Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
File: NlHOpaznf01_TdKC8Qq5yw7k0ew.mft (raw, json)
Hash identifier: j6CQSGItDG9YIl4afcHn4wlUd9WH/9m1qgf9fO9oVb4=
Subject key identifier: 03:D4:82:18:E4:C0:A4:5B:59:B6:C7:72:F6:89:4B:08:78:1B:55:AB
Authority key identifier: 36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC
Certificate issuer: /CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec
Certificate serial: 019A503DE6E49C07099F54FC94E2BD134C3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
Manifest number: 120D
Signing time: Tue 04 Nov 2025 19:00:25 +0000
Manifest this update: Tue 04 Nov 2025 19:00:25 +0000
Manifest next update: Wed 05 Nov 2025 19:00:25 +0000
Files and hashes: 1: NlHOpaznf01_TdKC8Qq5yw7k0ew.crl (hash: zGHHTTRb6zaS1Wwnajm5JlRjv3/0WwciT0hr/mVUiYo=)
2: XPkovunJ2mYG9xru2HKfkrigcMA.roa (hash: ZBoNLDdsfMiH4Qvw9YL8Os7NUZ9E42iEu1OMEgsfl7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:e6:e4:9c:07:09:9f:54:fc:94:e2:bd:13:4c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec
Validity
Not Before: Nov 4 19:00:25 2025 GMT
Not After : Nov 5 19:00:25 2025 GMT
Subject: CN=03d48218e4c0a45b59b6c772f6894b08781b55ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c5:f8:a5:b0:dc:5b:f2:c1:9e:e9:35:d4:8d:
39:ac:ca:30:12:9e:0d:98:fd:5a:11:7e:73:3f:37:
46:f0:57:ac:ca:ab:fe:26:a3:1c:83:54:a3:cc:ad:
76:96:87:a7:69:c8:07:f7:c7:29:fb:9d:61:8d:db:
e5:a5:f7:8f:4a:a8:07:82:9d:b7:6f:5d:19:2b:57:
31:f4:67:56:ee:59:c7:9f:50:a0:e4:fb:a2:37:31:
68:6b:dd:7f:40:f8:bc:ce:5f:23:c1:da:e7:59:2d:
b8:14:fa:ab:51:91:41:e7:36:2b:87:ff:f9:a8:a8:
69:6d:f1:9d:68:b6:04:39:99:9b:61:34:49:63:4a:
76:a9:fd:6b:60:34:38:06:37:a6:2c:4d:49:4d:85:
d6:ec:8c:bf:04:f5:1c:45:7f:de:67:36:75:66:f8:
b8:e2:cb:c5:ce:b2:e8:dc:f7:6c:36:56:cc:15:ca:
f8:97:c3:d8:ad:91:28:69:46:7b:fd:e1:f3:25:6e:
9b:42:1d:48:7c:86:25:ae:b9:39:58:6b:3f:da:61:
d0:2d:5c:a9:93:a8:ea:81:53:7c:bb:98:ff:d0:4e:
62:68:d0:20:67:e3:13:c5:48:94:3a:af:2d:b9:b0:
1e:f3:ad:35:cb:54:de:51:5a:ea:fd:64:db:42:8e:
97:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D4:82:18:E4:C0:A4:5B:59:B6:C7:72:F6:89:4B:08:78:1B:55:AB
X509v3 Authority Key Identifier:
keyid:36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ad:40:04:8f:aa:1b:a7:63:26:60:0d:f2:0a:5e:ae:de:c6:
98:4f:a3:d3:92:03:4a:6c:6a:68:f8:45:bd:25:81:d5:80:95:
20:b5:b8:17:a5:40:40:62:85:94:8e:f8:96:29:cb:54:5d:54:
ea:96:c6:4b:4d:74:bf:66:f3:d8:81:9e:f0:0c:41:11:61:ea:
73:69:9c:cd:2f:3d:3d:7b:04:cd:9f:ca:d7:94:5b:8d:a8:aa:
eb:d7:84:80:dd:ce:54:26:2a:2c:7d:be:56:6f:5a:0b:f2:02:
77:0a:9b:cb:a1:46:58:da:50:0b:b4:39:90:01:d0:f6:b2:37:
3c:0f:e4:7a:d9:55:3e:75:21:14:75:ac:67:b3:be:25:6e:fc:
49:93:87:2b:1b:c3:45:08:42:fb:ec:e5:64:2d:98:de:5e:f8:
08:0c:2e:2f:9d:79:5b:4c:63:30:7e:0d:c0:86:ee:94:fa:92:
23:31:4a:9b:c2:85:4c:19:f9:4a:b2:15:47:a1:90:e4:86:06:
f7:97:b6:27:73:ce:f7:d3:e4:c4:c3:36:cc:be:21:6c:6b:c4:
c5:b2:2b:39:be:7b:07:52:2f:eb:99:83:69:65:c4:27:3d:f1:
0e:6d:ff:63:1c:20:07:60:00:36:9c:11:5d:32:1b:df:6a:49:
ef:0d:7c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:37:25 2025 by rpki-client