Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
File: L0yd_nsacqVRu6FamZpsGTM__5Y.mft (raw, json)
Hash identifier: NS7jNQOq3KZKRUB0iOt2k3q0QyOQbOOp6VkD1iOU0IM=
Subject key identifier: AE:9F:35:37:7F:E7:F0:01:29:B9:7A:0A:8C:EA:7B:F0:DF:6E:89:67
Authority key identifier: 2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96
Certificate issuer: /CN=2f4c9dfe7b1a72a551bba15a999a6c19333fff96
Certificate serial: 019A54F67223315C532DB3958B5F1BA945FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
Manifest number: 1452
Signing time: Wed 05 Nov 2025 17:00:28 +0000
Manifest this update: Wed 05 Nov 2025 17:00:28 +0000
Manifest next update: Thu 06 Nov 2025 17:00:28 +0000
Files and hashes: 1: L0yd_nsacqVRu6FamZpsGTM__5Y.crl (hash: NvcuCfUKc1Jks5h4JdMsFPRDKWpU106VijateVB/f5E=)
2: _D7djxZolRxCx5AgywEsR673Vyc.roa (hash: lkosjygsw/gw6j4Ql0QUbhSbmAPEpo1du5WppRl3Xeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:f6:72:23:31:5c:53:2d:b3:95:8b:5f:1b:a9:45:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f4c9dfe7b1a72a551bba15a999a6c19333fff96
Validity
Not Before: Nov 5 17:00:28 2025 GMT
Not After : Nov 6 17:00:28 2025 GMT
Subject: CN=ae9f35377fe7f00129b97a0a8cea7bf0df6e8967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:44:d1:1b:4c:fa:82:3d:67:45:26:28:ba:7b:
cb:04:cb:2d:81:06:24:96:10:b4:2b:c0:83:7a:88:
88:59:52:f6:a4:a8:fd:b0:ec:f6:19:20:af:ec:e4:
e8:2a:8f:9d:d2:4a:7d:5a:7a:4c:f2:a8:dd:66:6e:
99:96:c1:36:e2:70:e5:f4:f7:bf:d7:ef:92:bf:a4:
26:e8:91:13:18:67:8d:2e:43:db:c0:d3:4b:31:e9:
32:70:8c:bc:98:fc:7e:91:da:62:c2:a2:d4:2e:e5:
00:44:b8:38:e8:76:d5:51:fa:fa:47:3c:56:0c:ee:
25:7e:0e:b7:d9:26:f0:6d:fd:16:3f:cf:1d:9c:75:
aa:91:36:33:4f:76:65:a5:8e:3e:0b:14:df:88:02:
08:62:32:50:0a:82:f5:8f:74:a8:dc:37:a8:73:61:
20:b9:18:1e:6f:70:6b:6c:89:1f:c3:a5:de:62:ee:
df:5f:02:8c:9c:9c:9a:9c:69:8f:e6:8c:10:3d:f9:
80:34:b9:b0:21:97:d2:f4:29:07:9f:b7:9c:a3:bd:
6f:59:c7:7e:1c:8c:32:c1:cd:5e:c0:e8:8f:1f:4d:
20:74:8a:48:bc:03:ae:3a:c9:21:f2:2f:e1:88:a9:
6b:9a:65:be:a1:f7:8a:03:4c:e2:d5:a4:bb:15:f2:
ac:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9F:35:37:7F:E7:F0:01:29:B9:7A:0A:8C:EA:7B:F0:DF:6E:89:67
X509v3 Authority Key Identifier:
keyid:2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ed:5b:8c:98:39:69:75:4f:be:24:b2:0f:5d:20:8b:49:96:
56:c6:52:3f:f9:9c:e0:5a:24:df:73:e4:38:11:0c:10:c4:8a:
