Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.mft
File: nlaYDUienFO8gp8-jWPTg_ONDeM.mft (raw, json)
Hash identifier: bkhalqm+f+atV1cyLf19/UWkHrjQ43YM7nPOHpuku+0=
Subject key identifier: 86:95:DF:C0:97:B4:CF:CE:BD:33:A3:04:72:E8:47:DB:55:89:24:22
Authority key identifier: 9E:56:98:0D:48:9E:9C:53:BC:82:9F:3E:8D:63:D3:83:F3:8D:0D:E3
Certificate issuer: /CN=9e56980d489e9c53bc829f3e8d63d383f38d0de3
Certificate serial: 0198D77342674AB6671280E4A24E7B3EED9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlaYDUienFO8gp8-jWPTg_ONDeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.mft
Manifest number: 15A7
Signing time: Sat 23 Aug 2025 15:01:51 +0000
Manifest this update: Sat 23 Aug 2025 15:01:51 +0000
Manifest next update: Sun 24 Aug 2025 15:01:51 +0000
Files and hashes: 1: 5LKnYfYeN0M1IwSjOCfaAZydc0E.roa (hash: R6rY8mHoFXXwwf30CLdp4brLxdq1SUoGP6TPbyDWGN8=)
2: nlaYDUienFO8gp8-jWPTg_ONDeM.crl (hash: jW+yzn5HpRsQ11LewBt62OmR8yjlXg7KPZgJoFAEoM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlaYDUienFO8gp8-jWPTg_ONDeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:42:67:4a:b6:67:12:80:e4:a2:4e:7b:3e:ed:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e56980d489e9c53bc829f3e8d63d383f38d0de3
Validity
Not Before: Aug 23 15:01:51 2025 GMT
Not After : Aug 24 15:01:51 2025 GMT
Subject: CN=8695dfc097b4cfcebd33a30472e847db55892422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:02:c5:76:cc:79:f8:4e:cc:1a:c8:4b:fc:33:
34:7f:63:52:a3:90:ac:53:39:2c:d8:c2:7a:74:2d:
b4:e1:13:2a:d3:64:52:fb:97:e8:5b:eb:77:bd:e2:
8d:8d:55:2d:d0:6a:19:65:74:74:6c:84:88:b3:9e:
57:06:0c:d9:83:e8:62:da:68:21:bd:6d:b5:13:e5:
14:c1:e9:63:22:24:95:f3:2f:ec:76:1f:d6:39:f7:
d3:a1:27:b6:8b:29:c9:9e:b3:85:36:82:47:ba:5f:
0e:0f:56:1e:10:79:87:a2:01:c9:6f:6d:d2:6a:3b:
09:54:44:3a:71:6d:00:3d:d1:23:72:36:51:4d:df:
83:ac:67:0b:fe:70:ca:6f:89:a2:ca:b4:e4:a3:12:
03:8e:1d:cc:30:9c:95:1c:d6:20:8a:4c:f2:c4:e7:
0c:6b:8d:01:56:55:66:6a:51:01:32:f7:25:9c:da:
3d:47:de:65:ef:f8:14:ac:5f:f8:34:ff:20:15:2c:
ba:e4:8d:9b:90:50:27:7c:ca:7c:ac:28:03:cd:25:
c5:58:ec:6e:86:25:ad:08:37:95:da:62:a5:28:f3:
4f:7e:63:b7:f2:f9:19:41:eb:18:48:06:67:1e:c9:
9e:87:04:b4:33:e2:ec:58:38:85:82:1e:ec:b0:33:
39:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:95:DF:C0:97:B4:CF:CE:BD:33:A3:04:72:E8:47:DB:55:89:24:22
X509v3 Authority Key Identifier:
keyid:9E:56:98:0D:48:9E:9C:53:BC:82:9F:3E:8D:63:D3:83:F3:8D:0D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlaYDUienFO8gp8-jWPTg_ONDeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:77:1e:fe:8a:ea:03:e6:da:15:94:29:6a:8b:bc:e9:a9:c1:
ec:99:eb:4e:74:9b:6a:d9:2c:5b:48:e0:cd:44:6d:e5:5d:d5:
93:f5:a5:8d:d9:63:64:58:86:82:34:c7:64:e2:d1:f6:31:f1:
ba:39:04:58:6a:41:f4:4b:af:9e:20:2a:67:2e:a4:af:5d:de:
65:31:91:aa:83:12:e9:9b:91:4f:16:34:f0:76:25:5b:9f:93:
2a:fa:7d:ea:48:57:35:d9:67:a3:71:91:22:f5:3e:a2:1e:c1:
0b:dc:0d:30:0e:b1:4b:bd:7e:3e:32:3d:1d:bc:73:33:b2:15:
30:a9:ea:38:1e:54:73:cd:13:53:10:40:bd:25:0c:cd:e5:cb:
27:9e:6f:f9:ce:e5:4e:bc:ec:05:4e:31:01:39:fc:f0:92:67:
41:ba:15:09:9f:9c:f9:c9:0f:82:65:9c:b0:72:78:9b:c5:0d:
57:2e:f9:10:51:10:b0:ba:9a:c6:1b:23:e0:1a:c5:b7:8b:b1:
fa:10:38:e7:94:f3:55:65:1e:de:a9:50:13:d3:48:24:5b:b2:
42:ec:c2:0b:2b:68:2f:dc:15:65:6c:df:fe:d1:26:f4:d4:aa:
54:5e:29:00:32:92:fc:43:e7:cd:49:5a:ec:e9:d3:9e:1c:9b:
7f:b4:a0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:44:38 2025 by rpki-client