
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
File: nl1ITra0tWiaVEzwsTt--TJFfvE.mft (raw, json)
Hash identifier: OrpgzRwCKDnp7vyB+yqMy8nDO25FYbMKgZfhNjw+2Lo=
Subject key identifier: 7F:8C:F5:46:F3:6A:CA:FB:F8:FE:79:60:17:7A:A4:31:05:ED:1D:2F
Authority key identifier: 9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1
Certificate issuer: /CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1
Certificate serial: 01984A417AED19321EC23858B699836A6530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
Manifest number: 14B7
Signing time: Sun 27 Jul 2025 05:01:01 +0000
Manifest this update: Sun 27 Jul 2025 05:01:01 +0000
Manifest next update: Mon 28 Jul 2025 05:01:01 +0000
Files and hashes: 1: nl1ITra0tWiaVEzwsTt--TJFfvE.crl (hash: injoc33Y0X1mUWuh7xTDCsWum4CEf3eFThT5tZvjlAM=)
2: z9Zyukoi2uOHQdEe-vCyq46DaFo.roa (hash: aTR5i5ZEuCcMlVNNZ8y9Ak4ulLNXmEOMB0JCISwIQQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:7a:ed:19:32:1e:c2:38:58:b6:99:83:6a:65:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1
Validity
Not Before: Jul 27 05:01:01 2025 GMT
Not After : Jul 28 05:01:01 2025 GMT
Subject: CN=7f8cf546f36acafbf8fe7960177aa43105ed1d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6b:d2:53:76:40:88:31:b2:87:3d:9c:e5:36:
75:8b:d6:b0:0b:27:31:94:f9:29:a3:1c:d7:1a:b6:
3e:0b:e7:04:23:6b:14:c0:1b:a2:65:41:d1:62:77:
d8:a7:36:4e:84:bd:c7:59:8b:59:66:38:09:19:98:
a6:af:ac:bf:f5:95:88:f3:64:51:ac:aa:97:da:41:
96:98:35:74:42:99:00:4b:d1:dc:ed:8b:1e:2a:14:
8b:b5:84:93:da:f1:53:b4:9d:e4:8d:fb:e5:22:37:
3e:06:53:1a:49:b9:71:16:ce:d4:1d:8c:cf:2c:56:
06:d5:c5:b6:38:f2:a9:a4:6b:bf:6d:70:af:8e:2c:
15:a9:e9:30:71:dc:8f:26:d0:64:79:0a:ea:f0:05:
ad:d2:8b:a3:3d:cf:f8:b8:3f:0d:01:86:cf:1d:e2:
0a:bd:fa:a5:1d:5f:7f:f3:65:32:97:43:0c:47:f4:
36:72:45:89:ff:13:2c:50:03:ab:7f:7f:dc:4e:15:
e3:27:4c:52:4a:d6:ad:7e:c3:b5:e9:2a:71:73:0a:
c4:e9:6d:43:fb:a6:72:69:b4:32:5b:31:f3:62:7b:
d8:bc:4a:61:0a:77:56:17:01:8c:e0:41:c8:37:e5:
86:01:df:58:f7:88:b0:50:88:f8:19:ae:c8:8d:40:
2e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8C:F5:46:F3:6A:CA:FB:F8:FE:79:60:17:7A:A4:31:05:ED:1D:2F
X509v3 Authority Key Identifier:
keyid:9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:46:13:60:9c:cd:5d:71:77:6d:da:db:a3:a7:f4:07:9f:b4:
ab:5f:7f:14:b2:66:1d:c7:6a:78:fe:e8:d0:97:81:b4:11:73:
50:e7:a2:9c:24:a7:87:33:4f:ba:41:00:71:c4:64:6d:bf:ed:
32:d0:11:3d:bc:87:16:ac:9d:eb:22:e6:92:59:88:45:f6:cf:
cd:08:b3:b7:12:04:c4:97:de:97:2d:ba:95:24:45:b4:56:6a:
ba:4e:2d:f0:a6:43:9e:4c:85:6d:16:6a:4c:66:11:80:79:c2:
40:89:b5:a3:3e:87:7a:70:21:ab:22:52:d3:19:0e:c2:35:15:
77:89:0e:17:d3:6f:22:f3:a2:36:6b:ea:f5:42:83:7f:bb:b7:
01:33:11:f6:fe:2a:e9:4a:90:8a:ce:9e:34:a5:02:46:a1:df:
d1:6a:74:b9:8c:9a:fb:b4:42:6c:84:42:54:66:22:ef:a5:d2:
c5:e9:04:24:db:ee:ce:f2:ba:01:1c:d2:3f:d2:b8:80:5c:fb:
48:f1:69:f1:bd:d6:43:43:2b:14:d0:2e:6e:78:89:8c:12:78:
db:61:ba:d8:77:be:29:de:0a:b2:6c:b4:83:c2:ce:11:f0:00:
84:54:ff:5c:e7:37:b4:cc:f7:83:95:be:28:09:69:89:df:d0:
d5:50:3f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:23:00 2025 by rpki-client