Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
File: nlUyAHdpaUSxYTwujJxgah4G63k.mft (raw, json)
Hash identifier: rK6hoMvp9AAuHmazVj3S0brpUmHFI0W4ZsGK2f9ybHw=
Subject key identifier: 8D:59:BE:D7:4C:89:4E:A4:EE:8A:C9:37:80:C7:4B:14:37:17:49:08
Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Certificate serial: 0198D70574F0C80667856F85CACC15C5FDE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
Manifest number: 1669
Signing time: Sat 23 Aug 2025 13:01:55 +0000
Manifest this update: Sat 23 Aug 2025 13:01:55 +0000
Manifest next update: Sun 24 Aug 2025 13:01:55 +0000
Files and hashes: 1: MWa5Dj5_kmbgw0j6IBXQLJfi3UE.roa (hash: IKx6KdWK7MMrT+DuoPdaDD+mZCI7VV+oe8XMrptTZ1w=)
2: QjtWj02YBmI5Jv7YvgwRw2CvoyA.roa (hash: xzR/aqYGTG/UIUSP1rL50ozgA3zAN0ypP0J4BQa6rSk=)
3: T1_pchNqlq7DTDdnnhWMYLChBoU.roa (hash: 3peIpL8l/Rnx3wWmXa0H7Vz2+9XZpZaFvAX9xROlB/s=)
4: crvEgPTpcYjRSHsrYeLgXXEBKUk.roa (hash: 7eXEVTxEH/UTzDacXKPIjatCFJu/CB4kzr15IvQwXDk=)
5: hvCCVUZ3vm78utey9zVykeFfmZg.roa (hash: 8LKNeWR/ydRJi6I0838T1dU97Q8jY2cXv/vQVdAuDbQ=)
6: nlUyAHdpaUSxYTwujJxgah4G63k.crl (hash: /vzyz+44kr/wORjIJvvmRPFJwkOUBgnBEbrjPjbXzxI=)
7: oGavUwYGf9k8hmqppcV6OhAR0l8.roa (hash: xxSUypsCBzVEfCKjWpeRgbmsfcja4p6HlyrSFwzu1Eo=)
8: ofJM-BOf8d42dE82c9Ub9dgl42A.roa (hash: 5Kr1/Loqh5IoZ9YAjtlJKKCAtdpo/Xrh4HBNFY8lq58=)
9: qealtEqMLJg3Xy2LvZJt_teWrWQ.roa (hash: jUDg3WMKq6N0QAPZM0fHhLPl0mZhBgxm/pe95LVDZy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:74:f0:c8:06:67:85:6f:85:ca:cc:15:c5:fd:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Validity
Not Before: Aug 23 13:01:55 2025 GMT
Not After : Aug 24 13:01:55 2025 GMT
Subject: CN=8d59bed74c894ea4ee8ac93780c74b1437174908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fa:49:0c:ba:47:91:de:23:26:f8:fd:44:e0:
0a:7f:dd:6f:65:e4:58:aa:9d:6e:6f:2b:0f:e1:39:
20:cf:55:98:7e:be:ce:74:f4:9a:05:c7:bb:d5:48:
ca:77:9d:c4:c5:4a:38:eb:ff:1e:e2:11:5b:02:21:
78:a2:f7:cc:a8:c7:de:2b:44:02:a7:6d:c6:0c:e9:
c1:29:96:22:54:8d:ba:b3:28:03:1c:1c:2d:ea:38:
d7:2d:72:68:a9:72:bf:e6:98:53:84:b0:bf:8e:3b:
51:97:07:39:f0:96:26:9c:7a:04:74:d0:18:87:84:
fa:06:a7:ec:ba:4e:bc:18:ff:08:76:f4:84:49:1a:
de:02:21:17:a4:c2:81:4e:28:77:6f:d3:db:ac:71:
c0:72:56:1c:b1:bb:73:90:c9:93:ee:ed:97:16:02:
ad:3d:0d:8d:d6:bc:6e:27:c9:ce:75:e1:cf:ee:a3:
f9:4b:a9:62:d4:99:e3:2c:08:bb:84:0a:ee:57:dd:
77:bb:da:c1:35:fd:56:bf:d8:5a:17:77:8a:7d:a6:
d2:a3:89:c7:90:02:d8:0e:e1:a3:1d:05:97:ed:bc:
17:3a:cb:d3:03:b5:2a:ca:6a:81:10:79:19:27:ea:
2c:95:82:91:c5:63:ec:61:aa:c9:43:28:75:40:1f:
e0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:59:BE:D7:4C:89:4E:A4:EE:8A:C9:37:80:C7:4B:14:37:17:49:08
X509v3 Authority Key Identifier:
keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:83:c9:e7:80:c9:82:c0:f1:6e:2b:04:21:68:de:ba:38:4f:
e9:d8:07:77:2d:88:1f:ce:d4:8e:21:d6:a4:5d:dc:ac:96:cf:
b5:db:71:65:4f:31:0b:bf:1b:d3:54:7e:48:fc:68:4c:b0:ee:
79:a1:40:20:d7:b8:9f:ff:f1:89:82:18:29:b5:fc:d1:4a:30:
04:7d:8b:58:3d:c9:43:3f:43:37:a8:e0:aa:fe:f5:7d:c3:d9:
1e:ad:3a:5b:94:f7:85:8f:d4:25:53:61:11:98:3d:bc:14:e2:
00:b2:d8:34:56:a8:61:8e:7e:e9:c2:f6:74:52:d5:85:b6:02:
5e:50:59:85:e7:e9:4d:9a:ae:e2:b7:de:61:7a:cb:c4:2d:3a:
af:f1:38:e3:af:af:bf:6e:b5:80:41:b5:7f:f8:a0:a3:e9:34:
e3:7e:6f:ed:51:a2:a5:d8:5f:a5:5f:3f:61:9a:53:08:f2:34:
7b:49:ec:f8:cc:dd:66:b4:3d:70:76:f1:68:0c:2e:db:8f:b3:
3b:6a:e0:9f:6a:02:7d:b9:24:e2:4a:4e:26:3d:92:b3:83:a8:
b3:3e:f4:3c:98:b4:8e:ac:ca:77:91:fe:ec:9d:a7:13:04:1d:
b8:82:5d:47:04:75:7f:88:08:c4:1e:eb:e5:52:db:f0:8f:3c:
31:14:1b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:13:12 2025 by rpki-client