Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft
File: NLFHrBz3fVyPsq90-tO3O10TeyY.mft (raw, json)
Hash identifier: tRDOJT1AVpMmyNMved7XEVHweCXkVhhy7L6vlCwlENQ=
Subject key identifier: FD:50:47:F9:2A:A9:77:4B:4C:23:9F:48:81:C9:63:34:66:C4:3B:EA
Authority key identifier: 34:B1:47:AC:1C:F7:7D:5C:8F:B2:AF:74:FA:D3:B7:3B:5D:13:7B:26
Certificate issuer: /CN=34b147ac1cf77d5c8fb2af74fad3b73b5d137b26
Certificate serial: 019A522CA1DF4D1C24B21DDD756A16655D08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLFHrBz3fVyPsq90-tO3O10TeyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft
Manifest number: 02A2
Signing time: Wed 05 Nov 2025 04:00:48 +0000
Manifest this update: Wed 05 Nov 2025 04:00:48 +0000
Manifest next update: Thu 06 Nov 2025 04:00:48 +0000
Files and hashes: 1: NLFHrBz3fVyPsq90-tO3O10TeyY.crl (hash: ai0Z1E+DxYZ2TmjtxCtjeGXmAQKt5DQzp6riEuLvo18=)
2: THnq9fycftVoi9SRyG2RAgjh-xM.roa (hash: CvE6vZRBpMVjaRZR6SZYXH1U/C4JGawX5FU1BEkF3Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLFHrBz3fVyPsq90-tO3O10TeyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:a1:df:4d:1c:24:b2:1d:dd:75:6a:16:65:5d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b147ac1cf77d5c8fb2af74fad3b73b5d137b26
Validity
Not Before: Nov 5 04:00:48 2025 GMT
Not After : Nov 6 04:00:48 2025 GMT
Subject: CN=fd5047f92aa9774b4c239f4881c9633466c43bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cf:e3:38:ad:46:3b:60:af:a9:75:03:24:52:
d7:95:bc:48:54:95:f1:52:71:94:63:58:e5:a4:8d:
c7:93:43:19:a5:ee:20:07:01:45:75:57:be:ac:b8:
2b:b2:75:3c:c2:d5:4d:b0:33:90:a4:e8:c2:96:ae:
fb:22:60:6b:05:21:61:80:0d:78:29:e6:1a:d4:55:
43:e8:78:a6:2e:64:55:9b:6d:80:fc:e0:d2:c5:69:
a5:81:16:19:dc:53:11:5f:ee:86:24:46:2d:67:5d:
d1:70:2f:6a:af:ec:08:94:68:bc:23:72:2a:9f:a2:
19:a9:a4:cb:55:bd:89:fb:b8:93:bc:55:de:74:c5:
ae:f0:53:04:b8:c1:48:14:9d:fc:39:f0:83:5b:c8:
23:f3:2a:a2:33:d0:e4:15:bb:a9:2c:ed:be:a4:73:
59:52:b6:15:c3:07:7b:50:ed:9b:96:f2:a1:d1:e6:
3d:eb:81:44:e0:15:f1:56:ab:bf:ec:1f:b3:28:1a:
cc:49:2c:1f:b0:9d:66:b1:f4:42:dc:87:a7:71:26:
79:65:8f:71:21:92:64:a7:b0:6f:79:48:e0:bc:2c:
8b:13:e6:45:2e:b5:0c:c1:a9:fe:60:2b:34:bb:94:
3d:89:9b:77:be:1d:10:2c:df:51:f3:9d:dd:2c:cc:
24:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:50:47:F9:2A:A9:77:4B:4C:23:9F:48:81:C9:63:34:66:C4:3B:EA
X509v3 Authority Key Identifier:
keyid:34:B1:47:AC:1C:F7:7D:5C:8F:B2:AF:74:FA:D3:B7:3B:5D:13:7B:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLFHrBz3fVyPsq90-tO3O10TeyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:68:55:41:36:3a:2d:fe:b4:f2:de:d2:54:05:c8:99:54:be:
