Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
File: nl1ITra0tWiaVEzwsTt--TJFfvE.mft (raw, json)
Hash identifier: euBHokG/YPEXasfCBOZGsElK+VB9mTancW0b0eGSubA=
Subject key identifier: 64:91:94:33:F3:1F:A4:D0:D6:EB:C6:52:90:2E:1E:10:C5:28:A9:1E
Authority key identifier: 9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1
Certificate issuer: /CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1
Certificate serial: 019A7293E1DF9FCF7B637B4D42B66EE4A01E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
Manifest number: 15D5
Signing time: Tue 11 Nov 2025 11:01:25 +0000
Manifest this update: Tue 11 Nov 2025 11:01:25 +0000
Manifest next update: Wed 12 Nov 2025 11:01:25 +0000
Files and hashes: 1: nl1ITra0tWiaVEzwsTt--TJFfvE.crl (hash: TYZWYGM0WjoI08R5XDSdriNgIzDToCEt3lvdj9fr1Hg=)
2: z9Zyukoi2uOHQdEe-vCyq46DaFo.roa (hash: aTR5i5ZEuCcMlVNNZ8y9Ak4ulLNXmEOMB0JCISwIQQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:e1:df:9f:cf:7b:63:7b:4d:42:b6:6e:e4:a0:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1
Validity
Not Before: Nov 11 11:01:25 2025 GMT
Not After : Nov 12 11:01:25 2025 GMT
Subject: CN=64919433f31fa4d0d6ebc652902e1e10c528a91e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:69:1b:fd:da:e8:9f:e4:3c:02:e2:a4:1e:5e:
73:77:54:1d:b1:c8:0a:5a:fe:fd:3b:40:d7:a4:3f:
c0:12:f6:c1:03:f5:72:02:5d:be:7d:0c:1e:8b:d3:
38:1d:84:9d:14:b1:1a:67:d9:b3:9e:fe:59:91:0d:
4c:4a:14:f9:f4:38:c0:52:19:d2:d8:ea:1b:11:73:
2e:d0:84:f9:0d:f1:fc:33:ed:33:94:f9:26:07:75:
0c:b1:a0:18:2f:30:2f:da:25:4e:e4:52:a8:03:33:
9d:aa:03:30:53:32:90:f1:2b:c0:bb:4f:71:58:51:
00:bb:ef:10:6f:fb:a4:bf:a7:73:0b:a4:5a:b8:80:
e4:bf:ec:b2:8d:7e:cc:93:30:66:43:de:26:96:77:
b2:a6:c2:29:08:04:3d:11:04:33:d6:36:53:a4:80:
34:f6:75:0c:c1:bb:d4:df:f9:79:34:4e:89:0f:35:
7f:57:9a:aa:ac:51:97:63:bf:74:b2:46:ba:9a:97:
a4:cb:54:ec:19:f6:7d:07:1a:9e:f9:a7:75:f5:7e:
dc:64:65:e1:31:e1:cd:42:ff:68:40:c5:fe:e5:f8:
e4:7f:f8:d0:e8:85:38:3b:4c:5d:0e:1e:2a:5d:af:
23:07:43:8b:cd:73:06:fd:33:73:fe:1d:67:59:fb:
41:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:91:94:33:F3:1F:A4:D0:D6:EB:C6:52:90:2E:1E:10:C5:28:A9:1E
X509v3 Authority Key Identifier:
keyid:9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:9d:09:72:c8:7f:52:fa:2f:ce:0e:ed:f7:12:7f:cf:38:02:
3d:cc:31:3f:6a:76:ba:00:92:ae:1a:3d:ab:a2:18:91:78:2a:
3d:43:41:aa:fa:14:18:52:1a:d6:9f:14:c3:f2:32:11:aa:0d:
31:cc:cd:dd:d7:15:f4:b0:aa:a1:4f:0b:2c:09:f3:2f:6e:1b:
78:02:68:65:f5:8f:17:9a:46:1a:d7:7e:c3:ef:00:65:46:aa:
e1:2d:17:8b:a1:82:89:dd:6b:06:58:70:d7:52:7a:df:78:ba:
a8:68:c8:ee:a2:bd:6e:7b:17:67:7e:27:a8:22:fe:10:c7:24:
87:ab:3d:45:1f:43:5d:40:b1:0f:8c:a0:18:2b:22:0d:68:f7:
6e:8d:68:14:97:31:82:18:b6:ba:54:e3:82:07:df:d3:09:76:
bd:c9:94:4d:39:ac:ba:36:b0:e2:aa:2d:05:e3:8e:d8:33:8d:
c4:cc:39:5b:37:d3:37:b6:7a:2b:08:86:bd:60:ad:f4:d1:54:
d7:5a:91:c3:4a:10:8f:93:ab:23:ce:23:6c:fa:1c:20:48:f6:
7c:f7:41:c4:93:88:ee:7e:3e:9f:16:b4:ac:74:10:b3:7c:a4:
6f:ae:02:21:1d:a8:f6:ed:f1:6c:fe:f1:a6:eb:ee:b4:07:d0:
58:95:7d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:28 2025 by rpki-client