Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
File: nl1ITra0tWiaVEzwsTt--TJFfvE.mft (raw, json)
Hash identifier: 81WuI7nty0osz7/LzbC16Sb1WoOWokFRnmTnh8cr4v8=
Subject key identifier: E7:37:52:06:4A:4C:D1:E6:2C:D2:FA:8F:23:DB:D5:57:5A:9E:01:A0
Authority key identifier: 9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1
Certificate issuer: /CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1
Certificate serial: 019893A411D705E3EF502219AC12618D1FA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
Manifest number: 14DD
Signing time: Sun 10 Aug 2025 11:00:59 +0000
Manifest this update: Sun 10 Aug 2025 11:00:59 +0000
Manifest next update: Mon 11 Aug 2025 11:00:59 +0000
Files and hashes: 1: nl1ITra0tWiaVEzwsTt--TJFfvE.crl (hash: +/8yvgf2BIx8ajZNQ7LkLi/K+wZeifG9JnCvgXLgNsM=)
2: z9Zyukoi2uOHQdEe-vCyq46DaFo.roa (hash: aTR5i5ZEuCcMlVNNZ8y9Ak4ulLNXmEOMB0JCISwIQQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a4:11:d7:05:e3:ef:50:22:19:ac:12:61:8d:1f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1
Validity
Not Before: Aug 10 11:00:59 2025 GMT
Not After : Aug 11 11:00:59 2025 GMT
Subject: CN=e73752064a4cd1e62cd2fa8f23dbd5575a9e01a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d3:ff:94:fd:f1:b5:de:ce:2c:5a:1e:52:a0:
1c:f8:71:cd:2d:1e:07:58:2f:02:eb:f0:01:cb:1c:
cb:fd:ed:d1:2f:42:01:4f:12:24:58:aa:51:41:80:
5e:92:e8:ea:4b:e8:ac:ca:3d:bd:fb:aa:0b:f7:fd:
2a:a8:0b:16:6c:ec:8f:75:b5:45:3b:77:77:c6:26:
a4:43:20:cd:65:de:b1:8d:94:c0:44:f6:63:29:a2:
93:f6:94:ca:59:01:01:16:74:f2:82:63:7c:db:a5:
6a:2c:bb:85:26:8c:9c:3d:32:60:53:38:18:c2:69:
75:15:22:48:82:d1:b2:c7:99:a1:28:ce:fb:5a:90:
d1:51:f4:91:d3:1c:c1:0a:46:09:7f:c6:b8:81:1d:
5e:9c:4d:da:b2:b2:ed:cb:e6:5d:58:49:38:4f:de:
22:80:4b:f9:2a:e9:3d:51:df:27:f0:cd:04:f7:49:
42:02:1c:3b:99:03:e3:c2:fd:e2:3a:62:24:40:f8:
6f:6f:47:2d:af:37:c4:0b:d4:5f:5e:45:63:b3:f9:
05:0c:63:ab:d2:cf:a5:cd:9b:46:c5:0d:f7:81:1c:
af:b4:63:62:30:ed:88:63:cd:7f:85:58:87:bc:16:
52:48:00:c6:45:b7:62:30:51:5c:be:a0:ba:33:b3:
1c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:37:52:06:4A:4C:D1:E6:2C:D2:FA:8F:23:DB:D5:57:5A:9E:01:A0
X509v3 Authority Key Identifier:
keyid:9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:c8:0b:c9:fe:43:06:d8:24:f1:37:60:b5:b1:98:09:1e:1e:
d2:80:c5:3d:ce:d9:a8:0e:13:ca:8b:6d:69:45:d1:63:68:8d:
b4:3a:13:48:39:6e:a5:c5:76:6d:a0:50:32:3b:c0:70:c3:32:
04:ad:fc:38:48:91:ac:af:e4:64:58:f0:f4:2d:01:88:8e:af:
d6:da:d9:b8:2a:43:79:90:de:2f:42:51:8d:0a:34:31:ce:68:
86:79:2a:c2:64:ae:e7:d3:fd:ca:2d:13:65:58:28:10:c7:ae:
a3:4c:2c:e8:8b:ae:01:e2:1f:e0:79:e8:da:e1:41:a8:30:fa:
ce:c9:57:81:19:2c:74:0f:0b:10:d9:86:4f:3b:12:46:78:88:
22:10:06:77:55:80:9f:54:41:9f:0b:0a:bf:a7:f3:d5:27:a4:
58:83:30:5b:ba:59:d9:6b:7c:ec:5a:91:59:b0:d1:1e:1f:77:
56:38:7e:2a:6d:3f:66:c4:66:8a:b3:76:42:a7:64:1b:88:71:
8f:74:b9:98:7c:ce:f8:22:7f:e6:e2:77:50:aa:25:78:3f:12:
ad:e1:c6:1e:9d:99:56:c6:e2:dc:83:fe:dd:39:c7:ba:7b:3f:
98:01:f3:1d:1a:90:4f:64:ae:bd:35:f0:d6:2f:ee:a1:a9:e7:
64:0c:9b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:49:59 2025 by rpki-client