46:ab:ac:79:7a:44:1b:33:5b:
e9:36:1c:3e:14:e3:61:03:e7:d1:7e:21:fa:3d:d7:ef:02:17:
1e:c0:0f:1b:66:06:9f:11:eb:aa:25:8f:7f:d6:9e:80:10:b1:
f8:cc:e4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:02 2025 by rpki-client