Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
File: nlf4Q7F__OqpuGNlgf5NVONG3cw.mft (raw, json)
Hash identifier: 4AL4RuAxKcjsaqr4oRx3ZXk3IIv6IPCVrBPZ9f9yImc=
Subject key identifier: 28:2C:3D:66:D5:FA:FF:70:F3:1F:F8:12:82:7F:77:98:6C:76:18:9E
Authority key identifier: 9E:57:F8:43:B1:7F:FC:EA:A9:B8:63:65:81:FE:4D:54:E3:46:DD:CC
Certificate issuer: /CN=9e57f843b17ffceaa9b8636581fe4d54e346ddcc
Certificate serial: 01989223C996D91B76AF6BD19CF9F43081B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlf4Q7F__OqpuGNlgf5NVONG3cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
Manifest number: 0C7B
Signing time: Sun 10 Aug 2025 04:01:15 +0000
Manifest this update: Sun 10 Aug 2025 04:01:15 +0000
Manifest next update: Mon 11 Aug 2025 04:01:15 +0000
Files and hashes: 1: IFXNgHuEN8ycsfhuA4dEpX7GYeY.roa (hash: 0NAgcHKOW4VLEuD8zIQn9OzSwjmjjTPr1tkjSBELdjk=)
2: nlf4Q7F__OqpuGNlgf5NVONG3cw.crl (hash: BJL6mIEWgFX4QFbtnOBdBqBKTaS19aJfi7X5BQgc9VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlf4Q7F__OqpuGNlgf5NVONG3cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:23:c9:96:d9:1b:76:af:6b:d1:9c:f9:f4:30:81:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e57f843b17ffceaa9b8636581fe4d54e346ddcc
Validity
Not Before: Aug 10 04:01:15 2025 GMT
Not After : Aug 11 04:01:15 2025 GMT
Subject: CN=282c3d66d5faff70f31ff812827f77986c76189e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e2:42:92:cd:21:d0:4e:0f:c9:a5:3e:0b:70:
4c:c0:b3:49:c5:79:d4:b5:eb:d5:83:db:62:56:ac:
a7:5b:d8:27:e0:37:dc:a6:c8:aa:84:39:47:4e:0f:
5a:40:d8:63:76:97:d9:42:05:af:05:a6:a6:e8:6c:
1d:dd:70:f6:3a:8c:f5:ec:fd:30:51:9c:79:aa:64:
0b:72:f8:2a:a2:4d:ae:31:77:77:ff:e6:5e:c2:18:
97:b8:41:7a:a5:f3:72:f0:5f:e0:9e:6e:f3:87:0f:
68:f6:6b:74:74:46:d2:e3:be:60:cb:6e:d6:27:6e:
3f:ad:96:e1:a8:f8:85:e6:70:e8:94:1c:53:ff:6e:
15:36:b1:b4:94:63:53:e8:c9:54:85:f2:e0:63:40:
a4:e2:91:ad:f6:a1:f5:3d:f8:16:cd:0d:06:51:93:
c6:92:d8:cd:06:70:b4:86:22:97:fd:52:33:98:87:
87:19:44:93:b0:a9:84:52:11:2c:63:d3:be:54:84:
e7:71:a0:62:fd:19:81:fb:de:24:6a:42:bc:0f:c0:
0b:0b:7a:3f:d9:ed:08:ea:f6:51:0f:d0:a3:2e:77:
8d:fa:51:7f:1d:a0:d3:3e:8f:a5:bc:33:04:09:cd:
7f:c3:a0:c5:6d:a2:52:44:e3:48:62:b2:e4:b6:56:
ba:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2C:3D:66:D5:FA:FF:70:F3:1F:F8:12:82:7F:77:98:6C:76:18:9E
X509v3 Authority Key Identifier:
keyid:9E:57:F8:43:B1:7F:FC:EA:A9:B8:63:65:81:FE:4D:54:E3:46:DD:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlf4Q7F__OqpuGNlgf5NVONG3cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:1c:15:ff:c6:f1:32:f8:bb:f4:9e:ee:bf:7c:29:d6:e5:9e:
