Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
File: L0yd_nsacqVRu6FamZpsGTM__5Y.mft (raw, json)
Hash identifier: vvsHsl+9y70FnEKgIlS25Rk4Xqqj7fucbqG+E0ISMSw=
Subject key identifier: 16:66:BF:3E:4D:B0:78:A4:4F:68:07:57:3A:5F:33:16:96:97:6F:D7
Authority key identifier: 2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96
Certificate issuer: /CN=2f4c9dfe7b1a72a551bba15a999a6c19333fff96
Certificate serial: 019A71EEAAF74FC7EB72E52317A28CB3B145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
Manifest number: 1461
Signing time: Tue 11 Nov 2025 08:00:57 +0000
Manifest this update: Tue 11 Nov 2025 08:00:57 +0000
Manifest next update: Wed 12 Nov 2025 08:00:57 +0000
Files and hashes: 1: L0yd_nsacqVRu6FamZpsGTM__5Y.crl (hash: GdWtYoeBiJYJGal/dO9IOqFO7zrRzfRsqQYONX3N5b4=)
2: _D7djxZolRxCx5AgywEsR673Vyc.roa (hash: lkosjygsw/gw6j4Ql0QUbhSbmAPEpo1du5WppRl3Xeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:aa:f7:4f:c7:eb:72:e5:23:17:a2:8c:b3:b1:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f4c9dfe7b1a72a551bba15a999a6c19333fff96
Validity
Not Before: Nov 11 08:00:57 2025 GMT
Not After : Nov 12 08:00:57 2025 GMT
Subject: CN=1666bf3e4db078a44f6807573a5f331696976fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:81:ef:de:87:ba:df:03:a1:27:e3:6d:b9:dd:
16:f1:1c:ae:a6:d6:3e:1b:13:bf:de:e8:2e:16:f2:
d1:59:21:3f:2a:c2:c0:de:e6:6b:c7:0e:9c:a0:ea:
8d:2e:1e:5f:a7:c4:74:3a:42:25:8a:5d:50:91:59:
d7:bb:10:9b:46:d3:7f:33:d5:18:f4:ac:5f:c6:7f:
db:72:d7:36:84:a2:7b:0f:77:9c:34:35:a4:cd:08:
4a:07:19:7f:c7:b1:53:8a:10:61:1a:ef:bd:03:08:
4a:06:af:1d:33:dc:3a:e5:df:bb:22:53:0b:c9:19:
96:16:04:d1:a2:69:00:4c:cf:d0:24:3a:ae:61:30:
63:43:b9:f5:f4:8f:a6:41:20:1e:85:38:78:4d:75:
28:a1:76:8e:dc:b0:b1:38:2e:7c:e6:7e:ba:55:1f:
df:c3:11:11:bc:0f:3e:20:53:7a:9c:5f:af:85:3c:
a1:58:ee:d5:c9:50:dd:58:17:cb:1c:eb:53:ce:cf:
f8:11:19:8a:fe:2e:0f:9f:48:8b:49:68:b5:46:8e:
a9:c8:63:56:d4:8a:4a:4c:14:d4:b1:eb:29:47:5b:
6e:89:be:ab:6f:72:6d:4f:db:38:a1:48:9f:e8:53:
b9:97:fc:04:13:30:b1:db:60:14:64:f4:5c:9f:3b:
29:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:66:BF:3E:4D:B0:78:A4:4F:68:07:57:3A:5F:33:16:96:97:6F:D7
X509v3 Authority Key Identifier:
keyid:2F:4C:9D:FE:7B:1A:72:A5:51:BB:A1:5A:99:9A:6C:19:33:3F:FF:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0yd_nsacqVRu6FamZpsGTM__5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/efa002-00b5-476b-85cf-e9e388812752/1/L0yd_nsacqVRu6FamZpsGTM__5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:a4:43:fe:fe:52:2f:18:f0:e6:60:91:7a:40:71:cb:22:5e:
