Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft
File: NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft (raw, json)
Hash identifier: jdSLKt+mEq5H5P4CqMvmqcwKg+IM25XcTkViNEcmg18=
Subject key identifier: D0:BF:81:2C:77:16:28:6E:71:CD:D0:AF:10:82:72:F2:29:A2:A7:AB
Authority key identifier: 34:B9:60:F6:F1:92:55:EA:39:66:6F:83:3E:BE:27:17:61:99:4B:15
Certificate issuer: /CN=34b960f6f19255ea39666f833ebe271761994b15
Certificate serial: 019A4E18FAFDCE6CDA205DE993E9658BFDCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft
Manifest number: 08A6
Signing time: Tue 04 Nov 2025 09:00:51 +0000
Manifest this update: Tue 04 Nov 2025 09:00:51 +0000
Manifest next update: Wed 05 Nov 2025 09:00:51 +0000
Files and hashes: 1: NLlg9vGSVeo5Zm-DPr4nF2GZSxU.crl (hash: 2j1j6qEz/W9MOzY3XehK28M1EkuR63O8Ja9eOJQxOVk=)
2: uvlLUALpDF1wh1MewC4fR9s0Hsc.roa (hash: M16EAVQJOFd1bjjRXsF6MezxtZfD4eItTZd4rdVVcXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:fa:fd:ce:6c:da:20:5d:e9:93:e9:65:8b:fd:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b960f6f19255ea39666f833ebe271761994b15
Validity
Not Before: Nov 4 09:00:51 2025 GMT
Not After : Nov 5 09:00:51 2025 GMT
Subject: CN=d0bf812c7716286e71cdd0af108272f229a2a7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:97:40:6d:03:ed:3e:2d:fe:4a:a7:88:f2:a9:
06:f2:ea:c5:09:5a:a1:fb:46:83:4d:23:57:71:e2:
9d:8d:e9:04:69:0e:53:04:21:8d:4a:58:f0:3c:9d:
16:c4:a2:22:96:1d:ae:0e:f2:35:ce:84:2e:60:48:
98:8d:7d:23:5b:29:0d:59:72:e4:ee:25:14:7a:0b:
33:22:3b:1b:01:81:88:d4:43:33:ff:84:7a:02:82:
b9:0a:72:3d:54:f9:f9:5d:99:39:8b:3f:fc:01:90:
12:4d:0e:48:47:74:6c:79:b9:19:72:f4:83:1c:c1:
24:59:63:79:62:36:aa:4a:71:fe:0b:5f:35:aa:87:
ce:dc:5d:a9:92:f4:7d:9f:77:80:b6:86:a1:ac:da:
f5:81:4e:74:34:fb:b2:0c:a8:2c:e3:83:c4:ea:4d:
11:92:13:c8:ea:ef:4c:e9:a0:4f:c4:ff:11:40:ca:
40:65:0e:67:4c:c7:23:c5:10:b4:ea:53:fd:db:96:
99:ca:6e:63:c6:4d:1e:c1:53:9e:21:9a:84:20:e4:
3d:4e:d4:cd:28:fb:57:55:1d:57:d2:ac:92:62:8b:
c4:2a:96:36:a6:1a:1d:1f:5c:4e:c9:f0:83:fe:a6:
84:f4:de:e8:e3:15:bd:4f:ec:63:ff:70:b2:74:ff:
d3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BF:81:2C:77:16:28:6E:71:CD:D0:AF:10:82:72:F2:29:A2:A7:AB
X509v3 Authority Key Identifier:
keyid:34:B9:60:F6:F1:92:55:EA:39:66:6F:83:3E:BE:27:17:61:99:4B:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:91:5d:0b:61:44:ba:c6:4a:2e:91:c0:ed:6c:2e:20:92:a7:
20:f0:56:0d:c4:80:b3:b8:a7:72:8c:a5:69:84:b0:47:e1:bb:
e3:35:21:ab:4d:86:1a:88:28:75:06:cd:8e:a9:2b:99:d4:5a:
d1:89:05:95:5c:03:fb:53:57:f7:ed:7d:c4:90:e8:68:f2:21:
6f:0a:4c:de:69:db:36:dc:a8:6c:db:bd:ec:01:29:49:a8:ad:
a6:be:bc:2f:bd:9d:9e:e5:ae:8a:e5:c8:5a:58:d2:1b:3a:ee:
2d:19:16:7a:03:d7:b0:a7:f6:ba:c2:a3:1e:47:b0:6b:d8:26:
80:0d:27:51:e1:a2:08:98:5d:e9:02:57:96:24:f1:3c:c1:5f:
e4:40:84:87:f7:7d:fd:3b:1f:4f:d9:b7:69:9d:8b:b2:f3:81:
41:8e:bc:8d:b8:9d:95:25:3e:1e:48:9f:a7:37:fd:4c:b6:83:
38:38:9b:85:4a:b8:31:60:a6:72:d2:91:2e:d8:fe:78:de:bd:
0d:d4:df:06:d3:d1:fa:59:b6:27:e9:96:b4:44:23:74:c2:78:
1e:83:04:6f:80:a1:24:1e:7e:99:20:5e:22:34:bd:86:81:19:
41:73:50:62:a2:49:a3:47:fe:cc:0c:31:7e:77:9e:36:00:d8:
ac:9b:d2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:41 2025 by rpki-client