Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
File: nlf4Q7F__OqpuGNlgf5NVONG3cw.mft (raw, json)
Hash identifier: tRFDdB8OrY6SBu/QQp15hv0NqWXKlYwac3ZKJQKH5CQ=
Subject key identifier: FC:AA:ED:4D:9C:FA:30:69:8F:6E:EF:E3:F4:0F:1B:E3:DF:45:CB:38
Authority key identifier: 9E:57:F8:43:B1:7F:FC:EA:A9:B8:63:65:81:FE:4D:54:E3:46:DD:CC
Certificate issuer: /CN=9e57f843b17ffceaa9b8636581fe4d54e346ddcc
Certificate serial: 019922FAAD3AB95918C3DD4F0770705EE844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlf4Q7F__OqpuGNlgf5NVONG3cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
Manifest number: 0CC6
Signing time: Sun 07 Sep 2025 07:01:17 +0000
Manifest this update: Sun 07 Sep 2025 07:01:17 +0000
Manifest next update: Mon 08 Sep 2025 07:01:17 +0000
Files and hashes: 1: IFXNgHuEN8ycsfhuA4dEpX7GYeY.roa (hash: 0NAgcHKOW4VLEuD8zIQn9OzSwjmjjTPr1tkjSBELdjk=)
2: nlf4Q7F__OqpuGNlgf5NVONG3cw.crl (hash: Jo6+V4BySL/wcP48TOnawVdD30HMvCb5nqkPJtiZ26M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlf4Q7F__OqpuGNlgf5NVONG3cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:ad:3a:b9:59:18:c3:dd:4f:07:70:70:5e:e8:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e57f843b17ffceaa9b8636581fe4d54e346ddcc
Validity
Not Before: Sep 7 07:01:17 2025 GMT
Not After : Sep 8 07:01:17 2025 GMT
Subject: CN=fcaaed4d9cfa30698f6eefe3f40f1be3df45cb38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:14:a6:3c:c7:ca:b1:7c:ea:35:83:59:7d:0d:
2e:58:e7:2f:6f:f8:a6:43:13:1c:41:47:fb:f5:99:
34:37:b2:77:43:53:c6:0a:a4:68:fa:36:92:2e:c4:
07:e2:4d:4c:59:7b:ea:64:e3:05:e0:6e:b4:15:af:
9d:2c:a3:1b:bb:ea:3b:a3:e7:74:38:e1:8c:3a:41:
1b:8c:a7:f0:86:4a:14:1c:d8:f4:56:23:da:6e:72:
8b:ab:6a:af:d8:eb:ac:eb:d3:fa:52:1f:e1:9a:27:
bd:0c:68:10:64:c3:4c:52:f7:84:70:75:bf:03:a6:
29:e5:34:dd:ee:d3:cf:51:8e:99:58:1d:18:ff:89:
36:de:46:b7:c4:fd:7d:ae:49:d2:29:7c:9f:f4:70:
26:b2:35:de:1f:56:c7:ff:f4:5b:30:d0:b5:ab:2b:
df:3e:f4:fe:0d:c3:27:33:b0:ec:9c:60:10:df:25:
12:e2:99:96:8c:74:2d:26:f4:4b:1b:f0:95:17:90:
bc:23:89:2e:53:da:71:02:1c:ec:01:94:39:8f:5e:
04:36:66:99:4d:ab:86:32:63:97:4b:bc:43:11:9d:
ef:f4:61:ed:5a:c9:08:78:3c:9d:75:84:62:7f:0b:
61:67:32:56:0b:40:d6:f4:7e:b9:68:a0:d0:26:fd:
2c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AA:ED:4D:9C:FA:30:69:8F:6E:EF:E3:F4:0F:1B:E3:DF:45:CB:38
X509v3 Authority Key Identifier:
keyid:9E:57:F8:43:B1:7F:FC:EA:A9:B8:63:65:81:FE:4D:54:E3:46:DD:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlf4Q7F__OqpuGNlgf5NVONG3cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d8:15:2e:97:f4:cb:9c:65:38:de:6a:fd:dc:52:87:2e:86:
26:74:6a:62:12:0d:93:79:f4:d8:39:1f:8d:5f:3c:cd:a9:c2:
64:02:41:19:98:92:be:80:20:c3:49:a2:24:11:15:93:3f:47:
fc:fd:d2:96:55:1f:a9:7a:ef:b4:e6:c8:e6:83:5d:9f:91:91:
8e:de:af:6b:25:5b:7a:17:5b:72:54:82:28:f0:66:39:33:f3:
ee:fe:85:04:c2:08:68:6f:ad:ad:b5:be:ee:e1:5a:ac:ad:6c:
62:23:30:be:b7:56:5c:a5:cb:ec:a2:c8:14:59:85:ec:e7:9f:
d4:d8:51:eb:be:5e:e6:17:bf:26:c9:51:d6:6a:af:bc:66:9f:
01:2d:08:3a:ed:5c:ba:15:ef:51:fe:4f:bf:9d:99:fe:1f:cb:
00:aa:32:2a:e2:ba:48:b5:d8:7d:5c:6d:d7:86:09:8c:34:5e:
fb:20:78:a0:96:ff:ce:a5:4c:af:e7:58:a6:3b:51:1f:b1:4b:
77:8b:cc:82:8f:7b:2c:18:85:c8:fb:21:68:2c:f7:fa:88:6f:
29:25:10:82:79:b8:39:f8:f2:1b:2b:94:ba:72:64:01:37:b3:
e1:6f:c9:2b:43:52:76:91:70:f9:35:c7:05:59:d2:cc:1c:28:
4b:3b:b5:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+q06uVkYw91PB3BwXuhEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNTdmODQzYjE3ZmZjZWFhOWI4NjM2NTgxZmU0ZDU0ZTM0
NmRkY2MwHhcNMjUwOTA3MDcwMTE3WhcNMjUwOTA4MDcwMTE3WjAzMTEwLwYDVQQD
EyhmY2FhZWQ0ZDljZmEzMDY5OGY2ZWVmZTNmNDBmMWJlM2RmNDVjYjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixSmPMfKsXzqNYNZfQ0uWOcvb/im
QxMcQUf79Zk0N7J3Q1PGCqRo+jaSLsQH4k1MWXvqZOMF4G60Fa+dLKMbu+o7o+d0
OOGMOkEbjKfwhkoUHNj0ViPabnKLq2qv2Ous69P6Uh/hmie9DGgQZMNMUveEcHW/
A6Yp5TTd7tPPUY6ZWB0Y/4k23ka3xP19rknSKXyf9HAmsjXeH1bH//RbMNC1qyvf
PvT+DcMnM7DsnGAQ3yUS4pmWjHQtJvRLG/CVF5C8I4kuU9pxAhzsAZQ5j14ENmaZ
TauGMmOXS7xDEZ3v9GHtWskIeDyddYRifwthZzJWC0DW9H65aKDQJv0skQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPyq7U2c+jBpj27v4/QPG+PfRcs4MB8GA1UdIwQY
MBaAFJ5X+EOxf/zqqbhjZYH+TVTjRt3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmxmNFE3Rl9fT3FwdUdObGdmNU5WT05HM2N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC83ZDBlZmUtNzA5ZC00ZDExLWI2OTIt
MGUyMzA4MDZiNTc5LzEvbmxmNFE3Rl9fT3FwdUdObGdmNU5WT05HM2N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC83ZDBlZmUtNzA5ZC00ZDExLWI2OTItMGUyMzA4MDZiNTc5
LzEvbmxmNFE3Rl9fT3FwdUdObGdmNU5WT05HM2N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXdgVLpf0
y5xlON5q/dxShy6GJnRqYhINk3n02DkfjV88zanCZAJBGZiSvoAgw0miJBEVkz9H
/P3SllUfqXrvtObI5oNdn5GRjt6vayVbehdbclSCKPBmOTPz7v6FBMIIaG+trbW+
7uFarK1sYiMwvrdWXKXL7KLIFFmF7Oef1NhR675e5he/JslR1mqvvGafAS0IOu1c
uhXvUf5Pv52Z/h/LAKoyKuK6SLXYfVxt14YJjDRe+yB4oJb/zqVMr+dYpjtRH7FL
d4vMgo97LBiFyPshaCz3+ohvKSUQgnm4OfjyGyuUunJkATez4W/JK0NSdpFw+TXH
BVnSzBwoSzu1dA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:53 2025 by rpki-client