0b:ea:9c:b4:22:04:62:c4:8b:91:fb:c9:ec:bc:28:db:3e:ae:
91:a9:23:31:51:b6:92:93:19:22:29:df:77:75:b7:60:8e:2d:
eb:b0:9f:9c:6a:9e:aa:15:26:8b:a2:ed:52:28:3d:b2:17:5e:
e0:7a:33:11:e1:0d:08:10:25:3b:ff:1f:39:2b:d8:94:49:cb:
8d:5b:6f:da:bc:d0:6c:f0:2b:ff:7e:30:01:40:ef:5c:f0:c9:
91:96:63:6b:13:d5:2d:d9:d4:8b:11:f6:af:f4:91:67:41:50:
cb:5e:b7:49:ec:2e:b5:ee:15:ca:ee:14:6e:46:1e:56:2d:1a:
86:af:7a:89:06:6c:91:ca:36:79:00:cf:16:4f:29:56:1c:6b:
30:48:02:dc:94:25:c5:eb:0f:2c:95:13:57:1a:59:99:61:0e:
5d:09:96:e0:d7:d5:50:60:dd:af:65:6c:ca:79:97:9a:83:3f:
49:ba:ff:81:4d:b4:6e:bf:77:49:a9:27:12:dc:57:b8:cd:e0:
de:f7:33:d4:da:6e:52:68:c6:79:46:69:7e:c3:b8:c5:a3:cc:
b0:c4:3b:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpU9nIjMVxTLbOVi18bqUX+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNGM5ZGZlN2IxYTcyYTU1MWJiYTE1YTk5OWE2YzE5MzMz
ZmZmOTYwHhcNMjUxMTA1MTcwMDI4WhcNMjUxMTA2MTcwMDI4WjAzMTEwLwYDVQQD
EyhhZTlmMzUzNzdmZTdmMDAxMjliOTdhMGE4Y2VhN2JmMGRmNmU4OTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUTRG0z6gj1nRSYounvLBMstgQYk
lhC0K8CDeoiIWVL2pKj9sOz2GSCv7OToKo+d0kp9WnpM8qjdZm6ZlsE24nDl9Pe/
1++Sv6Qm6JETGGeNLkPbwNNLMekycIy8mPx+kdpiwqLULuUARLg46HbVUfr6RzxW
DO4lfg632Sbwbf0WP88dnHWqkTYzT3ZlpY4+CxTfiAIIYjJQCoL1j3So3Deoc2Eg
uRgeb3BrbIkfw6XeYu7fXwKMnJyanGmP5owQPfmANLmwIZfS9CkHn7eco71vWcd+
HIwywc1ewOiPH00gdIpIvAOuOskh8i/hiKlrmmW+ofeKA0zi1aS7FfKsYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6fNTd/5/ABKbl6Cozqe/DfbolnMB8GA1UdIwQY
MBaAFC9Mnf57GnKlUbuhWpmabBkzP/+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDB5ZF9uc2FjcVZSdTZGYW1acHNHVE1fXzVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lZmEwMDItMDBiNS00NzZiLTg1Y2Yt
ZTllMzg4ODEyNzUyLzEvTDB5ZF9uc2FjcVZSdTZGYW1acHNHVE1fXzVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9lZmEwMDItMDBiNS00NzZiLTg1Y2YtZTllMzg4ODEyNzUy
LzEvTDB5ZF9uc2FjcVZSdTZGYW1acHNHVE1fXzVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ+1bjJg5
aXVPviSyD10gi0mWVsZSP/mc4Fok33PkOBEMEMSKC+qctCIEYsSLkfvJ7Lwo2z6u
kakjMVG2kpMZIinfd3W3YI4t67CfnGqeqhUmi6LtUig9shde4HozEeENCBAlO/8f
OSvYlEnLjVtv2rzQbPAr/34wAUDvXPDJkZZjaxPVLdnUixH2r/SRZ0FQy163Sewu
te4Vyu4UbkYeVi0ahq96iQZskco2eQDPFk8pVhxrMEgC3JQlxesPLJUTVxpZmWEO
XQmW4NfVUGDdr2VsynmXmoM/Sbr/gU20br93SaknEtxXuM3g3vcz1NpuUmjGeUZp
fsO4xaPMsMQ7iQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 21:10:39 2025 by rpki-client