bd:95:36:c1:76:26:d4:d5:ba:7c:a4:2f:b5:81:72:20:ff:39:
d6:d9:12:76:a9:c6:3e:36:f8:d9:28:bd:50:f3:2e:2e:64:0a:
00:a3:09:69:2d:9c:df:e4:3f:21:fd:ec:53:82:bd:39:71:96:
d5:6e:ca:57:05:6f:bf:c6:42:0f:57:40:cb:08:49:cc:b9:9e:
2d:4c:93:7d:30:20:11:12:0e:70:83:b3:48:26:ac:52:7a:4f:
bc:65:eb:01:95:8e:20:14:28:ea:b6:c0:8c:93:35:b0:ff:65:
f1:3d:ca:53:49:f4:77:02:69:0c:b0:f1:fc:43:26:e9:29:39:
a3:c3:d7:e4:ce:9b:ee:12:95:53:df:b3:12:3e:29:40:45:cf:
cf:60:19:92:1c:87:87:c8:53:f8:66:21:37:21:ca:04:79:95:
4e:cb:05:4c:cd:e4:bb:90:92:b6:4d:8f:64:e7:16:9e:f1:c8:
e4:a5:04:b8:da:16:e2:e2:cb:1a:04:64:ff:4e:c9:11:68:f7:
76:ae:77:0f:02:14:2b:13:8f:d7:f6:64:87:35:c7:3e:4a:2a:
d7:5e:c1:e0:57:e1:f2:56:ca:0f:48:83:78:41:06:28:8c:c2:
2b:bd:26:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7qr3T8frcuUjF6KMs7FFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNGM5ZGZlN2IxYTcyYTU1MWJiYTE1YTk5OWE2YzE5MzMz
ZmZmOTYwHhcNMjUxMTExMDgwMDU3WhcNMjUxMTEyMDgwMDU3WjAzMTEwLwYDVQQD
EygxNjY2YmYzZTRkYjA3OGE0NGY2ODA3NTczYTVmMzMxNjk2OTc2ZmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYHv3oe63wOhJ+Ntud0W8RyuptY+
GxO/3uguFvLRWSE/KsLA3uZrxw6coOqNLh5fp8R0OkIlil1QkVnXuxCbRtN/M9UY
9Kxfxn/bctc2hKJ7D3ecNDWkzQhKBxl/x7FTihBhGu+9AwhKBq8dM9w65d+7IlML
yRmWFgTRomkATM/QJDquYTBjQ7n19I+mQSAehTh4TXUooXaO3LCxOC585n66VR/f
wxERvA8+IFN6nF+vhTyhWO7VyVDdWBfLHOtTzs/4ERmK/i4Pn0iLSWi1Ro6pyGNW
1IpKTBTUsespR1tuib6rb3JtT9s4oUif6FO5l/wEEzCx22AUZPRcnzspAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBZmvz5NsHikT2gHVzpfMxaWl2/XMB8GA1UdIwQY
MBaAFC9Mnf57GnKlUbuhWpmabBkzP/+WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDB5ZF9uc2FjcVZSdTZGYW1acHNHVE1fXzVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lZmEwMDItMDBiNS00NzZiLTg1Y2Yt
ZTllMzg4ODEyNzUyLzEvTDB5ZF9uc2FjcVZSdTZGYW1acHNHVE1fXzVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9lZmEwMDItMDBiNS00NzZiLTg1Y2YtZTllMzg4ODEyNzUy
LzEvTDB5ZF9uc2FjcVZSdTZGYW1acHNHVE1fXzVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABqRD/v5S
Lxjw5mCRekBxyyJevZU2wXYm1NW6fKQvtYFyIP851tkSdqnGPjb42Si9UPMuLmQK
AKMJaS2c3+Q/If3sU4K9OXGW1W7KVwVvv8ZCD1dAywhJzLmeLUyTfTAgERIOcIOz
SCasUnpPvGXrAZWOIBQo6rbAjJM1sP9l8T3KU0n0dwJpDLDx/EMm6Sk5o8PX5M6b
7hKVU9+zEj4pQEXPz2AZkhyHh8hT+GYhNyHKBHmVTssFTM3ku5CStk2PZOcWnvHI
5KUEuNoW4uLLGgRk/07JEWj3dq53DwIUKxOP1/ZkhzXHPkoq117B4Ffh8lbKD0iD
eEEGKIzCK70mjQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:29 2025 by rpki-client