Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft
File: nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft (raw, json)
Hash identifier: U4UNY/w1OSauTS7PsBlVPZN2VNW9cAselNIsGIo1XI8=
Subject key identifier: 2B:FD:5D:E2:3A:A4:63:08:2C:9A:01:03:3B:7C:19:3F:72:DE:42:5A
Authority key identifier: 9E:50:5F:2E:67:A1:E6:04:B3:F9:63:CE:4C:36:7D:19:58:BD:4B:78
Certificate issuer: /CN=9e505f2e67a1e604b3f963ce4c367d1958bd4b78
Certificate serial: 0199221EECDF15A5CC8B5AACEB8EA63C262B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 03:01:15 +0000
Manifest this update: Sun 07 Sep 2025 03:01:15 +0000
Manifest next update: Mon 08 Sep 2025 03:01:15 +0000
Files and hashes: 1: 9v5VLNQmHUC6c_AtiguXiv9VBlw.roa (hash: iNy4HwSBG8Jz28fsrZBO8bxra5HKthytWN8pQ51S61o=)
2: nlBfLmeh5gSz-WPOTDZ9GVi9S3g.crl (hash: 4brEFkOXi/MlJS8wl6anKC3GT1quBD1QF1W+r+l5sF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:ec:df:15:a5:cc:8b:5a:ac:eb:8e:a6:3c:26:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e505f2e67a1e604b3f963ce4c367d1958bd4b78
Validity
Not Before: Sep 7 03:01:15 2025 GMT
Not After : Sep 8 03:01:15 2025 GMT
Subject: CN=2bfd5de23aa463082c9a01033b7c193f72de425a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:52:a9:a4:0b:b1:f2:4c:77:6d:aa:ae:a5:ad:
c0:5c:cd:17:98:9c:62:0f:29:7d:62:3b:9e:4f:f8:
1b:d1:32:9e:c5:e0:3d:a3:f8:65:44:5e:23:fa:cb:
15:91:97:ab:9f:26:c6:b7:52:fe:e5:c4:d6:17:cd:
da:4f:eb:71:ee:fb:81:3e:e9:bb:6a:f7:99:cb:23:
17:65:52:68:de:e6:09:be:1e:0c:23:a5:d1:8c:3a:
06:72:58:1f:4b:ca:8d:d7:79:f2:7a:aa:93:bd:18:
39:e7:14:a8:6c:0c:b1:13:b6:35:0f:53:10:58:58:
fb:0a:cc:e8:65:00:42:8e:22:13:18:e6:e3:66:10:
08:07:cb:da:81:b5:96:74:6d:6e:db:78:0d:87:63:
6e:d7:80:de:0f:fc:f3:fc:5f:9d:29:7d:20:b2:eb:
e3:c7:82:8e:65:4c:6d:48:2d:52:d6:e1:69:f6:12:
07:2d:ff:23:fe:8d:92:5e:06:1b:d6:fb:cc:0d:3b:
32:c0:e6:1d:b6:71:40:cf:25:9e:41:1b:de:c1:9e:
73:43:ff:9e:bf:93:ff:01:47:89:aa:d3:6c:21:f6:
3b:85:c9:ad:35:36:9c:ae:50:b9:c8:58:28:da:7e:
9a:08:8e:68:ec:ed:12:c8:c4:93:b7:73:8b:a8:fe:
23:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FD:5D:E2:3A:A4:63:08:2C:9A:01:03:3B:7C:19:3F:72:DE:42:5A
X509v3 Authority Key Identifier:
keyid:9E:50:5F:2E:67:A1:E6:04:B3:F9:63:CE:4C:36:7D:19:58:BD:4B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:de:67:c1:e5:1a:94:54:f9:a4:e4:17:4c:07:96:eb:9f:db:
d2:d0:0d:80:9f:1e:31:49:9a:23:36:92:2e:43:78:98:2a:f4:
b9:82:25:51:d7:0b:76:ec:a1:81:43:5c:d7:56:01:33:92:4e:
e5:24:a7:98:22:aa:2d:08:6e:05:c5:04:e8:04:c1:3b:5a:c0:
75:0d:ad:6d:c2:83:28:1a:7d:8a:bc:23:ec:d5:96:05:c9:60:
45:55:5f:0d:35:cb:c6:cf:05:9d:73:87:d8:06:70:e9:3b:3b:
88:39:ca:5c:e7:f4:f6:6c:e3:1c:b8:bf:41:ae:e7:74:a0:e8:
af:17:46:69:8e:9f:6e:07:72:0f:7c:01:56:40:ed:bf:03:0a:
b2:f9:be:b1:95:fd:d1:08:08:34:2a:b5:6e:dc:60:ef:d7:b0:
14:89:6f:9f:91:26:3b:fb:6f:b8:5b:74:9b:0e:3d:73:a5:f8:
fb:18:91:5a:a6:54:75:17:53:a4:90:3f:a2:c1:64:85:2a:e1:
08:d1:e1:7b:a3:53:c5:6f:24:27:f7:cd:3c:ec:97:d8:e4:b0:
c6:48:2f:0c:57:0d:d1:c7:69:fa:2a:10:9c:f8:e3:8b:30:d1:
b9:ff:bd:bf:31:b4:e5:29:5e:f9:44:3a:80:0b:e9:bb:fa:f3:
83:af:dc:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:31:04 2025 by rpki-client