
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
File: nlUyAHdpaUSxYTwujJxgah4G63k.mft (raw, json)
Hash identifier: 3AxtYhP2ZHQh5BDOjhGptmytV15yd0O4ZfmGNjdQfxs=
Subject key identifier: 8C:44:A9:93:9F:C8:A4:41:44:AE:4B:CA:17:F5:F2:A9:04:95:BE:C0
Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Certificate serial: 01992632C4CAEB029BAB19E7DCD8F2CBDA38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
Manifest number: 1692
Signing time: Sun 07 Sep 2025 22:01:25 +0000
Manifest this update: Sun 07 Sep 2025 22:01:25 +0000
Manifest next update: Mon 08 Sep 2025 22:01:25 +0000
Files and hashes: 1: MWa5Dj5_kmbgw0j6IBXQLJfi3UE.roa (hash: IKx6KdWK7MMrT+DuoPdaDD+mZCI7VV+oe8XMrptTZ1w=)
2: QjtWj02YBmI5Jv7YvgwRw2CvoyA.roa (hash: xzR/aqYGTG/UIUSP1rL50ozgA3zAN0ypP0J4BQa6rSk=)
3: T1_pchNqlq7DTDdnnhWMYLChBoU.roa (hash: 3peIpL8l/Rnx3wWmXa0H7Vz2+9XZpZaFvAX9xROlB/s=)
4: crvEgPTpcYjRSHsrYeLgXXEBKUk.roa (hash: 7eXEVTxEH/UTzDacXKPIjatCFJu/CB4kzr15IvQwXDk=)
5: hvCCVUZ3vm78utey9zVykeFfmZg.roa (hash: 8LKNeWR/ydRJi6I0838T1dU97Q8jY2cXv/vQVdAuDbQ=)
6: nlUyAHdpaUSxYTwujJxgah4G63k.crl (hash: M4R6uLjo87OgO360YHZ9AHJO2nt21YBHPbA0FZ4p5ig=)
7: oGavUwYGf9k8hmqppcV6OhAR0l8.roa (hash: xxSUypsCBzVEfCKjWpeRgbmsfcja4p6HlyrSFwzu1Eo=)
8: ofJM-BOf8d42dE82c9Ub9dgl42A.roa (hash: 5Kr1/Loqh5IoZ9YAjtlJKKCAtdpo/Xrh4HBNFY8lq58=)
9: qealtEqMLJg3Xy2LvZJt_teWrWQ.roa (hash: jUDg3WMKq6N0QAPZM0fHhLPl0mZhBgxm/pe95LVDZy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:26:32:c4:ca:eb:02:9b:ab:19:e7:dc:d8:f2:cb:da:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Validity
Not Before: Sep 7 22:01:25 2025 GMT
Not After : Sep 8 22:01:25 2025 GMT
Subject: CN=8c44a9939fc8a44144ae4bca17f5f2a90495bec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:26:4c:41:ed:12:a1:35:81:5e:ba:a3:08:8b:
21:dd:55:5a:ae:1b:2c:56:ea:d9:61:97:1a:e9:02:
4d:fb:c4:75:c3:85:90:d6:16:85:13:ff:b8:e8:99:
b5:d3:af:5a:13:54:07:2b:c5:0e:a0:3e:95:a3:dc:
ac:bb:db:62:a8:33:19:b3:be:b0:42:f6:ef:6d:fe:
f1:39:e5:52:32:25:77:e5:e8:b4:20:db:ec:7d:47:
8f:d1:96:30:69:6f:fb:01:fe:d6:91:6a:23:08:c5:
7b:ed:4f:d5:7e:31:b6:26:45:f2:35:aa:1e:7c:56:
10:84:9b:a9:e3:5e:1b:d7:bf:e2:a3:bc:75:f8:85:
b3:13:09:73:62:9f:72:fd:62:e6:25:dc:2a:2c:2c:
41:fa:bf:23:b6:76:21:83:b0:80:e3:52:30:b2:18:
9a:c8:aa:be:cf:f6:5f:85:66:bc:db:c5:5b:45:ad:
11:0b:8b:20:24:73:96:1c:bd:52:52:d0:d6:19:f1:
30:e6:5e:29:61:84:49:3f:71:fe:b2:5b:74:be:ee:
00:59:5b:89:de:e9:c3:45:4d:5f:87:24:2e:21:68:
a3:c0:77:6b:32:e7:7a:21:16:1d:b7:2e:98:8e:23:
