Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
File: NLjV-ROFaLUssJNuK0yU93zleuw.mft (raw, json)
Hash identifier: uqW5lizS2PLxgLJ9tRQkZTBnv1au7FcAUup6jTsGUkY=
Subject key identifier: 55:2A:E7:F8:1C:5F:C0:92:72:EC:55:66:8C:29:17:FE:78:A5:A5:F2
Authority key identifier: 34:B8:D5:F9:13:85:68:B5:2C:B0:93:6E:2B:4C:94:F7:7C:E5:7A:EC
Certificate issuer: /CN=34b8d5f9138568b52cb0936e2b4c94f77ce57aec
Certificate serial: 019A7293580799D98FBFCCB73EF1E06B4706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
Manifest number: 1459
Signing time: Tue 11 Nov 2025 11:00:50 +0000
Manifest this update: Tue 11 Nov 2025 11:00:50 +0000
Manifest next update: Wed 12 Nov 2025 11:00:50 +0000
Files and hashes: 1: GRpxJM6uak1q4A4UBjGhlwT7Cps.roa (hash: wNBRbInhIrKHJa8W7MC+iDamgy4K7A7SioRTK7a6kK0=)
2: NLjV-ROFaLUssJNuK0yU93zleuw.crl (hash: Hg1BCydAFKm3gaXZvWD+FPPQgKiEzjqJdmvXzMlww2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:58:07:99:d9:8f:bf:cc:b7:3e:f1:e0:6b:47:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b8d5f9138568b52cb0936e2b4c94f77ce57aec
Validity
Not Before: Nov 11 11:00:50 2025 GMT
Not After : Nov 12 11:00:50 2025 GMT
Subject: CN=552ae7f81c5fc09272ec55668c2917fe78a5a5f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e8:ac:36:51:42:f7:3f:e7:b0:4c:93:cd:fc:
b4:54:05:e2:18:0d:01:64:17:aa:b6:2b:bf:0e:b6:
78:4b:cd:a8:8e:2b:11:89:4d:e3:c1:f0:da:62:ed:
c5:99:63:ab:24:d5:e4:53:2e:32:9a:a9:dc:58:79:
e6:7e:ff:b9:79:84:01:b8:1f:1b:ff:cd:b8:28:18:
41:ec:32:04:c0:a6:a6:09:ce:7b:48:65:e4:22:a2:
95:44:9b:35:e7:71:f8:69:0d:ac:ff:2b:21:64:21:
ec:42:9f:e8:62:d0:2a:4f:fa:3f:66:cd:91:5c:bb:
93:a1:f5:d1:6e:d2:7f:96:d5:1c:c7:de:cd:a6:a9:
19:5b:77:a5:1c:07:92:6c:99:96:f9:a9:d7:53:1d:
44:f4:cb:ea:58:42:4c:7c:91:25:2e:60:8d:65:8d:
37:08:a2:a7:52:85:ac:0f:a0:74:f5:59:b3:09:24:
df:75:0b:1c:fe:49:04:51:b6:88:b7:e9:05:4a:1e:
1a:13:92:12:51:0b:f6:53:26:dc:9e:c2:84:23:34:
d4:a8:c5:c7:41:23:34:6c:c1:e7:51:3e:d8:56:76:
66:3a:fe:4c:7d:08:e0:23:73:9c:fc:9d:a1:63:22:
8a:1b:bb:d2:1f:7c:27:49:2b:db:4a:06:b3:44:79:
56:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2A:E7:F8:1C:5F:C0:92:72:EC:55:66:8C:29:17:FE:78:A5:A5:F2
X509v3 Authority Key Identifier:
keyid:34:B8:D5:F9:13:85:68:B5:2C:B0:93:6E:2B:4C:94:F7:7C:E5:7A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e7:e5:49:f5:f9:97:3f:ed:70:13:71:b4:0c:2f:ee:9e:1c:
b5:1b:b6:24:b0:9d:62:47:66:07:dd:c3:6b:3b:87:27:d8:05:
0a:13:8d:09:7e:c1:b7:88:39:b3:0c:97:3b:54:45:02:0e:8a:
ec:9c:fb:59:ed:d9:b5:b8:07:b5:72:56:fb:e1:d0:e1:eb:72:
c2:00:79:d2:c1:8f:8b:5a:97:cf:d6:7c:f7:fd:0d:17:ee:3f:
41:17:5d:0b:54:3e:87:97:7b:b3:1e:f4:72:63:07:ef:34:5d:
a1:b9:7b:b7:53:e9:8b:93:f9:0e:e1:f9:dc:73:4c:90:8f:fe:
af:c3:98:f6:af:26:7a:03:4a:93:81:65:dd:69:2e:39:09:35:
f6:a0:e1:38:dc:07:a4:62:24:5d:04:8f:b6:32:33:bd:b7:13:
0d:9a:bc:fa:6c:56:0d:84:3d:10:ba:1e:40:4c:10:38:d4:48:
7c:a5:95:05:42:42:b8:8d:d1:b4:92:6e:ea:84:dc:34:6d:d7:
a8:f3:a0:0d:61:92:7a:bb:32:be:59:3b:f0:2d:9d:0a:6e:3f:
d8:b3:fd:57:d4:5b:7b:ab:b8:44:3c:ec:ee:73:c7:ad:9d:2d:
83:d2:9c:6f:08:fc:b8:ca:67:51:26:94:37:a5:61:e6:05:13:
a1:78:c4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:01 2025 by rpki-client