Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft
File: NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft (raw, json)
Hash identifier: 49mMgEqwffxVu+sako0lRwrNIvKrHuhwZyqWxRZF8Dw=
Subject key identifier: B3:F4:43:20:24:C6:B7:1E:FE:0F:A8:C4:6A:FB:60:C4:C1:52:27:D5
Authority key identifier: 34:B0:C5:A4:03:E2:DA:D3:C4:7B:79:1F:DA:20:42:CF:71:50:09:CF
Certificate issuer: /CN=34b0c5a403e2dad3c47b791fda2042cf715009cf
Certificate serial: 019853E89A07325D80864D37A4953DF63E9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft
Manifest number: 06C9
Signing time: Tue 29 Jul 2025 02:00:09 +0000
Manifest this update: Tue 29 Jul 2025 02:00:09 +0000
Manifest next update: Wed 30 Jul 2025 02:00:09 +0000
Files and hashes: 1: NLDFpAPi2tPEe3kf2iBCz3FQCc8.crl (hash: HqFc6efcIE7MBaZqr66d9x9jovbkyjXxXOnavtAQzso=)
2: XZf82C_CN-vLQbpUrT-DW4sm3Y0.roa (hash: pAKJ5T3FZi6TyLDIs/UxYmL+rXXkynL3g9BJ4W4ROUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e8:9a:07:32:5d:80:86:4d:37:a4:95:3d:f6:3e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b0c5a403e2dad3c47b791fda2042cf715009cf
Validity
Not Before: Jul 29 02:00:09 2025 GMT
Not After : Jul 30 02:00:09 2025 GMT
Subject: CN=b3f4432024c6b71efe0fa8c46afb60c4c15227d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6b:26:1e:b9:58:2c:5b:de:50:5f:47:13:b0:
ff:18:1a:38:57:ec:6a:c6:0f:5d:34:80:43:16:b4:
ab:7e:dd:c8:ad:a9:aa:88:1b:c7:21:1b:e2:e3:88:
e0:e5:10:f6:17:b0:b5:a7:37:da:64:12:5f:02:09:
a8:bb:47:f7:dd:28:55:2f:34:13:c7:f6:ea:0e:16:
e8:e4:f8:17:be:bb:84:58:1c:9c:31:22:98:9c:74:
9f:56:f1:82:ba:c2:30:8a:b8:83:af:0a:c7:8a:1a:
88:05:bc:47:05:ff:c1:57:8e:21:8d:14:ad:d7:de:
7a:95:bb:eb:a9:67:9c:8f:ec:f8:fd:c9:bd:c8:08:
92:bb:c5:ba:31:27:50:74:77:70:2c:c3:6d:a6:00:
c5:4f:de:a7:ca:e7:38:7d:41:26:47:3f:64:d4:83:
21:40:56:72:d1:8c:bc:88:7e:57:21:cc:77:10:45:
9d:54:69:94:19:f4:19:5a:b4:81:26:67:2e:d0:75:
06:16:9c:b2:9d:0b:c8:5b:f6:e0:4f:da:77:b4:54:
02:12:d7:f8:59:f2:14:3e:52:9e:0b:64:f8:43:69:
f9:0a:15:e0:84:ee:f4:26:10:92:0f:36:be:c0:ba:
3a:1f:1b:ec:a5:98:62:49:26:e7:9f:3e:47:96:08:
8e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F4:43:20:24:C6:B7:1E:FE:0F:A8:C4:6A:FB:60:C4:C1:52:27:D5
X509v3 Authority Key Identifier:
keyid:34:B0:C5:A4:03:E2:DA:D3:C4:7B:79:1F:DA:20:42:CF:71:50:09:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:fb:4e:2b:32:e4:6e:83:8a:06:1a:75:ae:c0:6e:fe:83:cb:
a5:75:20:ba:49:58:e1:c6:9c:53:73:88:28:7f:3b:75:79:f6:
1c:34:42:bc:8e:35:f4:f8:cc:aa:5e:a4:98:b0:f4:fd:43:24:
bc:0b:ad:1e:a8:8e:3a:56:f4:3f:9b:81:ca:f9:89:1c:ee:49:
54:9c:c9:09:ff:5c:5e:89:86:40:39:dd:7a:d0:bc:c4:79:1a:
59:6e:7f:38:28:04:b5:a2:a9:55:2f:d3:4f:c8:1d:74:31:db:
14:df:05:0f:03:70:41:0f:81:0e:1f:91:c5:a1:b7:f4:df:f2:
67:1b:b2:fd:53:61:c8:a0:ed:f7:df:0a:ec:e4:c8:1b:69:ab:
05:6e:b5:50:02:92:50:62:ad:2f:de:cd:1f:b8:e1:48:e5:6f:
af:bc:b0:b0:90:28:ed:c2:d2:15:07:11:20:21:3b:72:2e:35:
04:c6:7f:90:65:50:b0:fd:e7:3c:79:2a:db:da:2f:de:ff:92:
31:8f:5a:50:93:0b:90:8b:cc:7c:ca:39:e6:bb:04:40:1a:64:
81:cf:57:48:cc:92:1c:13:9c:5d:e4:e0:90:9d:49:fb:af:27:
48:83:7e:7a:d2:c2:7f:dd:76:65:cb:ce:57:ef:b1:a7:7a:6b:
db:f6:1a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:39:35 2025 by rpki-client