Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft
File: nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft (raw, json)
Hash identifier: gUnONidMk7e1oZ0AvseVjpQOKaF9JLDfrKZr6FvHTPg=
Subject key identifier: 9E:4C:4F:62:8C:15:CC:21:37:FB:22:DD:DE:E0:E8:F1:64:56:15:D4
Authority key identifier: 9E:50:5F:2E:67:A1:E6:04:B3:F9:63:CE:4C:36:7D:19:58:BD:4B:78
Certificate issuer: /CN=9e505f2e67a1e604b3f963ce4c367d1958bd4b78
Certificate serial: 01988B7D491AB8328EFD4C365CA7C10BC161
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft
Manifest number: 1626
Signing time: Fri 08 Aug 2025 21:01:40 +0000
Manifest this update: Fri 08 Aug 2025 21:01:40 +0000
Manifest next update: Sat 09 Aug 2025 21:01:40 +0000
Files and hashes: 1: 9v5VLNQmHUC6c_AtiguXiv9VBlw.roa (hash: iNy4HwSBG8Jz28fsrZBO8bxra5HKthytWN8pQ51S61o=)
2: nlBfLmeh5gSz-WPOTDZ9GVi9S3g.crl (hash: Jmfu+F76vTWEw/+ZxRHdHMmPv27eMCSvBgtUq6DAdlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7d:49:1a:b8:32:8e:fd:4c:36:5c:a7:c1:0b:c1:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e505f2e67a1e604b3f963ce4c367d1958bd4b78
Validity
Not Before: Aug 8 21:01:40 2025 GMT
Not After : Aug 9 21:01:40 2025 GMT
Subject: CN=9e4c4f628c15cc2137fb22dddee0e8f1645615d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:55:aa:6f:da:b6:3e:49:c6:48:b7:8b:31:7b:
5f:a6:0e:de:58:3f:73:3b:03:23:ad:f7:86:50:d0:
ae:ba:0b:a7:e3:78:81:26:ee:60:53:5f:41:59:31:
65:fc:b4:d8:19:38:0e:a7:71:0b:31:ea:06:38:72:
da:5f:32:6f:79:ae:0e:73:e9:4e:5d:f3:8e:e0:7a:
5a:c2:e4:23:0f:6d:80:a5:70:1c:5c:88:9e:a9:c1:
af:e5:e7:b2:a6:4b:72:44:1e:35:3a:67:de:bb:bb:
c8:83:e5:97:78:7f:be:b6:d3:55:9b:18:23:74:df:
52:06:70:b5:33:7c:74:fe:87:27:d3:bb:f3:5a:48:
af:6a:03:fe:f7:32:9c:d5:bc:97:b2:75:37:d6:6b:
0f:e8:a8:0b:ef:66:89:b3:63:a4:0b:f5:65:58:3b:
9f:b0:b2:81:59:e6:44:53:d5:21:5d:73:f4:cf:4e:
ad:6b:ed:e9:95:4e:38:41:3b:ef:0e:ca:09:0b:80:
51:31:93:b2:47:b7:2d:22:e3:a4:7d:61:2c:50:07:
72:16:46:73:7a:5e:6e:e0:41:76:fa:ae:9f:2e:b5:
fb:55:a4:1e:f1:1f:30:a3:97:fa:0a:0c:0b:59:a0:
98:01:c3:97:b7:5b:2d:74:1d:9e:e2:d5:e7:14:ff:
34:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4C:4F:62:8C:15:CC:21:37:FB:22:DD:DE:E0:E8:F1:64:56:15:D4
X509v3 Authority Key Identifier:
keyid:9E:50:5F:2E:67:A1:E6:04:B3:F9:63:CE:4C:36:7D:19:58:BD:4B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:59:a7:9d:75:f1:75:f5:79:3b:8b:60:0a:2e:6b:45:f4:15:
