Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
File: NlHOpaznf01_TdKC8Qq5yw7k0ew.mft (raw, json)
Hash identifier: KItjx2kgRxAWmJScyvUCA7Tbd1WlUxCfp9VWgtT3RKI=
Subject key identifier: 91:DF:76:2C:96:5A:FF:40:FF:AD:CF:74:81:13:5A:B1:E2:D2:58:2F
Authority key identifier: 36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC
Certificate issuer: /CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec
Certificate serial: 0199364A068CC572BEF221092D9C62691AD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
Manifest number: 117B
Signing time: Thu 11 Sep 2025 01:00:44 +0000
Manifest this update: Thu 11 Sep 2025 01:00:44 +0000
Manifest next update: Fri 12 Sep 2025 01:00:44 +0000
Files and hashes: 1: NlHOpaznf01_TdKC8Qq5yw7k0ew.crl (hash: ICJqdDZB+nhYNA6GlwYk+Ta3TmbIuUYwk3e0Hj9orRg=)
2: XPkovunJ2mYG9xru2HKfkrigcMA.roa (hash: ZBoNLDdsfMiH4Qvw9YL8Os7NUZ9E42iEu1OMEgsfl7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:4a:06:8c:c5:72:be:f2:21:09:2d:9c:62:69:1a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec
Validity
Not Before: Sep 11 01:00:44 2025 GMT
Not After : Sep 12 01:00:44 2025 GMT
Subject: CN=91df762c965aff40ffadcf7481135ab1e2d2582f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e8:b1:50:42:b4:b1:ea:02:07:b5:18:fc:ea:
62:81:72:d0:76:e9:d0:43:ea:2d:cb:48:d6:a1:fa:
9c:a9:7d:67:f4:c0:a5:89:04:11:a7:4b:f3:8a:b3:
30:b6:ef:53:8c:80:75:d4:99:ba:32:66:d7:58:f2:
1c:4e:d2:a6:fc:77:b7:df:69:07:a2:df:ad:d5:85:
df:84:14:8a:b6:63:84:a1:58:4b:fa:ba:e3:a4:18:
21:dd:d9:02:a8:f2:2a:ed:ae:69:99:af:52:ee:5e:
30:4b:a2:a9:77:27:43:3c:46:e7:8f:68:be:b5:7b:
7a:e2:b2:59:0a:69:ca:bf:ca:05:f7:c5:5b:d7:d8:
a7:c0:fb:34:9e:cc:18:b4:d3:b0:70:db:f5:90:c8:
66:24:04:d1:ed:61:d4:a0:f4:2b:26:2a:c4:04:91:
26:d7:da:31:e4:d4:5a:e1:14:a5:19:48:16:e4:cb:
78:eb:f9:a6:6c:26:c1:21:e3:35:3e:e3:ae:c4:08:
4b:a6:c5:a7:43:4f:87:25:4d:20:27:57:60:7b:1d:
47:24:0d:86:33:4e:ea:5a:84:d4:c5:7a:9b:24:07:
c1:94:9e:9a:7f:9f:85:a8:fd:cc:55:d5:c9:3f:5d:
8a:49:b8:1d:42:b8:2b:2c:62:3d:3d:96:19:a0:c0:
60:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DF:76:2C:96:5A:FF:40:FF:AD:CF:74:81:13:5A:B1:E2:D2:58:2F
X509v3 Authority Key Identifier:
keyid:36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:de:bc:af:d2:65:c2:65:56:1f:9b:9e:39:77:e5:c1:99:6b:
99:79:3f:09:47:d1:a0:e2:5c:74:03:84:a9:9a:8f:35:f8:30:
2d:d6:0f:23:2f:28:41:a0:1e:c0:d3:0e:06:0c:33:92:2b:6b:
d3:af:3b:d8:eb:c0:c9:65:5c:95:02:12:eb:58:ad:a0:de:4d:
28:44:1b:d2:bf:47:54:98:7c:4a:c1:4e:e0:7d:26:92:5a:fc:
a4:4f:53:44:9a:73:5f:7f:c4:26:27:d8:16:0f:ed:38:f8:26:
98:a8:a1:1a:99:d8:42:fc:ef:aa:43:ee:66:7b:eb:1f:78:dd:
5d:6e:e4:d8:19:9d:0c:60:fc:b4:1a:85:dc:3b:4e:6d:ac:24:
d1:19:e8:5a:a8:05:2f:67:c1:bf:00:d9:80:71:04:11:ba:1a:
a8:65:2f:72:17:83:55:41:5e:ad:cb:63:0d:1f:82:ec:3c:81:
03:60:44:b5:bd:08:8a:0f:f1:91:d8:ca:0c:df:1e:49:90:61:
27:ed:e7:07:79:c8:25:f3:56:49:76:20:98:1b:fa:0c:3a:87:
4b:10:db:bb:d3:13:5b:d6:42:c1:bd:5c:54:08:ee:71:6e:af:
3c:cc:8d:ec:f2:13:e0:4a:62:47:4c:15:39:58:57:7f:7b:f0:
3e:ea:d0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 08:02:08 2025 by rpki-client