Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
File: nlf4Q7F__OqpuGNlgf5NVONG3cw.mft (raw, json)
Hash identifier: 2rrrBF4bAiY/ssAkfoNGEyBTDuWX9ATKNGzgsziejvY=
Subject key identifier: E1:EF:0A:AC:CD:A4:D6:D3:31:92:1B:0F:2B:74:FD:E6:BF:00:FF:57
Authority key identifier: 9E:57:F8:43:B1:7F:FC:EA:A9:B8:63:65:81:FE:4D:54:E3:46:DD:CC
Certificate issuer: /CN=9e57f843b17ffceaa9b8636581fe4d54e346ddcc
Certificate serial: 01975D25FCA0FE670DDA4F6FA5E7570178C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlf4Q7F__OqpuGNlgf5NVONG3cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
Manifest number: 0BDB
Signing time: Wed 11 Jun 2025 04:00:59 +0000
Manifest this update: Wed 11 Jun 2025 04:00:59 +0000
Manifest next update: Thu 12 Jun 2025 04:00:59 +0000
Files and hashes: 1: IFXNgHuEN8ycsfhuA4dEpX7GYeY.roa (hash: 0NAgcHKOW4VLEuD8zIQn9OzSwjmjjTPr1tkjSBELdjk=)
2: nlf4Q7F__OqpuGNlgf5NVONG3cw.crl (hash: 4klapOuEPeIPcobVp5ZoTeVaCSRKYwNSiPolkFZRjts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlf4Q7F__OqpuGNlgf5NVONG3cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:25:fc:a0:fe:67:0d:da:4f:6f:a5:e7:57:01:78:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e57f843b17ffceaa9b8636581fe4d54e346ddcc
Validity
Not Before: Jun 11 04:00:59 2025 GMT
Not After : Jun 12 04:00:59 2025 GMT
Subject: CN=e1ef0aaccda4d6d331921b0f2b74fde6bf00ff57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c3:eb:6c:80:cf:e2:42:3f:fa:98:2a:4d:51:
af:a2:2c:e0:d1:e3:60:86:1e:82:18:2d:96:22:0a:
5a:e1:5d:ad:c1:20:b5:cb:d2:92:b5:11:e0:a1:3b:
62:d6:cb:bd:d6:60:f2:4a:34:dd:30:3a:d2:a9:f7:
62:ec:eb:dd:0d:8d:f7:2f:18:ee:f5:3e:9e:4f:53:
80:24:e9:bf:74:a8:51:59:aa:bf:ea:05:4c:99:73:
91:41:14:c9:c0:ea:69:d3:d9:28:c5:f6:ef:d7:a1:
b4:84:03:e9:d1:fe:b9:8c:da:75:e5:85:1a:c5:4d:
38:00:75:06:d8:bf:24:12:cd:e3:4d:c3:96:e8:3e:
c8:cb:3c:07:01:56:b8:26:14:df:84:73:f1:89:82:
47:39:cb:1a:2b:aa:98:cc:56:be:55:de:37:e4:bb:
c2:42:62:f1:90:66:7b:76:fb:0b:e0:45:10:e5:0d:
cb:0c:9a:a7:a9:bd:a0:60:93:c0:3d:3e:e1:db:af:
53:1f:f0:de:de:b3:4a:02:50:7f:d4:ab:76:8d:6e:
94:26:d2:88:71:f8:91:e6:0c:79:77:00:07:14:ac:
de:3b:c8:92:50:22:89:ad:fc:78:79:3c:04:4c:75:
5b:50:b2:dc:47:e9:2c:26:a0:db:1c:58:dd:fb:d0:
23:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:EF:0A:AC:CD:A4:D6:D3:31:92:1B:0F:2B:74:FD:E6:BF:00:FF:57
X509v3 Authority Key Identifier:
keyid:9E:57:F8:43:B1:7F:FC:EA:A9:B8:63:65:81:FE:4D:54:E3:46:DD:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlf4Q7F__OqpuGNlgf5NVONG3cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f7:ff:2d:06:cd:c2:c5:52:d3:70:ae:c4:c4:22:84:0b:a7:
c3:e4:67:07:6f:b4:31:22:0f:b7:ef:29:03:a5:f1:b7:ee:c8:
5f:83:93:42:39:c6:62:c9:9e:fd:48:cb:e0:b2:c9:a2:62:90:
b8:c9:d5:39:b9:31:d4:4a:3f:9a:9a:e8:5d:f6:6a:bb:f3:57:
e9:cb:22:26:00:f9:80:f5:ef:87:ff:b6:93:0c:0c:39:7a:92:
59:5c:f7:30:dc:fe:68:0f:ae:8f:bc:b3:fa:3b:51:73:19:45:
33:e7:55:d4:98:f5:d6:0a:cb:be:69:91:e0:8b:65:7d:cf:fb:
0c:bb:2b:35:f7:71:22:40:a9:3b:c5:3e:c6:75:ce:d2:8d:9d:
73:1d:90:52:01:2e:44:10:23:71:65:76:46:62:42:52:01:65:
20:f3:df:6d:eb:89:e8:26:32:c5:73:27:46:4f:4a:96:23:d4:
be:09:27:d7:eb:84:14:7a:8e:ed:a7:b2:1d:40:26:13:29:e1:
65:78:9d:a0:d9:f5:fd:b2:25:fe:68:da:55:f5:da:59:2c:af:
6a:86:a1:fd:01:90:a3:fd:02:30:5b:c7:69:44:eb:24:4f:d8:
6d:1a:e7:cf:c0:e4:48:0c:3f:84:59:10:de:6a:48:b0:19:be:
c0:2d:cd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 12:22:55 2025 by rpki-client