f6:1e:36:55:ec:ee:5d:fd:c0:78:ff:db:87:99:3c:
21:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:44:A9:93:9F:C8:A4:41:44:AE:4B:CA:17:F5:F2:A9:04:95:BE:C0
X509v3 Authority Key Identifier:
keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:63:73:5d:41:ce:71:f5:ce:0a:df:b3:5a:23:ba:9a:65:54:
d5:a3:b6:c0:4f:f0:52:b9:e0:ab:2a:7c:d3:61:3b:b5:58:5b:
71:37:24:65:cf:12:6f:96:34:22:45:89:a7:d1:29:ad:63:08:
eb:3b:7b:f5:63:ad:85:58:b6:42:f1:9a:8a:e8:c8:29:25:b2:
ae:ad:4f:62:b8:dc:ee:80:72:9f:7b:4f:1d:dc:79:fa:3f:3f:
91:db:cd:c2:42:8b:e5:f7:d4:79:6a:70:ed:98:b1:2d:14:d9:
91:d9:9a:67:92:93:73:cb:a5:23:4a:b0:6c:57:89:c5:68:74:
ce:01:38:38:4e:f6:99:c1:88:1c:98:91:52:07:17:dc:99:ba:
1d:de:e5:25:ec:29:ab:6c:2f:80:23:d5:be:a5:9c:00:86:66:
c9:68:78:f4:8a:0f:23:0a:75:62:45:99:16:cb:35:fe:d4:b8:
62:97:dd:a3:75:7f:47:ec:d2:ed:87:cf:ec:46:dc:10:a8:ab:
13:0d:9b:20:21:5e:57:f8:47:03:7d:35:35:d4:7a:0a:c8:e2:
42:8e:86:81:66:6a:3f:8f:4f:a4:9b:00:dc:04:04:d5:0c:ad:
e6:c8:39:24:57:8b:30:98:70:75:90:a7:2c:35:e1:bb:79:d2:
7e:13:1a:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkmMsTK6wKbqxnn3Njyy9o4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNTUzMjAwNzc2OTY5NDRiMTYxM2MyZThjOWM2MDZhMWUw
NmViNzkwHhcNMjUwOTA3MjIwMTI1WhcNMjUwOTA4MjIwMTI1WjAzMTEwLwYDVQQD
Eyg4YzQ0YTk5MzlmYzhhNDQxNDRhZTRiY2ExN2Y1ZjJhOTA0OTViZWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiZMQe0SoTWBXrqjCIsh3VVarhss
VurZYZca6QJN+8R1w4WQ1haFE/+46Jm1069aE1QHK8UOoD6Vo9ysu9tiqDMZs76w
Qvbvbf7xOeVSMiV35ei0INvsfUeP0ZYwaW/7Af7WkWojCMV77U/VfjG2JkXyNaoe
fFYQhJup414b17/io7x1+IWzEwlzYp9y/WLmJdwqLCxB+r8jtnYhg7CA41Iwshia
yKq+z/ZfhWa828VbRa0RC4sgJHOWHL1SUtDWGfEw5l4pYYRJP3H+slt0vu4AWVuJ
3unDRU1fhyQuIWijwHdrMud6IRYdty6YjiP2HjZV7O5d/cB4/9uHmTwhywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIxEqZOfyKRBRK5Lyhf18qkElb7AMB8GA1UdIwQY
MBaAFJ5VMgB3aWlEsWE8LoycYGoeBut5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYt
MWUwZThiOTA5ZTM0LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYtMWUwZThiOTA5ZTM0
LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKGNzXUHO
cfXOCt+zWiO6mmVU1aO2wE/wUrngqyp802E7tVhbcTckZc8Sb5Y0IkWJp9EprWMI
6zt79WOthVi2QvGaiujIKSWyrq1PYrjc7oByn3tPHdx5+j8/kdvNwkKL5ffUeWpw
7ZixLRTZkdmaZ5KTc8ulI0qwbFeJxWh0zgE4OE72mcGIHJiRUgcX3Jm6Hd7lJewp
q2wvgCPVvqWcAIZmyWh49IoPIwp1YkWZFss1/tS4Ypfdo3V/R+zS7YfP7EbcEKir
Ew2bICFeV/hHA301NdR6CsjiQo6GgWZqP49PpJsA3AQE1Qyt5sg5JFeLMJhwdZCn
LDXhu3nSfhMaaw==
-----END CERTIFICATE-----
Generated at Mon Sep 8 03:34:47 2025 by rpki-client