Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
File: nksygbCOa17B_esNBEBSjtk03D8.mft (raw, json)
Hash identifier: NiTrtNCIBIUdWIUs9nFWlqxDAUn+pd5N8W7TJYbYm1I=
Subject key identifier: 18:57:D1:E4:86:A1:24:99:89:BE:A0:4F:2E:E2:33:A6:E6:24:9A:51
Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
Certificate issuer: /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Certificate serial: 01988BEAB21D63A8D26BB5343985D6B8C206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
Manifest number: 162E
Signing time: Fri 08 Aug 2025 23:01:10 +0000
Manifest this update: Fri 08 Aug 2025 23:01:10 +0000
Manifest next update: Sat 09 Aug 2025 23:01:10 +0000
Files and hashes: 1: L1HdFt_deyOuIyEh6ohLDMoi2Hk.roa (hash: 5OEmyz/JOCY7uzs6X4meQ1O5LJEXih2dkz+QsDhsQ6g=)
2: atuec3UTPwJqa2nbFVc6PceCm_U.roa (hash: mxjn4P2BAxt4/rhflGcv4gtLgmXNo6T8LNPaEGy8CeQ=)
3: kg9t18MET9vHkp7c3ZCFI-WKvIA.roa (hash: ATnWiMlDUB6UoUtR8mC5SAsRs5s+5t+PXg+EI7niqTU=)
4: lnxBICiuOhb0S2Ss6UKdeHcB0oo.roa (hash: hdI3xj2P7Sjw6pCwaS0Na+6UrppqSPkWbMvSGZ4mxkQ=)
5: nksygbCOa17B_esNBEBSjtk03D8.crl (hash: +q/9nANCKCn01WLhJ+S6sdBJzrNY4TAbNLX9pXK9hbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:b2:1d:63:a8:d2:6b:b5:34:39:85:d6:b8:c2:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Validity
Not Before: Aug 8 23:01:10 2025 GMT
Not After : Aug 9 23:01:10 2025 GMT
Subject: CN=1857d1e486a1249989bea04f2ee233a6e6249a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3b:9d:7c:2b:52:4f:ed:64:bd:54:4f:ef:18:
e1:7f:27:01:cf:f4:4e:17:9d:76:76:5f:cf:45:44:
72:e7:38:b9:2e:78:e7:66:92:c9:58:48:f7:44:a3:
f4:e6:40:69:3c:1b:27:37:26:53:b8:e0:b8:ab:78:
c0:38:e1:7f:92:84:ed:5a:2c:1a:95:22:bd:b3:ce:
d2:55:e1:d8:e7:d4:e8:2a:7e:5f:e5:78:df:34:b8:
d2:47:39:02:4f:92:42:ca:d6:fc:51:03:b1:fc:b7:
0b:58:66:4d:eb:fa:64:9b:75:1a:79:93:b9:97:ef:
fc:24:c5:f5:f3:e7:22:32:12:df:5d:25:0c:85:5e:
72:e8:3b:97:bc:5b:5b:f9:68:ae:68:52:07:dc:bd:
44:41:7c:dd:db:9f:b0:34:01:32:21:87:20:ee:bc:
30:72:a3:55:e8:0e:1a:20:8d:ac:19:e0:4b:38:f3:
41:33:c9:4f:fd:4b:ce:7c:e3:dd:79:74:a0:08:ef:
3b:58:32:fe:c1:dd:dd:ea:db:7a:b8:fe:c7:4a:5e:
27:c8:d9:53:10:d4:2e:a2:ea:d9:78:f0:4d:6a:1d:
bf:12:a3:4a:58:f4:62:2b:09:ee:99:c6:af:79:e3:
a8:84:e3:6c:19:46:b2:9b:82:bf:69:ba:54:82:5c:
a6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:57:D1:E4:86:A1:24:99:89:BE:A0:4F:2E:E2:33:A6:E6:24:9A:51
