Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft
File: nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft (raw, json)
Hash identifier: Zq3tzDKaWQKP8SrOwhVpZTZuH405o1j9otecKostm9c=
Subject key identifier: 2C:22:13:B8:7F:F8:46:CA:90:84:63:C3:E2:E8:E5:C9:A6:BD:D7:46
Authority key identifier: 9E:50:5F:2E:67:A1:E6:04:B3:F9:63:CE:4C:36:7D:19:58:BD:4B:78
Certificate issuer: /CN=9e505f2e67a1e604b3f963ce4c367d1958bd4b78
Certificate serial: 019A4D3CF31F8F7DA1FB0512B2A9460A23AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 05:00:31 +0000
Manifest this update: Tue 04 Nov 2025 05:00:31 +0000
Manifest next update: Wed 05 Nov 2025 05:00:31 +0000
Files and hashes: 1: 9v5VLNQmHUC6c_AtiguXiv9VBlw.roa (hash: iNy4HwSBG8Jz28fsrZBO8bxra5HKthytWN8pQ51S61o=)
2: nlBfLmeh5gSz-WPOTDZ9GVi9S3g.crl (hash: P1k6OsAxjE0sTrW47NMkRJgLsvs8lrzm7Si18i+9W6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:f3:1f:8f:7d:a1:fb:05:12:b2:a9:46:0a:23:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e505f2e67a1e604b3f963ce4c367d1958bd4b78
Validity
Not Before: Nov 4 05:00:31 2025 GMT
Not After : Nov 5 05:00:31 2025 GMT
Subject: CN=2c2213b87ff846ca908463c3e2e8e5c9a6bdd746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:60:64:98:80:64:27:a5:05:a2:ff:45:be:0d:
06:71:b0:fd:e1:ce:e8:b6:63:d3:22:64:a1:38:d5:
16:e7:ea:dc:77:4f:86:7e:74:0a:f3:a6:e3:38:c2:
22:e8:72:68:5e:2a:c7:2f:41:84:e6:88:d0:24:52:
7f:d3:8f:a1:86:0e:ea:50:e1:ec:21:31:e8:e1:15:
d5:39:92:de:c4:f5:3d:a8:13:54:37:57:18:4b:65:
d8:56:17:7d:39:59:cb:17:c3:50:48:1b:08:90:e1:
9b:77:20:12:33:23:8d:8d:1a:0f:75:21:a2:ff:d1:
08:4d:3c:99:c7:8f:11:08:b3:36:b3:eb:0a:4e:31:
d6:cb:77:3f:7f:2e:b6:5e:29:ec:fb:71:d7:56:df:
f5:45:f1:fd:53:a2:ae:4b:0f:c7:d5:91:21:e4:1d:
68:58:e9:63:41:b0:e2:d3:54:d7:ce:a8:f4:c3:cd:
d7:99:c6:6f:d9:7a:01:d8:23:bc:63:da:7b:ef:f2:
1c:dd:cb:71:a9:2a:21:81:d5:29:6a:3a:c9:a2:1e:
93:84:e3:ab:2d:2e:4b:ff:09:79:35:2e:7f:b3:c6:
29:17:3d:fb:f2:2f:c2:40:e9:b4:be:3b:78:50:45:
06:13:42:39:53:e5:21:71:ed:22:88:85:09:ba:35:
3f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:22:13:B8:7F:F8:46:CA:90:84:63:C3:E2:E8:E5:C9:A6:BD:D7:46
X509v3 Authority Key Identifier:
keyid:9E:50:5F:2E:67:A1:E6:04:B3:F9:63:CE:4C:36:7D:19:58:BD:4B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e1:97:3c:9c:0b:f1:09:e6:70:5f:21:74:8e:dc:2a:bb:f0:
3d:de:e5:96:31:8c:32:8e:51:4f:26:84:f0:30:0f:71:d5:e7:
