Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
File: NlHOpaznf01_TdKC8Qq5yw7k0ew.mft (raw, json)
Hash identifier: FoYPbldWgQKmrFxDeoLUqdcWTnXLYz8/mALsEVpNb1Q=
Subject key identifier: 81:EA:1C:EA:7F:DD:06:5D:CD:97:AA:2B:97:34:B7:C3:52:44:75:B7
Authority key identifier: 36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC
Certificate issuer: /CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec
Certificate serial: 019A23D36861F5216CFF2CF8C43FCC4A5449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
Manifest number: 11F6
Signing time: Mon 27 Oct 2025 04:00:48 +0000
Manifest this update: Mon 27 Oct 2025 04:00:48 +0000
Manifest next update: Tue 28 Oct 2025 04:00:48 +0000
Files and hashes: 1: NlHOpaznf01_TdKC8Qq5yw7k0ew.crl (hash: ddZ/nEb7f4qmmq/5s+7I5A+4ZbpijuKb304k+/nnzCU=)
2: XPkovunJ2mYG9xru2HKfkrigcMA.roa (hash: ZBoNLDdsfMiH4Qvw9YL8Os7NUZ9E42iEu1OMEgsfl7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d3:68:61:f5:21:6c:ff:2c:f8:c4:3f:cc:4a:54:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3651cea5ace77f4d7f4dd282f10ab9cb0ee4d1ec
Validity
Not Before: Oct 27 04:00:48 2025 GMT
Not After : Oct 28 04:00:48 2025 GMT
Subject: CN=81ea1cea7fdd065dcd97aa2b9734b7c3524475b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:50:93:a2:85:d3:dd:a1:b6:fe:1c:5d:6f:47:
5f:cd:04:79:13:b9:f4:79:ae:5a:28:29:20:05:e2:
31:8e:71:0f:73:bf:7c:ba:01:55:b2:92:b4:68:e0:
03:d9:05:ad:4d:df:bb:18:fb:d6:74:8c:ab:6f:53:
8a:03:c9:e4:93:02:81:65:dd:88:0d:34:61:ba:fc:
dd:dc:b3:40:a0:23:0a:85:a5:00:05:d7:e9:b5:fb:
65:89:e9:ef:c2:ea:47:91:b8:aa:ee:ac:3d:83:7a:
5e:be:d2:03:34:9d:7b:bb:32:4d:c1:ee:06:c7:cf:
83:50:93:73:9c:df:0e:f3:70:b9:5a:bd:a0:99:2c:
db:3b:5e:d7:b7:05:88:bb:1b:af:c6:39:4a:08:43:
59:3c:6e:cc:48:02:03:7d:e9:1d:c2:19:f2:9d:31:
a8:38:34:5a:b1:cb:88:b6:13:e6:11:8d:62:ce:90:
dd:36:80:71:fa:02:68:4f:e9:74:6a:53:be:9b:50:
a6:80:9d:43:6c:1c:2b:44:db:8c:66:9b:52:c8:83:
8b:a4:24:82:a5:03:47:f5:e6:6c:9e:b6:d4:30:31:
59:9c:75:ca:e5:d9:d8:75:cc:65:fd:b2:66:41:c8:
54:49:21:5e:3b:e7:c8:69:2e:ef:86:a2:9c:fe:51:
0b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:EA:1C:EA:7F:DD:06:5D:CD:97:AA:2B:97:34:B7:C3:52:44:75:B7
X509v3 Authority Key Identifier:
keyid:36:51:CE:A5:AC:E7:7F:4D:7F:4D:D2:82:F1:0A:B9:CB:0E:E4:D1:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NlHOpaznf01_TdKC8Qq5yw7k0ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ac214b-3772-4810-9206-b92b094f3a3c/1/NlHOpaznf01_TdKC8Qq5yw7k0ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e1:fd:3f:b5:7d:83:7d:77:e0:cd:64:47:f3:19:9b:9f:38:
f1:b0:ac:69:ef:bc:c3:ea:9b:13:e2:05:d4:fe:6e:f1:a6:60:
d0:8d:eb:5a:6d:36:53:00:f8:6e:fc:c3:02:ca:0a:cf:62:e1:
48:f4:ae:0e:fc:68:5f:f5:ba:2f:d6:89:c7:60:d0:cd:67:d9:
13:a5:4f:8e:9a:b9:7a:51:aa:1b:24:68:b2:b3:5b:ca:3d:b8:
51:54:53:40:e3:d5:e4:15:5b:66:18:65:42:9d:d3:78:2c:fd:
28:ca:39:e9:ea:4f:61:c5:f1:f3:b8:34:90:b8:b5:bc:46:f7:
c9:57:19:55:ac:31:c5:fe:e6:dc:ea:78:ef:16:ba:a9:b3:d2:
ba:6f:17:18:ec:4b:dc:4b:ab:57:b1:e7:df:b4:0c:f3:a6:b4:
4a:8d:b6:4a:82:7f:bf:96:dd:44:62:77:01:af:05:57:8d:61:
20:c1:d1:20:bc:00:8e:5b:5e:84:84:de:4d:0f:c2:71:ed:e5:
0d:db:52:47:4d:d2:bb:2d:06:78:cf:0d:49:fe:69:49:f4:4e:
ed:d4:fc:f6:27:15:74:3a:28:d5:67:c7:d5:4c:d5:6f:7a:42:
a7:e1:ac:a8:85:04:d7:a5:5a:ba:1f:37:54:b7:d9:55:3b:28:
ec:86:b3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:19:37 2025 by rpki-client