Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
File: nlf4Q7F__OqpuGNlgf5NVONG3cw.mft (raw, json)
Hash identifier: seRumU7ONLwqMUHFL+ELUSIshPOQ78uX0Dc8Xco//XI=
Subject key identifier: 64:66:91:67:BB:7B:54:85:6F:07:56:8C:B9:0C:82:2A:30:A8:4A:F5
Authority key identifier: 9E:57:F8:43:B1:7F:FC:EA:A9:B8:63:65:81:FE:4D:54:E3:46:DD:CC
Certificate issuer: /CN=9e57f843b17ffceaa9b8636581fe4d54e346ddcc
Certificate serial: 019A71134E0DD94E0A587DE284F607B1D482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlf4Q7F__OqpuGNlgf5NVONG3cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
Manifest number: 0D73
Signing time: Tue 11 Nov 2025 04:01:21 +0000
Manifest this update: Tue 11 Nov 2025 04:01:21 +0000
Manifest next update: Wed 12 Nov 2025 04:01:21 +0000
Files and hashes: 1: IFXNgHuEN8ycsfhuA4dEpX7GYeY.roa (hash: 0NAgcHKOW4VLEuD8zIQn9OzSwjmjjTPr1tkjSBELdjk=)
2: nlf4Q7F__OqpuGNlgf5NVONG3cw.crl (hash: yGl+soN7yHVHHkGKz6WrKsjEBppzqJdyK72kqC9BpL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlf4Q7F__OqpuGNlgf5NVONG3cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:4e:0d:d9:4e:0a:58:7d:e2:84:f6:07:b1:d4:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e57f843b17ffceaa9b8636581fe4d54e346ddcc
Validity
Not Before: Nov 11 04:01:21 2025 GMT
Not After : Nov 12 04:01:21 2025 GMT
Subject: CN=64669167bb7b54856f07568cb90c822a30a84af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:28:60:c0:08:4c:66:e4:36:e3:59:47:27:ae:
ec:f1:ce:3f:d8:77:7a:46:29:03:64:4f:5b:f3:8e:
6d:2f:03:7b:27:e7:57:c6:7b:18:fe:6b:49:38:89:
cf:98:d1:a6:9e:60:39:79:8c:25:ad:03:29:ef:96:
15:74:50:dc:2b:0c:b1:c5:38:1d:c6:bd:79:ce:12:
d0:38:9c:c1:61:9f:53:fa:8c:0a:13:0a:ed:8d:2c:
af:87:f6:6d:4f:34:83:47:d2:77:85:ea:3d:72:d6:
76:50:4a:9f:50:08:56:d7:91:48:72:cc:5f:91:8c:
87:fa:4b:4d:17:03:01:c7:0d:d2:49:80:d9:41:ea:
7e:82:54:b0:79:a5:76:ff:9e:44:5b:77:2b:6c:1d:
1e:e7:71:e6:1b:47:7d:7d:87:bc:f3:a6:47:b4:e2:
d4:9f:75:74:ae:04:48:b2:00:23:b8:df:e0:7e:f6:
c9:44:d4:22:7b:6c:2a:98:56:41:43:50:df:08:6a:
b3:c4:60:10:d3:22:84:35:20:26:68:57:a3:91:32:
d2:45:d8:b1:47:c7:f7:4f:57:9b:be:2e:60:c7:aa:
07:be:d3:2a:e2:b9:cf:d4:f9:99:48:f1:84:9b:62:
02:55:7e:89:f0:b4:a7:5e:a5:cb:dd:bc:2d:e2:1f:
bf:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:66:91:67:BB:7B:54:85:6F:07:56:8C:B9:0C:82:2A:30:A8:4A:F5
X509v3 Authority Key Identifier:
keyid:9E:57:F8:43:B1:7F:FC:EA:A9:B8:63:65:81:FE:4D:54:E3:46:DD:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlf4Q7F__OqpuGNlgf5NVONG3cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:de:a4:29:b4:c6:65:bf:70:5d:bc:1a:08:23:a9:22:27:25:
3b:c5:f8:67:26:81:17:ca:6c:64:af:d5:84:80:17:52:38:57:
ed:56:cf:78:1a:81:6d:66:11:63:74:6e:7d:bd:93:bf:6b:5c:
a9:3d:f5:ef:db:cf:a4:b6:c9:16:cb:61:d6:31:c6:33:b4:99:
bc:0b:95:d1:b2:79:d5:c2:e9:48:89:85:52:ef:21:c4:93:51:
33:cf:56:4b:aa:e0:e5:80:e4:d7:4c:1e:f0:b2:87:d8:00:2d:
c0:2b:49:52:31:a4:06:52:4b:ec:4b:38:18:73:89:6c:5f:6c:
ae:07:6c:7c:c7:88:e6:92:a9:b9:31:ed:70:60:2a:fa:cd:a7:
7e:02:1e:b7:f9:eb:6e:3b:ff:28:9d:4f:6f:a7:e9:d7:e9:d9:
be:bd:a5:45:46:1b:1b:d3:51:84:66:5e:d5:e3:b6:0a:ab:65:
84:30:4f:57:f9:89:1a:94:38:25:6a:e0:f6:f6:54:23:99:a2:
ae:ea:bb:19:65:11:aa:33:2a:71:5f:2d:85:8f:c8:d6:09:f1:
9a:5e:8a:6b:94:f3:b2:94:56:b7:6f:a3:b9:b6:50:41:0b:bd:
25:bc:5d:1d:e7:5c:13:c5:a9:55:b6:7f:6e:4f:45:f3:46:a4:
96:16:d6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:48:35 2025 by rpki-client