Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
File: nl1ITra0tWiaVEzwsTt--TJFfvE.mft (raw, json)
Hash identifier: 5Olp78kEFYiPE78CoxbDJeWr/uOcMhXeEp7b6Xye4Us=
Subject key identifier: 68:16:B5:0F:A1:A1:14:9A:B5:FA:D8:0E:3A:25:28:68:21:2A:D7:A3
Authority key identifier: 9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1
Certificate issuer: /CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1
Certificate serial: 019A4DE211EC94D53062A337CE128A716BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
Manifest number: 15C2
Signing time: Tue 04 Nov 2025 08:00:52 +0000
Manifest this update: Tue 04 Nov 2025 08:00:52 +0000
Manifest next update: Wed 05 Nov 2025 08:00:52 +0000
Files and hashes: 1: nl1ITra0tWiaVEzwsTt--TJFfvE.crl (hash: 75nsjasWcnd0YggmlueeeX80FdidUHPGQ3dhzPVWdsw=)
2: z9Zyukoi2uOHQdEe-vCyq46DaFo.roa (hash: aTR5i5ZEuCcMlVNNZ8y9Ak4ulLNXmEOMB0JCISwIQQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:11:ec:94:d5:30:62:a3:37:ce:12:8a:71:6b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1
Validity
Not Before: Nov 4 08:00:52 2025 GMT
Not After : Nov 5 08:00:52 2025 GMT
Subject: CN=6816b50fa1a1149ab5fad80e3a252868212ad7a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cc:15:74:25:9a:d6:9a:88:2c:bd:b3:70:5e:
6e:38:73:fc:c8:46:1e:60:b8:ed:57:04:db:54:50:
9c:90:17:bf:28:93:ab:72:1f:00:7e:72:f7:41:a0:
91:df:99:64:34:95:59:49:ed:42:38:34:53:e0:58:
d3:c3:37:34:f4:75:70:d3:ab:07:10:84:d9:a0:3d:
82:5a:34:37:ed:13:03:e3:ac:b2:b3:f3:42:8a:42:
28:73:26:64:1e:66:33:84:62:0e:d6:e1:f2:29:97:
c5:de:b4:aa:e7:11:62:50:ea:30:59:4b:b3:11:1d:
a6:d7:77:4d:f0:5f:f2:af:fc:2e:1d:5e:69:71:d3:
06:ab:3a:a2:9a:91:97:c3:a5:fd:b6:90:0c:a0:93:
d9:59:b0:e7:55:66:24:04:77:15:84:a6:be:9b:cf:
50:a8:65:b0:7e:50:66:d2:5c:80:a6:b6:e9:eb:80:
f4:3c:ea:b4:59:e8:ad:b1:53:97:dd:36:05:9a:5f:
e9:de:fb:7f:0f:86:09:ea:51:4f:bd:a7:2b:fe:c2:
c9:86:44:5e:24:2b:c8:c3:b0:63:3c:89:9f:aa:ca:
ca:75:43:3a:90:8c:3c:4c:c6:e0:68:98:53:56:d3:
2f:7e:70:3e:2a:58:e5:1a:c1:c3:bd:99:9e:47:18:
b9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:16:B5:0F:A1:A1:14:9A:B5:FA:D8:0E:3A:25:28:68:21:2A:D7:A3
X509v3 Authority Key Identifier:
keyid:9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:e5:a2:6b:fe:4f:ce:cb:1b:ba:1a:76:6d:d2:f3:7e:0d:c6:
0c:3f:6f:7a:fa:a4:f8:8c:09:b7:e0:51:e2:04:c0:2b:2b:b3:
29:e1:67:d2:f5:32:1c:0a:ba:51:a3:93:48:ba:92:1f:33:1e:
74:af:75:24:48:28:76:3c:70:66:9f:c3:ae:58:15:36:12:35:
8e:a0:45:98:d9:0c:e4:f8:df:c0:33:05:17:1c:40:01:a5:e9:
d0:5b:b8:c4:58:8b:21:eb:7c:28:9e:e5:eb:36:d9:a1:60:9b:
48:d4:b0:f7:11:d9:1c:cc:4b:7d:9b:6d:e3:9e:b5:03:c3:14:
ba:a9:a1:dd:e6:4f:8a:85:ec:7e:5d:11:b3:8f:b3:72:6c:88:
77:37:e1:d1:cf:a6:08:88:2b:e8:38:5d:e8:a5:93:2d:d2:eb:
51:b5:28:b3:3c:43:4a:bd:76:94:83:f5:bd:0d:69:63:f9:b0:
31:99:44:19:6b:c9:39:18:19:ee:6a:3b:47:80:f1:c7:f1:0a:
36:3e:83:0b:34:83:22:d8:0a:ef:33:a2:97:f1:c9:58:b3:39:
46:ca:17:c2:76:fe:58:b9:98:13:54:b5:e1:60:19:b2:07:e8:
ce:56:dd:01:de:02:5e:cf:4a:63:0a:c9:1e:7c:6b:4d:59:08:
17:85:9f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:31:23 2025 by rpki-client