Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft
File: NLqcIjJB64DivHGFO7fS5YKGvdM.mft (raw, json)
Hash identifier: cag6B8/AxG88ZUV51ZG0lJPGAPpNVz+EwOC6YjUoZE0=
Subject key identifier: F0:86:E5:73:01:93:2D:CA:06:AB:14:40:20:CC:74:19:8A:93:C9:F2
Authority key identifier: 34:BA:9C:22:32:41:EB:80:E2:BC:71:85:3B:B7:D2:E5:82:86:BD:D3
Certificate issuer: /CN=34ba9c223241eb80e2bc71853bb7d2e58286bdd3
Certificate serial: 019A72266C9EDDDE00CF8A808C07BFD948B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLqcIjJB64DivHGFO7fS5YKGvdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft
Manifest number: 1727
Signing time: Tue 11 Nov 2025 09:01:52 +0000
Manifest this update: Tue 11 Nov 2025 09:01:52 +0000
Manifest next update: Wed 12 Nov 2025 09:01:52 +0000
Files and hashes: 1: NLqcIjJB64DivHGFO7fS5YKGvdM.crl (hash: YqpW08pHG3uqjUYMM+GuMPWFvSaF3HriPlA1BzX+a0w=)
2: fLquejxATIKeZ_Omgco482qTWPw.roa (hash: kp7xeLg7/f6lZ1aJQqZqJ9ZG54b9dQgMXma+xU2orkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLqcIjJB64DivHGFO7fS5YKGvdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:6c:9e:dd:de:00:cf:8a:80:8c:07:bf:d9:48:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34ba9c223241eb80e2bc71853bb7d2e58286bdd3
Validity
Not Before: Nov 11 09:01:52 2025 GMT
Not After : Nov 12 09:01:52 2025 GMT
Subject: CN=f086e57301932dca06ab144020cc74198a93c9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fb:4a:38:d3:3d:b0:01:36:fc:03:10:5e:bd:
a1:79:91:21:39:3a:49:2e:e3:b9:78:a3:ba:ae:eb:
fb:60:23:51:89:03:c3:fe:02:d7:65:c3:2d:74:06:
d3:45:96:a8:4a:1b:8a:3b:9b:bf:68:93:ac:a7:00:
7e:1c:36:37:2c:c1:34:f3:dc:bd:95:6c:0b:2b:2f:
dc:f9:a7:64:61:e5:60:e0:2e:e9:9e:5d:82:e3:e7:
48:c8:85:a4:04:99:d4:eb:10:16:3d:bb:fe:8f:81:
11:27:c8:bc:d7:e2:2f:ab:89:3c:44:9e:1b:48:e9:
f4:b0:37:f2:45:a1:f0:65:0d:79:2c:42:5c:c4:e9:
63:a5:95:b4:db:d2:20:00:6f:a5:9d:f6:dd:4f:ae:
58:13:79:0b:a4:6c:c8:d0:35:d9:3b:f5:a4:b1:c4:
b1:6e:27:6c:00:ae:14:3d:ba:46:39:ab:bb:25:fa:
d8:80:ce:3a:84:1a:6e:a0:16:92:32:f1:41:ef:f9:
3b:b3:3f:3c:f3:2f:3d:06:42:da:99:10:57:0e:c8:
b6:59:56:01:1e:07:b2:ba:2b:5a:9e:ce:3d:7e:ee:
e5:15:29:ae:d3:6d:a2:3b:e6:b6:ae:cd:95:13:80:
f6:d6:13:27:0b:b1:70:a0:87:fd:09:b9:c4:0b:03:
8a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:86:E5:73:01:93:2D:CA:06:AB:14:40:20:CC:74:19:8A:93:C9:F2
X509v3 Authority Key Identifier:
keyid:34:BA:9C:22:32:41:EB:80:E2:BC:71:85:3B:B7:D2:E5:82:86:BD:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLqcIjJB64DivHGFO7fS5YKGvdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ec61-37ab-405b-a6c2-13ee4c8d3082/1/NLqcIjJB64DivHGFO7fS5YKGvdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:a0:79:af:b9:66:43:dc:0f:90:89:17:93:3e:b2:ad:d8:92:
03:05:b9:90:6e:28:17:35:45:68:ee:4c:ba:a0:04:16:23:0d:
8d:79:f9:49:9f:cf:ed:1d:9e:01:7d:81:65:ed:fb:dc:91:f2:
fb:c9:22:16:3e:32:62:54:3c:d2:aa:52:cd:37:0d:93:07:6a:
7e:be:49:67:e8:ba:26:78:6b:03:ef:cf:31:cf:f2:0a:79:f7:
4b:a6:1b:c1:12:ee:df:da:ae:b3:2e:15:93:72:d1:e5:b8:a9:
fd:1a:3f:b8:10:c6:da:7b:87:aa:14:ff:0d:22:d6:f5:56:a1:
7d:c7:72:11:fb:d3:b8:85:7e:b8:6b:d6:b2:38:cb:df:5e:74:
31:f8:9d:bb:d2:51:dd:60:84:05:fe:bc:0a:36:f3:5a:5f:da:
5b:e5:3a:62:34:63:64:18:93:48:b8:a7:e7:85:5b:65:df:b7:
22:4b:8e:fc:33:db:db:52:0a:71:8d:e7:48:e4:4a:db:4a:51:
72:38:98:8a:f9:63:03:ec:33:a0:5f:29:ce:bd:10:32:e0:0b:
68:26:bf:a8:f2:f1:bf:a4:48:5e:32:f1:d7:69:1d:c2:f9:ab:
40:79:20:a3:67:59:f7:99:b9:3c:28:99:52:1e:03:36:59:cc:
a4:c2:d1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:07 2025 by rpki-client