e2:f9:8b:c2:94:82:f3:1b:97:99:f4:91:54:65:16:09:83:db:
69:7c:99:29:6d:9a:f0:cc:20:9f:85:7a:17:c9:9f:90:d2:ff:
48:e8:ae:ad:5e:ab:80:d7:60:06:7a:c5:14:29:0f:24:50:7f:
38:a5:07:45:42:43:a7:d2:f8:2a:db:e0:50:1d:5f:56:d6:c9:
37:03:df:0f:9e:d4:f1:76:bb:7b:41:a6:2c:8f:8e:38:e0:5b:
67:13:cf:ea:50:c6:58:74:d6:89:ef:c4:7d:17:e3:7d:de:5b:
e7:d6:b2:30:c8:56:24:7d:f6:1a:2b:17:dc:b6:91:ee:07:91:
11:2a:6f:eb:44:b9:04:45:12:38:cc:6b:f5:d6:30:70:2c:cd:
70:25:fd:d2:e1:86:df:4d:f5:30:2b:a4:4c:9b:18:a5:b6:b7:
64:11:79:3f:ef:52:22:e7:45:2c:ad:86:17:bc:63:d1:09:74:
d4:10:e4:30:b3:dc:87:15:45:a2:2a:8c:86:2e:70:c0:57:23:
3a:57:b2:3f:44:7c:5f:82:a6:63:6d:51:1a:11:0a:a5:f1:93:
65:2c:6e:04:ce:da:dd:0f:0e:9f:b1:88:2a:ba:62:d7:e5:e4:
8a:58:db:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLfUkauDKO/Uw2XKfBC8FhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNTA1ZjJlNjdhMWU2MDRiM2Y5NjNjZTRjMzY3ZDE5NThi
ZDRiNzgwHhcNMjUwODA4MjEwMTQwWhcNMjUwODA5MjEwMTQwWjAzMTEwLwYDVQQD
Eyg5ZTRjNGY2MjhjMTVjYzIxMzdmYjIyZGRkZWUwZThmMTY0NTYxNWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1Wqb9q2PknGSLeLMXtfpg7eWD9z
OwMjrfeGUNCuugun43iBJu5gU19BWTFl/LTYGTgOp3ELMeoGOHLaXzJvea4Oc+lO
XfOO4HpawuQjD22ApXAcXIieqcGv5eeypktyRB41Omfeu7vIg+WXeH++ttNVmxgj
dN9SBnC1M3x0/ocn07vzWkivagP+9zKc1byXsnU31msP6KgL72aJs2OkC/VlWDuf
sLKBWeZEU9UhXXP0z06ta+3plU44QTvvDsoJC4BRMZOyR7ctIuOkfWEsUAdyFkZz
el5u4EF2+q6fLrX7VaQe8R8wo5f6CgwLWaCYAcOXt1stdB2e4tXnFP80MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ5MT2KMFcwhN/si3d7g6PFkVhXUMB8GA1UdIwQY
MBaAFJ5QXy5noeYEs/ljzkw2fRlYvUt4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmxCZkxtZWg1Z1N6LVdQT1REWjlHVmk5UzNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9mYjc4NjQtNTc5NS00MjA4LWFiZTAt
MDg1NDI0NTRkMTZiLzEvbmxCZkxtZWg1Z1N6LVdQT1REWjlHVmk5UzNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9mYjc4NjQtNTc5NS00MjA4LWFiZTAtMDg1NDI0NTRkMTZi
LzEvbmxCZkxtZWg1Z1N6LVdQT1REWjlHVmk5UzNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb1mnnXXx
dfV5O4tgCi5rRfQV4vmLwpSC8xuXmfSRVGUWCYPbaXyZKW2a8Mwgn4V6F8mfkNL/
SOiurV6rgNdgBnrFFCkPJFB/OKUHRUJDp9L4KtvgUB1fVtbJNwPfD57U8Xa7e0Gm
LI+OOOBbZxPP6lDGWHTWie/EfRfjfd5b59ayMMhWJH32GisX3LaR7geRESpv60S5
BEUSOMxr9dYwcCzNcCX90uGG3031MCukTJsYpba3ZBF5P+9SIudFLK2GF7xj0Ql0
1BDkMLPchxVFoiqMhi5wwFcjOleyP0R8X4KmY21RGhEKpfGTZSxuBM7a3Q8On7GI
Krpi1+Xkiljbog==
-----END CERTIFICATE-----
Generated at Sat Aug 9 02:45:34 2025 by rpki-client