Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
File: NLjV-ROFaLUssJNuK0yU93zleuw.mft (raw, json)
Hash identifier: FJ/JWg9IjFUvKOEXZckfoWH4q/QLhiL8Jp1NlqPMNRo=
Subject key identifier: FD:0B:7E:DF:C0:DD:08:1F:3B:B5:52:8F:97:85:EF:3D:CF:0F:2A:9C
Authority key identifier: 34:B8:D5:F9:13:85:68:B5:2C:B0:93:6E:2B:4C:94:F7:7C:E5:7A:EC
Certificate issuer: /CN=34b8d5f9138568b52cb0936e2b4c94f77ce57aec
Certificate serial: 019A4DE1FC48ADA3046271CA5CE288DD2A24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
Manifest number: 1446
Signing time: Tue 04 Nov 2025 08:00:47 +0000
Manifest this update: Tue 04 Nov 2025 08:00:47 +0000
Manifest next update: Wed 05 Nov 2025 08:00:47 +0000
Files and hashes: 1: GRpxJM6uak1q4A4UBjGhlwT7Cps.roa (hash: wNBRbInhIrKHJa8W7MC+iDamgy4K7A7SioRTK7a6kK0=)
2: NLjV-ROFaLUssJNuK0yU93zleuw.crl (hash: 2KJx6Kf8+ZJNCWse/N1D0qIhu+9yURfgpX6rNdg1Cek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:fc:48:ad:a3:04:62:71:ca:5c:e2:88:dd:2a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b8d5f9138568b52cb0936e2b4c94f77ce57aec
Validity
Not Before: Nov 4 08:00:47 2025 GMT
Not After : Nov 5 08:00:47 2025 GMT
Subject: CN=fd0b7edfc0dd081f3bb5528f9785ef3dcf0f2a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d5:98:49:f6:71:45:19:c6:78:9c:82:81:85:
f0:64:7e:20:c0:c8:15:30:5d:3d:ed:4f:14:13:b8:
64:94:b6:ec:71:74:c5:d4:c8:6e:e2:47:27:8d:67:
87:3a:00:d4:36:82:e5:ef:87:f6:ea:df:4d:7f:21:
cd:1c:fc:de:8d:88:8d:6e:4e:19:50:0d:b8:8e:ac:
a7:8f:d4:21:4a:86:2b:01:fe:ea:fd:58:5a:0c:c1:
22:31:c8:85:45:18:a8:65:9a:bb:31:a7:e5:57:d6:
94:08:06:49:b8:b1:6e:be:4f:74:27:f4:fe:5f:37:
e2:18:e3:6b:68:88:cc:56:a1:15:f6:66:3e:af:21:
0f:b9:0b:3b:26:77:c6:3e:16:43:ef:22:d6:c0:b1:
11:ba:59:55:64:3b:71:fb:20:62:4f:0d:a7:0c:08:
9c:2a:95:44:5b:5b:e6:bb:59:f2:9e:70:a3:79:51:
7a:eb:9b:34:62:37:91:39:ec:d9:af:82:c0:d8:92:
89:1d:e5:95:be:4e:5c:ef:be:b3:ad:1e:c8:9b:95:
ee:8f:e2:66:3c:70:13:a1:b2:a7:64:65:e8:9a:c4:
0e:d0:d1:d4:e4:3c:a1:2c:72:37:d8:7c:91:77:3c:
92:fa:b8:6d:95:bd:ae:a5:6c:78:d3:37:31:42:32:
19:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0B:7E:DF:C0:DD:08:1F:3B:B5:52:8F:97:85:EF:3D:CF:0F:2A:9C
X509v3 Authority Key Identifier:
keyid:34:B8:D5:F9:13:85:68:B5:2C:B0:93:6E:2B:4C:94:F7:7C:E5:7A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:90:9d:89:9f:16:d9:12:a2:50:1d:c0:0a:67:31:87:27:a6:
c0:5e:4c:e1:4e:a6:68:87:aa:9a:a4:2e:40:13:d1:7d:47:1f:
ab:0a:00:6d:05:03:14:b0:82:7c:b6:3a:1b:3f:71:08:7d:9c:
ed:25:5b:8f:15:fa:b3:6b:c5:82:06:54:25:74:95:7c:eb:a2:
4c:b8:97:ff:b4:84:4c:8f:61:eb:6c:90:1b:64:f5:f1:5d:8e:
82:11:ab:45:19:52:58:60:32:18:d3:2e:06:07:59:ae:db:7f:
e4:95:8f:8b:03:58:74:03:52:a9:87:58:bc:f2:a8:f5:88:1b:
91:ad:9e:26:17:3a:94:43:8a:09:a4:10:6d:9d:14:75:5a:d5:
44:82:cb:50:67:3e:04:99:af:f5:74:2b:64:a9:8b:17:c9:b9:
dd:bc:b1:3b:7e:3f:e2:da:8b:1a:f4:ad:a0:c4:66:69:37:c7:
7b:1f:42:66:31:81:a4:2b:22:b2:23:eb:14:3c:9e:24:d4:d9:
f6:3f:fa:1a:6a:31:a2:aa:37:63:66:21:37:4c:4c:19:0f:76:
03:2d:80:d7:e5:8b:43:c1:91:44:bf:3f:a7:f7:51:d4:9a:4a:
d4:cb:1b:2f:63:6a:54:5e:ef:76:9b:ca:38:d9:32:b8:e5:25:
39:ca:e5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:21:16 2025 by rpki-client