Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
File: nlUyAHdpaUSxYTwujJxgah4G63k.mft (raw, json)
Hash identifier: iNHwwICOx+1MnDHlFQfPjElKGSbiyIHfHIsJ8zOSTAc=
Subject key identifier: B1:BE:7E:E6:2E:BD:2A:90:AC:ED:A2:FE:96:AA:2F:DD:2A:22:91:71
Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Certificate serial: 019A1D6376DBC80BADBB0DD696CEB621EB07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
Manifest number: 1712
Signing time: Sat 25 Oct 2025 22:00:48 +0000
Manifest this update: Sat 25 Oct 2025 22:00:48 +0000
Manifest next update: Sun 26 Oct 2025 22:00:48 +0000
Files and hashes: 1: MWa5Dj5_kmbgw0j6IBXQLJfi3UE.roa (hash: IKx6KdWK7MMrT+DuoPdaDD+mZCI7VV+oe8XMrptTZ1w=)
2: QjtWj02YBmI5Jv7YvgwRw2CvoyA.roa (hash: xzR/aqYGTG/UIUSP1rL50ozgA3zAN0ypP0J4BQa6rSk=)
3: T1_pchNqlq7DTDdnnhWMYLChBoU.roa (hash: 3peIpL8l/Rnx3wWmXa0H7Vz2+9XZpZaFvAX9xROlB/s=)
4: crvEgPTpcYjRSHsrYeLgXXEBKUk.roa (hash: 7eXEVTxEH/UTzDacXKPIjatCFJu/CB4kzr15IvQwXDk=)
5: hvCCVUZ3vm78utey9zVykeFfmZg.roa (hash: 8LKNeWR/ydRJi6I0838T1dU97Q8jY2cXv/vQVdAuDbQ=)
6: nlUyAHdpaUSxYTwujJxgah4G63k.crl (hash: zggP98RQnwAu3bExy8+wgqPTRhqgFN6jAKgRnGvn2VU=)
7: oGavUwYGf9k8hmqppcV6OhAR0l8.roa (hash: xxSUypsCBzVEfCKjWpeRgbmsfcja4p6HlyrSFwzu1Eo=)
8: ofJM-BOf8d42dE82c9Ub9dgl42A.roa (hash: 5Kr1/Loqh5IoZ9YAjtlJKKCAtdpo/Xrh4HBNFY8lq58=)
9: qealtEqMLJg3Xy2LvZJt_teWrWQ.roa (hash: jUDg3WMKq6N0QAPZM0fHhLPl0mZhBgxm/pe95LVDZy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:63:76:db:c8:0b:ad:bb:0d:d6:96:ce:b6:21:eb:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Validity
Not Before: Oct 25 22:00:48 2025 GMT
Not After : Oct 26 22:00:48 2025 GMT
Subject: CN=b1be7ee62ebd2a90aceda2fe96aa2fdd2a229171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:98:d9:3a:e1:82:62:45:b1:1c:7c:29:fd:85:
dc:71:37:0f:1d:df:2b:37:5c:d0:a9:e1:a1:4d:f6:
1f:8a:64:f3:3c:40:60:67:66:6b:81:c6:96:0d:a4:
8c:c0:b3:43:53:97:c8:1f:f7:3e:21:86:8b:4f:85:
d7:fb:25:6a:0b:a2:d6:9d:33:de:d9:41:16:75:d9:
99:da:0d:9a:76:23:7a:6e:1c:a0:67:a1:34:85:f1:
8a:d1:a7:d9:ab:42:41:10:11:1e:a7:5e:47:52:0f:
d4:df:c0:1f:2a:b7:40:30:f6:0c:23:1f:30:04:23:
d0:7e:db:87:08:05:f8:99:af:a6:df:14:a0:9d:65:
8e:66:5c:d3:56:24:3e:07:54:cb:1b:a7:6e:aa:1f:
b5:93:08:d2:3d:bf:3e:9b:bb:4f:d0:47:51:79:2e:
7c:52:8c:3b:7a:68:e9:e3:40:7d:6e:e8:74:5d:db:
0b:a0:f1:77:d0:9a:d7:48:90:9a:8c:7c:f0:11:61:
12:08:62:6d:c5:99:38:f6:15:a0:84:31:d1:a7:4d:
39:d4:7a:cf:9b:fd:c5:28:d2:9a:b7:d4:a9:c0:c9:
4e:44:e8:ec:7a:f4:b8:cc:51:ff:cf:59:f6:11:d5:
58:b2:cf:f4:98:db:f1:5a:4a:bd:b5:73:30:6a:b1:
29:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BE:7E:E6:2E:BD:2A:90:AC:ED:A2:FE:96:AA:2F:DD:2A:22:91:71
X509v3 Authority Key Identifier:
keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:2f:e8:1a:54:2b:a5:9f:8e:bd:4e:68:ce:05:fa:2c:40:d5:
b1:32:52:10:a5:22:70:0c:4e:fb:9a:e7:27:aa:85:fa:23:de:
5e:07:81:6b:f8:59:11:8d:87:f0:b3:93:39:a5:f8:e1:bc:1f:
43:87:c1:9b:d3:1d:33:ad:63:6a:44:31:4f:20:f6:cd:da:91:
54:19:02:8e:97:69:d2:17:6a:90:5d:c5:9e:f1:02:b8:99:f8:
06:1b:1c:2e:2b:88:ca:8f:df:76:9e:78:b8:d0:67:83:0b:16:
64:25:d2:d0:30:40:51:82:1e:09:f8:a1:08:2a:05:4b:ee:3e:
73:44:b0:8d:4c:6e:3f:2a:26:96:7d:83:a4:b9:eb:53:e1:bf:
00:1a:24:cf:0a:ea:f8:23:83:04:2e:8a:50:1d:ec:e2:39:b9:
99:c2:e3:44:16:7c:32:9b:46:ae:62:6f:6e:86:64:37:a5:27:
e3:b3:c2:6c:87:a4:6f:01:5e:14:61:7c:fe:f6:aa:05:a6:68:
78:bf:1b:cc:30:26:47:38:00:69:94:e8:55:63:a8:75:6d:cb:
97:32:72:12:f1:b4:4c:72:81:ee:f3:3e:a4:12:e3:92:8f:48:
6b:9b:f6:a2:8d:80:05:36:b8:63:d7:38:ce:ff:b5:2a:8a:76:
fb:dd:00:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 02:54:07 2025 by rpki-client