f0:22:3b:a4:ab:ea:83:bf:50:83:d3:2f:60:1e:18:c9:00:aa:
b1:12:20:d6:e7:e0:9a:69:18:44:f3:af:df:68:cf:ad:76:03:
00:28:d2:00:3a:f6:79:93:d6:c6:6d:62:c2:1d:34:db:44:f7:
9d:18:ef:07:c7:29:75:ad:bb:44:10:25:3c:f1:f3:80:8d:fa:
0c:b3:a3:5d:18:76:16:01:76:9c:85:0d:2c:df:4f:1b:53:e4:
38:97:44:ee:d5:7c:a9:b0:60:20:d3:3a:8b:38:ab:9b:8f:33:
19:54:f4:a2:ec:6a:8c:d1:8d:6b:8e:9a:e2:f5:b2:2c:5f:1d:
1a:d2:a2:85:48:cd:4b:e9:19:d8:8d:30:64:35:24:3a:1d:53:
80:cd:d2:79:08:8f:03:f5:cf:6e:55:8d:11:b4:e5:f2:f2:ea:
96:29:4b:45:da:da:a2:8f:aa:e0:39:df:5c:61:22:92:be:ea:
2a:c7:90:b2:d2:87:13:42:e1:c0:ab:d2:79:74:96:a6:6b:62:
db:88:60:36:47:ab:26:6d:01:f4:aa:fe:83:47:a3:dd:4b:3f:
54:9a:9d:2e:3e:80:f5:05:b9:4f:f8:06:d1:35:f8:c0:cf:67:
30:32:3b:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSLKHfTRwksh3ddWoWZV0IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0YjE0N2FjMWNmNzdkNWM4ZmIyYWY3NGZhZDNiNzNiNWQx
MzdiMjYwHhcNMjUxMTA1MDQwMDQ4WhcNMjUxMTA2MDQwMDQ4WjAzMTEwLwYDVQQD
EyhmZDUwNDdmOTJhYTk3NzRiNGMyMzlmNDg4MWM5NjMzNDY2YzQzYmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus/jOK1GO2CvqXUDJFLXlbxIVJXx
UnGUY1jlpI3Hk0MZpe4gBwFFdVe+rLgrsnU8wtVNsDOQpOjClq77ImBrBSFhgA14
KeYa1FVD6HimLmRVm22A/ODSxWmlgRYZ3FMRX+6GJEYtZ13RcC9qr+wIlGi8I3Iq
n6IZqaTLVb2J+7iTvFXedMWu8FMEuMFIFJ38OfCDW8gj8yqiM9DkFbupLO2+pHNZ
UrYVwwd7UO2blvKh0eY964FE4BXxVqu/7B+zKBrMSSwfsJ1msfRC3IencSZ5ZY9x
IZJkp7BveUjgvCyLE+ZFLrUMwan+YCs0u5Q9iZt3vh0QLN9R853dLMwk3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1QR/kqqXdLTCOfSIHJYzRmxDvqMB8GA1UdIwQY
MBaAFDSxR6wc931cj7KvdPrTtztdE3smMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkxGSHJCejNmVnlQc3E5MC10TzNPMTBUZXlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jYjc4ZTctMzQ1NS00YmFlLWI1NDQt
YjEzNzE3NTAzMDEwLzEvTkxGSHJCejNmVnlQc3E5MC10TzNPMTBUZXlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jYjc4ZTctMzQ1NS00YmFlLWI1NDQtYjEzNzE3NTAzMDEw
LzEvTkxGSHJCejNmVnlQc3E5MC10TzNPMTBUZXlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX2hVQTY6
Lf608t7SVAXImVS+8CI7pKvqg79Qg9MvYB4YyQCqsRIg1ufgmmkYRPOv32jPrXYD
ACjSADr2eZPWxm1iwh0020T3nRjvB8cpda27RBAlPPHzgI36DLOjXRh2FgF2nIUN
LN9PG1PkOJdE7tV8qbBgINM6izirm48zGVT0ouxqjNGNa46a4vWyLF8dGtKihUjN
S+kZ2I0wZDUkOh1TgM3SeQiPA/XPblWNEbTl8vLqlilLRdraoo+q4DnfXGEikr7q
KseQstKHE0LhwKvSeXSWpmti24hgNkerJm0B9Kr+g0ej3Us/VJqdLj6A9QW5T/gG
0TX4wM9nMDI7xw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:05:31 2025 by rpki-client