X509v3 Authority Key Identifier:
keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:6b:79:4b:d8:0a:c2:53:73:48:c5:12:31:d9:3e:8e:a2:c7:
95:78:93:ff:13:54:09:b7:15:51:09:04:54:3a:9f:49:43:f7:
07:a4:74:8f:2e:ca:0c:7b:21:fd:ff:e9:9a:77:4a:8a:68:9b:
b4:99:9f:0e:34:b2:09:41:b8:f9:ca:18:d9:1d:b6:fe:37:c5:
ef:3d:b6:c3:ad:64:b8:3f:14:69:cf:ab:b4:6b:f9:c9:2c:79:
24:d6:a5:2c:60:65:2b:30:bb:ee:e2:ac:dd:4b:56:fe:36:e8:
cf:28:13:3a:bf:d4:ac:48:02:65:12:d1:07:0e:fe:d9:6e:e4:
64:ab:9c:30:98:6e:5c:79:d0:e9:8a:62:31:b1:0c:ab:cb:3a:
1c:34:38:d9:7c:21:16:48:5e:24:7a:76:38:c6:a9:65:97:54:
5e:ee:89:7d:f2:92:26:09:38:58:d9:69:38:70:42:aa:76:00:
05:a1:31:34:6d:42:2d:e9:08:c6:37:4f:7f:3e:d5:97:a6:3b:
7c:c7:9c:21:8f:77:3a:02:6a:ac:cc:ad:32:2f:be:7f:08:48:
31:d3:fb:5d:21:f2:e0:fe:84:bc:17:86:85:d7:55:51:ad:8c:
09:fe:1e:c8:41:56:e4:bd:45:a9:4f:45:9b:2f:aa:28:30:3b:
50:fb:a0:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiL6rIdY6jSa7U0OYXWuMIGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNGIzMjgxYjA4ZTZiNWVjMWZkZWIwZDA0NDA1MjhlZDkz
NGRjM2YwHhcNMjUwODA4MjMwMTEwWhcNMjUwODA5MjMwMTEwWjAzMTEwLwYDVQQD
EygxODU3ZDFlNDg2YTEyNDk5ODliZWEwNGYyZWUyMzNhNmU2MjQ5YTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljudfCtST+1kvVRP7xjhfycBz/RO
F512dl/PRURy5zi5LnjnZpLJWEj3RKP05kBpPBsnNyZTuOC4q3jAOOF/koTtWiwa
lSK9s87SVeHY59ToKn5f5XjfNLjSRzkCT5JCytb8UQOx/LcLWGZN6/pkm3UaeZO5
l+/8JMX18+ciMhLfXSUMhV5y6DuXvFtb+WiuaFIH3L1EQXzd25+wNAEyIYcg7rww
cqNV6A4aII2sGeBLOPNBM8lP/UvOfOPdeXSgCO87WDL+wd3d6tt6uP7HSl4nyNlT
ENQuourZePBNah2/EqNKWPRiKwnumcaveeOohONsGUaym4K/abpUglymkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhX0eSGoSSZib6gTy7iM6bmJJpRMB8GA1UdIwQY
MBaAFJ5LMoGwjmtewf3rDQRAUo7ZNNw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGIt
NmIyZDQ2OTI0YzZmLzEvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGItNmIyZDQ2OTI0YzZm
LzEvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHGt5S9gK
wlNzSMUSMdk+jqLHlXiT/xNUCbcVUQkEVDqfSUP3B6R0jy7KDHsh/f/pmndKimib
tJmfDjSyCUG4+coY2R22/jfF7z22w61kuD8Uac+rtGv5ySx5JNalLGBlKzC77uKs
3UtW/jbozygTOr/UrEgCZRLRBw7+2W7kZKucMJhuXHnQ6YpiMbEMq8s6HDQ42Xwh
FkheJHp2OMapZZdUXu6JffKSJgk4WNlpOHBCqnYABaExNG1CLekIxjdPfz7Vl6Y7
fMecIY93OgJqrMytMi++fwhIMdP7XSHy4P6EvBeGhddVUa2MCf4eyEFW5L1FqU9F
my+qKDA7UPugyg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:01:06 2025 by rpki-client