Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
File: nlUyAHdpaUSxYTwujJxgah4G63k.mft (raw, json)
Hash identifier: vcXprfEy7dfHXNHfb4doka6iBwVr48OSWhax/3guiSQ=
Subject key identifier: 60:AD:5C:12:0F:72:61:21:47:81:A2:39:D4:C3:B4:F1:59:8C:77:B9
Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Certificate serial: 019A5187996F6547494EBB8C1E86F762A9DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
Manifest number: 172D
Signing time: Wed 05 Nov 2025 01:00:32 +0000
Manifest this update: Wed 05 Nov 2025 01:00:32 +0000
Manifest next update: Thu 06 Nov 2025 01:00:32 +0000
Files and hashes: 1: MWa5Dj5_kmbgw0j6IBXQLJfi3UE.roa (hash: IKx6KdWK7MMrT+DuoPdaDD+mZCI7VV+oe8XMrptTZ1w=)
2: QjtWj02YBmI5Jv7YvgwRw2CvoyA.roa (hash: xzR/aqYGTG/UIUSP1rL50ozgA3zAN0ypP0J4BQa6rSk=)
3: T1_pchNqlq7DTDdnnhWMYLChBoU.roa (hash: 3peIpL8l/Rnx3wWmXa0H7Vz2+9XZpZaFvAX9xROlB/s=)
4: crvEgPTpcYjRSHsrYeLgXXEBKUk.roa (hash: 7eXEVTxEH/UTzDacXKPIjatCFJu/CB4kzr15IvQwXDk=)
5: hvCCVUZ3vm78utey9zVykeFfmZg.roa (hash: 8LKNeWR/ydRJi6I0838T1dU97Q8jY2cXv/vQVdAuDbQ=)
6: nlUyAHdpaUSxYTwujJxgah4G63k.crl (hash: fW5NLlMXMEBP4IdVJ83S8JPDU+hqhc/wYJPsBvQQk1I=)
7: oGavUwYGf9k8hmqppcV6OhAR0l8.roa (hash: xxSUypsCBzVEfCKjWpeRgbmsfcja4p6HlyrSFwzu1Eo=)
8: ofJM-BOf8d42dE82c9Ub9dgl42A.roa (hash: 5Kr1/Loqh5IoZ9YAjtlJKKCAtdpo/Xrh4HBNFY8lq58=)
9: qealtEqMLJg3Xy2LvZJt_teWrWQ.roa (hash: jUDg3WMKq6N0QAPZM0fHhLPl0mZhBgxm/pe95LVDZy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:99:6f:65:47:49:4e:bb:8c:1e:86:f7:62:a9:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Validity
Not Before: Nov 5 01:00:32 2025 GMT
Not After : Nov 6 01:00:32 2025 GMT
Subject: CN=60ad5c120f7261214781a239d4c3b4f1598c77b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:62:9a:7a:00:11:b4:0f:f5:48:5a:78:36:4b:
9b:16:67:0a:93:33:52:9e:6c:1c:39:9f:c9:46:2f:
e0:b5:2c:c0:85:80:89:65:0a:7e:7f:9e:ac:8e:a2:
67:e7:80:77:df:c9:a6:ec:75:4b:10:e9:f6:00:a7:
55:f6:ef:e0:07:c1:17:1c:b0:30:50:4f:e4:d9:4d:
a8:9b:2d:4a:31:83:5d:d1:01:68:f0:b8:54:65:d0:
a2:10:85:a2:ed:7b:6c:33:a5:c4:28:d4:a9:3c:8d:
9e:a2:2e:90:45:f8:92:33:d0:a2:29:61:36:1f:d9:
f8:b5:9d:f8:3b:d2:21:87:ac:83:90:c5:34:61:77:
d4:bb:5f:c7:59:e5:c9:0b:fe:37:18:59:5a:88:28:
ce:17:a3:fb:4c:d8:5a:2c:3a:c0:b4:99:97:ba:a9:
67:77:79:71:db:c9:68:fe:62:58:40:22:74:f6:5f:
ea:50:5f:aa:a4:c0:34:c5:38:ef:d0:a1:91:63:5f:
a0:9f:0d:3e:70:b3:00:fd:f4:6d:58:22:9a:f4:62:
fc:1b:52:53:7d:a8:c7:33:ad:14:ca:35:f0:ed:97:
9c:32:92:71:12:36:3e:c5:db:b4:68:31:29:8b:7f:
ad:9c:e7:3d:8e:0c:a5:6d:20:6c:68:3b:27:41:13:
44:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:AD:5C:12:0F:72:61:21:47:81:A2:39:D4:C3:B4:F1:59:8C:77:B9
X509v3 Authority Key Identifier:
keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:6e:d9:da:d5:38:92:73:a9:d6:01:27:d0:af:b4:6b:e3:32:
44:43:3e:72:e1:6b:48:e4:a3:a3:ed:7d:a3:7f:c5:85:a1:f6:
73:9a:c4:76:44:22:9e:e8:e1:93:d1:76:d6:50:66:9f:25:04:
68:29:29:c1:6d:88:be:23:2e:00:64:e2:6a:b8:38:75:7a:8c:
92:78:57:97:f8:c5:f9:33:5d:9e:51:bb:6c:fe:fc:18:a2:1c:
b2:7f:c1:90:86:8c:b7:81:2e:10:bb:b5:5f:35:10:03:98:e2:
7d:f9:47:34:93:5f:5b:5a:88:74:1f:e0:59:1f:2a:e0:55:08:
37:fc:ed:2f:62:9b:a1:f1:b1:bf:07:8a:0d:c2:89:0a:62:a2:
35:72:9b:2b:0a:7f:41:d6:e1:34:e6:ef:2a:cb:0e:0f:76:af:
e0:0f:5f:74:bf:6a:3f:03:ea:e6:11:26:50:f9:10:3c:4c:42:
57:f8:0a:ba:f9:2e:c6:8e:04:20:52:bf:e5:a3:66:62:a4:02:
eb:19:95:23:7e:90:63:a5:be:df:27:c2:42:45:d5:f1:db:35:
31:31:27:30:0d:9b:9b:42:3f:88:16:74:d1:5c:74:77:67:70:
43:9f:96:d9:f1:e4:18:2a:b3:c2:18:92:86:ad:b9:76:29:35:
1b:01:90:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:25 2025 by rpki-client