Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
File: nlUyAHdpaUSxYTwujJxgah4G63k.mft (raw, json)
Hash identifier: A1m4Lck0jA3fpzNJwOuX/Og6U8Q1x0iLrn+3++55i3k=
Subject key identifier: 5A:C6:F1:F7:A1:7F:F2:22:F2:69:E6:09:86:D1:D8:1C:0D:5E:36:0E
Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Certificate serial: 01988F8FD95CD26DA8CDFF8FD4AAC8DC04D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
Manifest number: 1644
Signing time: Sat 09 Aug 2025 16:00:25 +0000
Manifest this update: Sat 09 Aug 2025 16:00:25 +0000
Manifest next update: Sun 10 Aug 2025 16:00:25 +0000
Files and hashes: 1: MWa5Dj5_kmbgw0j6IBXQLJfi3UE.roa (hash: IKx6KdWK7MMrT+DuoPdaDD+mZCI7VV+oe8XMrptTZ1w=)
2: QjtWj02YBmI5Jv7YvgwRw2CvoyA.roa (hash: xzR/aqYGTG/UIUSP1rL50ozgA3zAN0ypP0J4BQa6rSk=)
3: T1_pchNqlq7DTDdnnhWMYLChBoU.roa (hash: 3peIpL8l/Rnx3wWmXa0H7Vz2+9XZpZaFvAX9xROlB/s=)
4: crvEgPTpcYjRSHsrYeLgXXEBKUk.roa (hash: 7eXEVTxEH/UTzDacXKPIjatCFJu/CB4kzr15IvQwXDk=)
5: hvCCVUZ3vm78utey9zVykeFfmZg.roa (hash: 8LKNeWR/ydRJi6I0838T1dU97Q8jY2cXv/vQVdAuDbQ=)
6: nlUyAHdpaUSxYTwujJxgah4G63k.crl (hash: SChtylwYRrVxyqxl7/4iSiv4xXQ2RXHRpg6yZRA7acs=)
7: oGavUwYGf9k8hmqppcV6OhAR0l8.roa (hash: xxSUypsCBzVEfCKjWpeRgbmsfcja4p6HlyrSFwzu1Eo=)
8: ofJM-BOf8d42dE82c9Ub9dgl42A.roa (hash: 5Kr1/Loqh5IoZ9YAjtlJKKCAtdpo/Xrh4HBNFY8lq58=)
9: qealtEqMLJg3Xy2LvZJt_teWrWQ.roa (hash: jUDg3WMKq6N0QAPZM0fHhLPl0mZhBgxm/pe95LVDZy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:8f:d9:5c:d2:6d:a8:cd:ff:8f:d4:aa:c8:dc:04:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Validity
Not Before: Aug 9 16:00:25 2025 GMT
Not After : Aug 10 16:00:25 2025 GMT
Subject: CN=5ac6f1f7a17ff222f269e60986d1d81c0d5e360e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:10:eb:d1:eb:dc:8c:8a:29:47:22:4c:a7:ba:
13:c7:1c:a3:15:ce:3b:fe:2c:a3:6d:53:11:78:db:
48:78:bd:8a:cd:99:93:b8:53:a6:70:8b:7b:31:c4:
5b:4a:12:97:2e:2b:96:89:8f:c2:2b:db:9f:25:f1:
2a:8f:0f:7f:c8:54:01:e6:0a:93:26:50:87:81:5e:
72:75:08:cc:29:1a:64:39:5d:2a:55:7b:7d:4b:ac:
75:54:bc:b0:57:67:68:6c:d8:34:19:95:24:e1:e9:
10:7a:5f:5b:ae:78:fb:d0:1f:b9:75:ee:86:ad:42:
c7:23:19:b7:9b:c8:dc:d0:7c:a7:94:6b:97:ef:c4:
06:f5:12:7a:42:78:c5:40:53:b3:54:88:30:98:4f:
4f:58:1d:1e:a0:a3:91:c1:a4:6c:60:24:93:9b:67:
46:2b:ba:bb:5b:69:fc:e2:80:06:e8:11:08:53:6f:
02:a4:59:a8:e5:a9:62:b3:0a:a5:1c:86:98:71:e5:
51:ee:5d:7d:83:2d:50:3f:9e:70:07:cd:b7:f7:6a:
22:ad:1a:94:49:b3:3d:c4:c3:da:d0:e9:2d:e6:b6:
15:65:e2:81:1c:f8:1b:08:88:fd:6e:4b:98:05:24:
f9:1d:e0:ac:d1:81:b9:02:07:5d:4a:76:0c:6a:bb:
dc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C6:F1:F7:A1:7F:F2:22:F2:69:E6:09:86:D1:D8:1C:0D:5E:36:0E
X509v3 Authority Key Identifier:
keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:33:9a:82:98:e6:f8:a8:04:79:19:50:64:65:9f:2d:00:ae:
a0:59:f1:a1:51:1e:2f:8f:15:2a:14:c0:22:ae:28:41:3c:8e:
4a:f7:04:44:50:92:0d:fd:df:69:03:da:9c:15:5f:b5:10:b6:
fc:86:0b:ff:6b:45:f9:b3:fe:07:e2:10:50:83:fe:50:6b:ab:
c0:52:b7:8b:fb:3d:e7:5c:4f:26:e4:5e:66:38:a5:0e:dc:8d:
65:2c:64:ff:b4:e2:91:dc:bf:7a:fb:f9:02:7e:22:e7:37:14:
93:1a:34:dc:4c:df:f0:ea:96:dd:5e:9a:23:b0:ac:45:f4:8a:
e5:bf:38:05:9a:ab:f2:f0:72:8f:9b:ad:ef:15:3f:02:90:a5:
f9:00:e8:d0:23:3a:1b:78:bb:23:62:22:fe:60:81:1b:a0:8c:
16:7d:df:77:88:11:21:de:e5:ad:c3:43:f2:69:3f:ba:66:e0:
09:9c:76:ab:fd:dd:9b:9a:f5:18:95:6f:12:19:0b:ae:8c:90:
60:37:74:c6:b4:5b:fe:db:27:9f:a2:f9:64:54:a9:19:72:93:
e8:6b:58:33:26:e3:29:7e:24:5a:e9:39:9d:f6:73:ca:41:12:
7b:1f:f4:1a:8b:4f:92:3f:2e:78:48:a7:55:2c:5d:15:f8:fb:
a6:75:f2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:21:07 2025 by rpki-client