Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
File: nlUyAHdpaUSxYTwujJxgah4G63k.mft (raw, json)
Hash identifier: HxdD24aK7vVoNVPRk3/oibngjjr7psCTzGWSJdpmWuc=
Subject key identifier: 7E:48:42:43:FA:38:E1:00:62:99:54:39:9B:D6:7D:D9:96:29:CC:20
Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Certificate serial: 0197662951C4875493532DA00E0DB432CC7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
Manifest number: 15AA
Signing time: Thu 12 Jun 2025 22:01:13 +0000
Manifest this update: Thu 12 Jun 2025 22:01:13 +0000
Manifest next update: Fri 13 Jun 2025 22:01:13 +0000
Files and hashes: 1: MWa5Dj5_kmbgw0j6IBXQLJfi3UE.roa (hash: IKx6KdWK7MMrT+DuoPdaDD+mZCI7VV+oe8XMrptTZ1w=)
2: QjtWj02YBmI5Jv7YvgwRw2CvoyA.roa (hash: xzR/aqYGTG/UIUSP1rL50ozgA3zAN0ypP0J4BQa6rSk=)
3: T1_pchNqlq7DTDdnnhWMYLChBoU.roa (hash: 3peIpL8l/Rnx3wWmXa0H7Vz2+9XZpZaFvAX9xROlB/s=)
4: crvEgPTpcYjRSHsrYeLgXXEBKUk.roa (hash: 7eXEVTxEH/UTzDacXKPIjatCFJu/CB4kzr15IvQwXDk=)
5: hvCCVUZ3vm78utey9zVykeFfmZg.roa (hash: 8LKNeWR/ydRJi6I0838T1dU97Q8jY2cXv/vQVdAuDbQ=)
6: nlUyAHdpaUSxYTwujJxgah4G63k.crl (hash: m4LFLn8oHHLkD9Vl1G6THwsgos7Pz5QpqLjZ36Pt9fI=)
7: oGavUwYGf9k8hmqppcV6OhAR0l8.roa (hash: xxSUypsCBzVEfCKjWpeRgbmsfcja4p6HlyrSFwzu1Eo=)
8: ofJM-BOf8d42dE82c9Ub9dgl42A.roa (hash: 5Kr1/Loqh5IoZ9YAjtlJKKCAtdpo/Xrh4HBNFY8lq58=)
9: qealtEqMLJg3Xy2LvZJt_teWrWQ.roa (hash: jUDg3WMKq6N0QAPZM0fHhLPl0mZhBgxm/pe95LVDZy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:66:29:51:c4:87:54:93:53:2d:a0:0e:0d:b4:32:cc:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Validity
Not Before: Jun 12 22:01:13 2025 GMT
Not After : Jun 13 22:01:13 2025 GMT
Subject: CN=7e484243fa38e100629954399bd67dd99629cc20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1a:83:dc:f6:48:56:06:03:a0:c6:3a:a9:46:
b7:bb:2d:49:4f:c0:b6:5b:f2:43:24:78:84:54:2b:
b6:0a:4a:8a:3d:b1:a9:88:5b:b7:e4:57:0c:42:c7:
f8:8b:13:98:2d:99:62:f1:fd:f3:88:7f:7e:72:66:
9c:30:43:3d:0e:5a:ee:5e:8d:38:91:a5:9f:cd:d6:
d4:9b:12:ef:7f:a3:b1:ec:d8:b3:35:21:34:d9:76:
7b:d7:c5:bd:19:56:de:66:b4:1d:ab:d3:1f:87:31:
7a:74:d1:0f:6c:50:25:0a:68:06:c7:65:5d:82:dc:
35:70:8c:13:a8:bf:4d:83:91:aa:20:bc:b4:a6:58:
ae:f3:9c:11:9b:08:5a:8b:1b:5d:e2:57:aa:e9:3b:
0d:97:a9:00:a2:37:2e:25:98:da:7f:10:08:2f:79:
02:3b:c8:f6:ea:29:b4:a5:63:a2:b5:1e:bb:cb:23:
c2:21:74:05:02:8a:9d:68:bc:d0:61:32:83:50:87:
9e:37:f2:da:db:4b:9a:da:00:bd:c2:ce:4e:aa:c0:
6a:20:a8:5b:ae:e1:25:b3:81:06:40:0b:17:4f:f6:
3d:b4:cd:26:e4:74:49:9f:84:06:56:01:9b:5c:6c:
96:63:55:ae:31:47:bf:6a:78:81:20:aa:56:f4:87:
b5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:48:42:43:FA:38:E1:00:62:99:54:39:9B:D6:7D:D9:96:29:CC:20
X509v3 Authority Key Identifier:
keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:51:2c:44:ce:ce:38:5b:1e:99:41:b9:18:ca:32:90:0a:fb:
fd:12:b5:8e:3e:f3:6f:54:f9:2b:eb:ba:0a:5a:5e:48:d1:ea:
71:d4:e8:d4:6a:f1:1f:7c:f6:75:d9:f1:36:10:ed:79:6a:4f:
98:bc:d3:80:62:3d:06:8b:28:e7:b1:f4:ac:6f:e2:10:d7:bd:
6e:48:ca:df:24:24:fa:b7:d7:ac:bf:ac:7b:b6:b8:9b:1a:83:
a7:b4:6f:e7:75:3e:9c:d5:cb:75:c4:65:15:4d:f9:39:14:32:
ed:14:d2:a7:12:c0:b7:ef:36:d0:1f:d3:a5:e8:02:17:a8:a7:
ea:1a:dc:d4:e5:3c:56:46:5b:27:e5:7c:ec:31:53:1d:e2:bf:
68:13:dd:ad:58:04:1a:1b:ba:13:a2:e6:ca:ec:aa:3c:a1:25:
64:c7:20:3b:91:38:b7:91:c8:a1:59:85:be:89:b9:ee:95:fe:
fe:db:bc:1d:1b:d7:55:b1:4d:eb:5d:06:f1:79:12:1f:0f:9e:
67:d5:98:69:21:8c:de:14:19:dd:0a:9d:98:43:96:0c:10:37:
bd:bc:c6:55:42:e2:e9:fb:8a:60:10:cb:46:5d:03:da:52:ce:
1d:6f:56:ac:f8:5d:53:d6:02:c9:0c:58:ec:40:a7:c1:61:cf:
94:c6:db:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 08:03:44 2025 by rpki-client