47:df:0a:80:6f:de:be:70:35:eb:ce:48:f2:ea:04:42:ab:c1:
07:a8:5b:6d:f0:01:b5:78:f5:f0:b2:9d:98:f8:41:15:95:a6:
5a:29:9e:be:cc:72:c9:aa:74:f0:69:98:6d:81:ed:25:a8:25:
8f:4d:d3:1d:99:a7:7e:0a:fb:b9:16:9c:e5:df:c4:06:d6:27:
7f:a2:2e:42:48:a4:56:75:ea:a1:52:5d:fc:db:b4:34:41:dd:
74:93:63:b6:10:c9:d8:61:cf:1e:0d:9d:dc:ed:2a:4b:35:09:
8f:94:e5:d8:aa:fc:84:52:54:c2:f2:20:fd:0c:47:53:b7:6b:
6b:13:c7:cc:c5:50:3b:e9:23:75:9b:81:bf:dc:03:be:db:ff:
00:b7:52:ee:b7:4a:e8:aa:30:8b:9d:95:41:12:c5:2d:8e:85:
11:fa:4b:c4:1e:a0:0a:71:1f:c3:0f:a9:94:42:f7:36:0d:74:
1f:06:8a:c8:95:b8:bd:df:7a:78:fe:3a:7a:4a:06:c6:9f:76:
a9:c0:87:29:2a:65:7c:89:b2:7c:1c:e4:65:5c:b1:fc:e8:c6:
51:c6:f4:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPPMfj32h+wUSsqlGCiOsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNTA1ZjJlNjdhMWU2MDRiM2Y5NjNjZTRjMzY3ZDE5NThi
ZDRiNzgwHhcNMjUxMTA0MDUwMDMxWhcNMjUxMTA1MDUwMDMxWjAzMTEwLwYDVQQD
EygyYzIyMTNiODdmZjg0NmNhOTA4NDYzYzNlMmU4ZTVjOWE2YmRkNzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWBkmIBkJ6UFov9Fvg0GcbD94c7o
tmPTImShONUW5+rcd0+GfnQK86bjOMIi6HJoXirHL0GE5ojQJFJ/04+hhg7qUOHs
ITHo4RXVOZLexPU9qBNUN1cYS2XYVhd9OVnLF8NQSBsIkOGbdyASMyONjRoPdSGi
/9EITTyZx48RCLM2s+sKTjHWy3c/fy62Xins+3HXVt/1RfH9U6KuSw/H1ZEh5B1o
WOljQbDi01TXzqj0w83XmcZv2XoB2CO8Y9p77/Ic3ctxqSohgdUpajrJoh6ThOOr
LS5L/wl5NS5/s8YpFz378i/CQOm0vjt4UEUGE0I5U+Uhce0iiIUJujU/DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwiE7h/+EbKkIRjw+Lo5cmmvddGMB8GA1UdIwQY
MBaAFJ5QXy5noeYEs/ljzkw2fRlYvUt4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmxCZkxtZWg1Z1N6LVdQT1REWjlHVmk5UzNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9mYjc4NjQtNTc5NS00MjA4LWFiZTAt
MDg1NDI0NTRkMTZiLzEvbmxCZkxtZWg1Z1N6LVdQT1REWjlHVmk5UzNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9mYjc4NjQtNTc5NS00MjA4LWFiZTAtMDg1NDI0NTRkMTZi
LzEvbmxCZkxtZWg1Z1N6LVdQT1REWjlHVmk5UzNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATeGXPJwL
8QnmcF8hdI7cKrvwPd7lljGMMo5RTyaE8DAPcdXnR98KgG/evnA1685I8uoEQqvB
B6hbbfABtXj18LKdmPhBFZWmWimevsxyyap08GmYbYHtJaglj03THZmnfgr7uRac
5d/EBtYnf6IuQkikVnXqoVJd/Nu0NEHddJNjthDJ2GHPHg2d3O0qSzUJj5Tl2Kr8
hFJUwvIg/QxHU7draxPHzMVQO+kjdZuBv9wDvtv/ALdS7rdK6Kowi52VQRLFLY6F
EfpLxB6gCnEfww+plEL3Ng10HwaKyJW4vd96eP46ekoGxp92qcCHKSplfImyfBzk
ZVyx/OjGUcb0ZA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:42 2025 by rpki-client