Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.mft
File: nlaYDUienFO8gp8-jWPTg_ONDeM.mft (raw, json)
Hash identifier: 8KJaZFshS0nj+TzesWGaVyRF+uhiR7sGpVL2v9LBEGQ=
Subject key identifier: 48:A3:E1:C3:E3:EE:8C:51:D4:4B:C8:ED:84:C0:DB:9D:AC:4B:23:58
Authority key identifier: 9E:56:98:0D:48:9E:9C:53:BC:82:9F:3E:8D:63:D3:83:F3:8D:0D:E3
Certificate issuer: /CN=9e56980d489e9c53bc829f3e8d63d383f38d0de3
Certificate serial: 01984A780501915C6BC19B5C79CE5431B2E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlaYDUienFO8gp8-jWPTg_ONDeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.mft
Manifest number: 155E
Signing time: Sun 27 Jul 2025 06:00:36 +0000
Manifest this update: Sun 27 Jul 2025 06:00:36 +0000
Manifest next update: Mon 28 Jul 2025 06:00:36 +0000
Files and hashes: 1: 5LKnYfYeN0M1IwSjOCfaAZydc0E.roa (hash: R6rY8mHoFXXwwf30CLdp4brLxdq1SUoGP6TPbyDWGN8=)
2: nlaYDUienFO8gp8-jWPTg_ONDeM.crl (hash: IbHwzjCC1tpn8BqG/Q4G+dd2ibm7s17/4HtkGIfnm34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlaYDUienFO8gp8-jWPTg_ONDeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:05:01:91:5c:6b:c1:9b:5c:79:ce:54:31:b2:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e56980d489e9c53bc829f3e8d63d383f38d0de3
Validity
Not Before: Jul 27 06:00:36 2025 GMT
Not After : Jul 28 06:00:36 2025 GMT
Subject: CN=48a3e1c3e3ee8c51d44bc8ed84c0db9dac4b2358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:23:ff:1c:0e:3e:d5:11:4e:54:a4:de:1f:0d:
81:cf:79:b4:86:70:27:bd:01:af:2c:e1:62:c6:14:
a0:e6:05:a6:75:6d:14:a3:2f:08:26:84:aa:6e:1d:
cd:09:98:71:c4:d5:e3:17:5a:64:3f:8b:52:00:e8:
cb:f6:85:b8:a9:89:82:01:ae:7a:f1:09:c4:50:ee:
e2:eb:d6:86:19:98:21:f2:61:a5:54:9b:3f:09:a7:
3e:e4:c4:89:bb:72:d3:12:35:cf:38:b5:37:5b:83:
7d:5c:62:34:e0:8f:c6:c8:13:a3:d3:9d:dc:15:fe:
9b:17:43:fa:90:94:6a:6d:d6:b5:e3:28:de:d4:10:
6a:b6:32:d6:5d:22:5d:2a:6d:65:4a:91:a8:29:af:
bd:bb:c6:7e:c7:be:ed:f3:6a:6b:d0:21:32:63:a1:
79:d4:c4:a8:ba:48:b7:cc:1d:a8:88:59:55:ea:32:
86:c3:e1:22:04:c1:e9:f0:fc:32:3d:90:f5:e1:88:
6b:c1:15:af:32:5f:22:0c:60:7c:28:4b:a7:32:49:
c5:f2:ae:64:b0:ec:e3:cd:f1:06:25:5e:db:a2:99:
9c:a0:d9:8b:ee:70:60:93:0f:8d:b7:8b:be:a1:e8:
59:14:30:0e:74:a3:46:1c:cc:dd:3c:ac:90:d8:ba:
d3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A3:E1:C3:E3:EE:8C:51:D4:4B:C8:ED:84:C0:DB:9D:AC:4B:23:58
X509v3 Authority Key Identifier:
keyid:9E:56:98:0D:48:9E:9C:53:BC:82:9F:3E:8D:63:D3:83:F3:8D:0D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlaYDUienFO8gp8-jWPTg_ONDeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:fc:9d:9c:80:27:7f:fc:71:fd:3b:14:85:f4:5c:3c:0c:0a:
f7:75:44:20:d0:ce:43:c4:6a:42:51:cc:b3:62:df:53:0a:5b:
33:e0:4a:04:2c:91:f2:c0:fc:05:17:3a:f0:00:83:7e:b9:ee:
d1:fc:32:d8:c6:d1:3a:5a:19:9c:36:af:41:c4:de:9d:9a:5f:
c6:d5:35:9c:f1:44:1a:aa:69:21:44:be:eb:f8:58:c0:bf:e0:
73:c6:8e:e9:6a:db:4b:c6:0c:eb:ea:50:0e:40:51:07:f1:c9:
6b:a3:e9:2c:2a:2a:b5:88:3f:3a:52:43:23:90:68:cd:ce:e7:
1a:88:51:68:74:97:cf:02:6c:46:b7:8d:54:36:58:bb:a9:15:
cf:f3:23:e4:ec:78:ab:28:7d:cb:f3:17:7c:d0:31:62:7a:31:
b5:05:7f:0a:f3:88:49:cb:4b:28:ca:96:c8:47:41:74:10:5d:
74:83:0b:03:33:ea:c9:1d:9c:93:8c:4a:b1:43:1f:4b:da:1f:
1e:c0:9b:94:4f:3e:8e:aa:63:24:df:3d:18:ef:38:f6:4a:79:
ed:c2:77:1a:5a:d2:38:a5:ae:cf:3d:cd:b5:00:df:8b:84:3e:
c6:e2:d4:b9:b6:45:54:aa:c3:06:6c:59:90:a1:c1:07:20:b7:
a8:41:87:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:37:20 2025 by rpki-client