Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft
File: NLFHrBz3fVyPsq90-tO3O10TeyY.mft (raw, json)
Hash identifier: NxOa92UwNbwQTZAKotnG3r4FgT/Jgt80XTbZ9CUEaCY=
Subject key identifier: 4C:43:1F:EE:D0:04:0F:5E:1A:BC:68:9B:A9:0F:3B:29:AD:10:34:9C
Authority key identifier: 34:B1:47:AC:1C:F7:7D:5C:8F:B2:AF:74:FA:D3:B7:3B:5D:13:7B:26
Certificate issuer: /CN=34b147ac1cf77d5c8fb2af74fad3b73b5d137b26
Certificate serial: 0199FD347C8BD9DA9E4A1E396946B3D040D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLFHrBz3fVyPsq90-tO3O10TeyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft
Manifest number: 0276
Signing time: Sun 19 Oct 2025 16:01:39 +0000
Manifest this update: Sun 19 Oct 2025 16:01:39 +0000
Manifest next update: Mon 20 Oct 2025 16:01:39 +0000
Files and hashes: 1: NLFHrBz3fVyPsq90-tO3O10TeyY.crl (hash: UIC+/QlW1QX/XpQiDusoL1Be4Rv3RwVH8T022EwulR8=)
2: THnq9fycftVoi9SRyG2RAgjh-xM.roa (hash: CvE6vZRBpMVjaRZR6SZYXH1U/C4JGawX5FU1BEkF3Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLFHrBz3fVyPsq90-tO3O10TeyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:7c:8b:d9:da:9e:4a:1e:39:69:46:b3:d0:40:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b147ac1cf77d5c8fb2af74fad3b73b5d137b26
Validity
Not Before: Oct 19 16:01:39 2025 GMT
Not After : Oct 20 16:01:39 2025 GMT
Subject: CN=4c431feed0040f5e1abc689ba90f3b29ad10349c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cb:28:ed:2e:5e:48:4c:2e:08:b4:50:e1:d8:
09:e0:d2:12:fc:33:ff:32:54:3f:74:bf:55:db:e6:
6a:50:ec:f4:b9:95:f5:66:ed:17:ea:a4:22:8e:01:
97:b4:bb:f5:77:44:7f:77:6b:84:0a:fa:95:a6:4c:
ee:29:23:92:8b:65:e2:55:f3:f3:78:73:b8:ae:14:
a8:16:ed:1c:32:42:eb:78:6d:c7:87:44:a9:ea:ee:
8e:3b:2c:05:fd:29:6f:88:28:d7:ba:4c:e2:72:5a:
92:18:8a:7d:8b:5c:ce:aa:0e:2d:ca:77:8a:5a:5e:
e1:da:24:72:a8:8d:6b:71:38:28:45:2d:a2:9a:84:
14:31:94:66:3c:76:b4:8b:18:be:9c:8c:66:94:63:
48:46:1e:30:b8:46:b2:e9:fb:18:0e:5b:34:13:69:
bd:8d:b2:0a:81:5f:62:5a:8a:36:c1:1c:e1:7a:1e:
52:2e:ed:22:41:b3:31:43:cb:30:b1:33:4d:b5:57:
e1:42:4f:5a:f3:4f:e3:20:11:c1:0c:1a:17:c3:a4:
ac:76:46:39:96:45:6f:4e:cc:00:00:39:2a:db:ae:
94:36:61:13:45:14:ae:23:43:ca:72:2b:f8:10:7e:
a9:6c:95:37:02:24:94:72:99:a9:f3:86:70:69:11:
c2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:43:1F:EE:D0:04:0F:5E:1A:BC:68:9B:A9:0F:3B:29:AD:10:34:9C
X509v3 Authority Key Identifier:
keyid:34:B1:47:AC:1C:F7:7D:5C:8F:B2:AF:74:FA:D3:B7:3B:5D:13:7B:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLFHrBz3fVyPsq90-tO3O10TeyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e6:7b:52:b7:80:fd:df:f5:0d:8e:6a:6e:9c:99:c6:be:ad:
be:2f:90:3b:3a:63:c4:d3:ed:ad:03:0a:fe:7c:fc:0d:17:13:
61:0e:1d:b4:73:14:fd:d6:76:11:34:03:05:f4:e8:8e:b4:e2:
57:02:b8:44:75:36:01:d8:9b:6a:7c:8b:05:02:36:3b:f9:5f:
79:35:80:90:85:53:30:5c:ea:d7:2d:cc:c6:bc:5e:e5:97:e6:
a7:06:50:c0:97:09:bc:90:a1:0a:2e:fe:0d:1d:f4:7c:dc:d3:
8b:de:b9:bf:9c:80:a3:8c:41:f0:44:f7:51:3f:ee:29:4c:0c:
5c:2e:da:43:28:c0:22:34:89:66:00:aa:f5:d8:b0:a6:05:13:
4f:f8:7b:de:f5:b5:7a:e5:96:ff:af:c7:c7:7c:ee:ce:a6:4d:
25:17:79:75:ee:c9:18:30:bb:99:c9:d0:f8:40:8d:af:54:ae:
b0:0c:6a:c8:d9:40:46:37:6f:37:98:50:2a:af:9c:b1:61:b5:
36:e1:f6:d2:99:33:02:61:6b:57:35:8d:4c:08:b1:f4:f4:a7:
17:9f:e4:cf:2f:a9:1b:af:b8:98:4d:ce:3c:e8:84:9c:3b:01:
ec:7e:43:83:bb:17:73:a0:5f:7d:ff:a0:49:5f:e9:97:a5:8b:
29:25:5a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:02 2025 by rpki-client