Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
File: nlUyAHdpaUSxYTwujJxgah4G63k.mft (raw, json)
Hash identifier: Wb6M6kcnVTyhzBSONDzAfW85N7tuYgBlkhWXtz7euPk=
Subject key identifier: 9F:B5:2B:66:38:75:EA:F2:3B:A2:F0:97:FD:83:8B:01:E1:51:83:31
Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Certificate serial: 019691BA29661DD9D4F874A8E62D74EB97CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
Manifest number: 153C
Signing time: Fri 02 May 2025 16:00:18 +0000
Manifest this update: Fri 02 May 2025 16:00:18 +0000
Manifest next update: Sat 03 May 2025 16:00:18 +0000
Files and hashes: 1: MWa5Dj5_kmbgw0j6IBXQLJfi3UE.roa (hash: IKx6KdWK7MMrT+DuoPdaDD+mZCI7VV+oe8XMrptTZ1w=)
2: QjtWj02YBmI5Jv7YvgwRw2CvoyA.roa (hash: xzR/aqYGTG/UIUSP1rL50ozgA3zAN0ypP0J4BQa6rSk=)
3: T1_pchNqlq7DTDdnnhWMYLChBoU.roa (hash: 3peIpL8l/Rnx3wWmXa0H7Vz2+9XZpZaFvAX9xROlB/s=)
4: crvEgPTpcYjRSHsrYeLgXXEBKUk.roa (hash: 7eXEVTxEH/UTzDacXKPIjatCFJu/CB4kzr15IvQwXDk=)
5: hvCCVUZ3vm78utey9zVykeFfmZg.roa (hash: 8LKNeWR/ydRJi6I0838T1dU97Q8jY2cXv/vQVdAuDbQ=)
6: nlUyAHdpaUSxYTwujJxgah4G63k.crl (hash: 2e/YyIvtaujq3XjP7Yg2/YdHldXxUj9jpXmtiLZkB6Y=)
7: oGavUwYGf9k8hmqppcV6OhAR0l8.roa (hash: xxSUypsCBzVEfCKjWpeRgbmsfcja4p6HlyrSFwzu1Eo=)
8: ofJM-BOf8d42dE82c9Ub9dgl42A.roa (hash: 5Kr1/Loqh5IoZ9YAjtlJKKCAtdpo/Xrh4HBNFY8lq58=)
9: qealtEqMLJg3Xy2LvZJt_teWrWQ.roa (hash: jUDg3WMKq6N0QAPZM0fHhLPl0mZhBgxm/pe95LVDZy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:ba:29:66:1d:d9:d4:f8:74:a8:e6:2d:74:eb:97:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Validity
Not Before: May 2 16:00:18 2025 GMT
Not After : May 3 16:00:18 2025 GMT
Subject: CN=9fb52b663875eaf23ba2f097fd838b01e1518331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a6:b2:af:93:6b:06:fd:d7:70:3a:ce:8e:82:
0c:ea:cf:a3:a8:f9:ce:ec:b1:87:a3:a6:df:13:fe:
97:38:01:68:f4:c9:da:0c:f8:37:eb:d1:f4:a6:3f:
c7:04:12:da:eb:cf:a4:bf:02:ef:d3:73:03:c0:cd:
f3:9a:9e:ab:e8:2b:11:79:55:00:71:36:cd:5d:14:
bb:e8:30:4b:4f:b6:18:67:fb:1c:fd:d5:cc:6c:69:
60:04:f4:22:50:c2:27:1e:e5:09:42:2e:3a:ed:bf:
a6:1d:45:a8:c7:1f:56:44:10:9b:bb:d1:bc:1b:ea:
b9:05:9e:48:5f:84:26:1c:db:fd:e1:b7:00:85:1e:
0c:2e:c4:ea:e9:f0:4c:6d:6b:c5:3e:b0:98:5f:fe:
56:96:78:56:cc:db:aa:cf:ef:9b:33:04:f0:47:02:
3d:07:03:c2:1e:25:c2:4d:a0:4a:05:a4:b0:d6:02:
e3:25:3d:1f:79:c9:ef:31:f7:3c:ad:b0:ff:9c:bc:
97:53:92:8d:26:2f:4b:f7:f7:16:98:15:69:d8:dc:
ec:50:b3:cd:a0:fb:dc:15:03:03:8d:8d:4b:0e:51:
c3:9e:04:96:f1:36:1f:aa:fb:86:df:dc:41:9b:97:
fb:f5:40:7e:ae:b2:77:73:4e:41:db:2e:bc:4b:ad:
66:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B5:2B:66:38:75:EA:F2:3B:A2:F0:97:FD:83:8B:01:E1:51:83:31
X509v3 Authority Key Identifier:
keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:67:be:5f:9c:bf:20:68:c4:a3:89:d5:a3:b4:60:ec:49:e6:
f5:b7:af:2b:43:ca:0e:de:0b:96:62:47:51:c1:9c:0d:f1:fe:
ee:ae:27:77:f9:32:64:b3:6a:4f:19:0d:8e:9c:85:bd:52:7a:
de:ee:f9:4b:9d:80:fe:55:8f:be:7d:e6:c5:ee:16:f7:a0:8f:
e9:4d:42:1c:dc:82:3a:d9:48:4a:f7:62:77:71:ac:07:60:b1:
de:db:9d:f0:f8:4e:0b:e7:b7:73:69:16:2c:1a:21:22:f6:fc:
08:7c:72:82:69:80:7c:8b:9e:6b:43:44:bb:fd:2e:c8:37:7d:
a6:2f:06:52:9f:6a:f8:a1:9c:c5:a2:30:f3:ac:25:b2:74:3d:
44:fb:64:01:f0:44:ff:5e:fa:d1:9a:fc:ab:50:43:b3:a3:5a:
cc:c3:95:d7:bb:2a:0e:46:10:96:09:5a:75:e2:2f:bf:65:2b:
94:16:6d:6e:4b:6c:5c:e6:78:14:72:af:11:9b:6e:cd:9f:ab:
74:67:f8:93:41:36:f5:a4:1d:49:de:ae:9a:d9:16:92:90:0d:
0c:6c:83:d0:ed:f9:ec:ee:42:26:93:49:9b:5a:d9:42:f1:94:
68:71:99:3e:a5:99:88:c1:7d:ce:d3:34:82:bf:a4:80:a6:a0:
b9:bb:d8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:43:53 2025 by rpki-client