8c:1e:07:97:79:2b:05:63:49:54:5f:a3:5b:e6:2a:77:59:7f:
d0:33:81:68:c1:cf:6a:44:a0:84:cf:0e:33:8c:cf:8a:8e:a8:
0c:7f:35:df:ba:98:61:ed:76:c4:5c:45:32:52:4f:5e:0e:1e:
24:bf:2b:07:0e:ed:11:83:47:1d:49:be:81:62:97:bd:54:6f:
a4:82:35:dc:f2:82:11:52:42:ea:48:7f:e3:46:f0:bb:51:88:
05:92:06:d6:ee:86:fb:e0:06:ad:ff:e3:cf:01:d1:66:3c:c8:
fe:82:52:2c:19:dd:fa:42:9e:f5:e0:23:db:23:48:e9:d5:dc:
8d:c7:7a:54:fd:86:1e:7c:e7:85:51:d0:56:e6:f5:78:7d:a3:
56:3d:ae:02:e2:dc:a7:a1:59:3d:1b:55:98:55:bf:12:42:f4:
b7:59:5e:b5:e0:78:48:9b:fa:84:5e:5a:85:03:be:3c:7e:1f:
d5:77:ab:f3:22:ae:25:73:81:3a:06:cd:08:44:0f:b5:ec:20:
19:1d:d3:6f:e5:07:3c:f7:3a:a7:50:52:d3:a6:97:83:53:9c:
dd:c5:2a:d9:31:87:39:eb:b8:f8:cb:04:4f:51:ca:cf:92:3e:
4e:99:d0:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiSI8mW2Rt2r2vRnPn0MIGzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNTdmODQzYjE3ZmZjZWFhOWI4NjM2NTgxZmU0ZDU0ZTM0
NmRkY2MwHhcNMjUwODEwMDQwMTE1WhcNMjUwODExMDQwMTE1WjAzMTEwLwYDVQQD
EygyODJjM2Q2NmQ1ZmFmZjcwZjMxZmY4MTI4MjdmNzc5ODZjNzYxODllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuJCks0h0E4PyaU+C3BMwLNJxXnU
tevVg9tiVqynW9gn4DfcpsiqhDlHTg9aQNhjdpfZQgWvBaam6Gwd3XD2Ooz17P0w
UZx5qmQLcvgqok2uMXd3/+ZewhiXuEF6pfNy8F/gnm7zhw9o9mt0dEbS475gy27W
J24/rZbhqPiF5nDolBxT/24VNrG0lGNT6MlUhfLgY0Ck4pGt9qH1PfgWzQ0GUZPG
ktjNBnC0hiKX/VIzmIeHGUSTsKmEUhEsY9O+VITncaBi/RmB+94kakK8D8ALC3o/
2e0I6vZRD9CjLneN+lF/HaDTPo+lvDMECc1/w6DFbaJSRONIYrLktla6TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCgsPWbV+v9w8x/4EoJ/d5hsdhieMB8GA1UdIwQY
MBaAFJ5X+EOxf/zqqbhjZYH+TVTjRt3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmxmNFE3Rl9fT3FwdUdObGdmNU5WT05HM2N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC83ZDBlZmUtNzA5ZC00ZDExLWI2OTIt
MGUyMzA4MDZiNTc5LzEvbmxmNFE3Rl9fT3FwdUdObGdmNU5WT05HM2N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC83ZDBlZmUtNzA5ZC00ZDExLWI2OTItMGUyMzA4MDZiNTc5
LzEvbmxmNFE3Rl9fT3FwdUdObGdmNU5WT05HM2N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuRwV/8bx
Mvi79J7uv3wp1uWejB4Hl3krBWNJVF+jW+Yqd1l/0DOBaMHPakSghM8OM4zPio6o
DH8137qYYe12xFxFMlJPXg4eJL8rBw7tEYNHHUm+gWKXvVRvpII13PKCEVJC6kh/
40bwu1GIBZIG1u6G++AGrf/jzwHRZjzI/oJSLBnd+kKe9eAj2yNI6dXcjcd6VP2G
HnznhVHQVub1eH2jVj2uAuLcp6FZPRtVmFW/EkL0t1leteB4SJv6hF5ahQO+PH4f
1Xer8yKuJXOBOgbNCEQPtewgGR3Tb+UHPPc6p1BS06aXg1Oc3cUq2TGHOeu4+MsE
T1HKz5I+TpnQxQ==
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:50:42 2025 by rpki-client