
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
File: nlUyAHdpaUSxYTwujJxgah4G63k.mft (raw, json)
Hash identifier: IVcB8j7hz3jhNjyNXFAig0JM/dAsxQ6id7so6yUGTtY=
Subject key identifier: 78:2A:50:77:37:9E:DD:39:CA:7B:62:7A:EA:AD:28:12:24:19:50:90
Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Certificate serial: 0199FC8FC08149BD67590EFC2D0C0113A85B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
Manifest number: 1701
Signing time: Sun 19 Oct 2025 13:01:43 +0000
Manifest this update: Sun 19 Oct 2025 13:01:43 +0000
Manifest next update: Mon 20 Oct 2025 13:01:43 +0000
Files and hashes: 1: MWa5Dj5_kmbgw0j6IBXQLJfi3UE.roa (hash: IKx6KdWK7MMrT+DuoPdaDD+mZCI7VV+oe8XMrptTZ1w=)
2: QjtWj02YBmI5Jv7YvgwRw2CvoyA.roa (hash: xzR/aqYGTG/UIUSP1rL50ozgA3zAN0ypP0J4BQa6rSk=)
3: T1_pchNqlq7DTDdnnhWMYLChBoU.roa (hash: 3peIpL8l/Rnx3wWmXa0H7Vz2+9XZpZaFvAX9xROlB/s=)
4: crvEgPTpcYjRSHsrYeLgXXEBKUk.roa (hash: 7eXEVTxEH/UTzDacXKPIjatCFJu/CB4kzr15IvQwXDk=)
5: hvCCVUZ3vm78utey9zVykeFfmZg.roa (hash: 8LKNeWR/ydRJi6I0838T1dU97Q8jY2cXv/vQVdAuDbQ=)
6: nlUyAHdpaUSxYTwujJxgah4G63k.crl (hash: XfpGI3FurwtsUM8clry3QRzTgEsvHtBMZYR+HNKy/LA=)
7: oGavUwYGf9k8hmqppcV6OhAR0l8.roa (hash: xxSUypsCBzVEfCKjWpeRgbmsfcja4p6HlyrSFwzu1Eo=)
8: ofJM-BOf8d42dE82c9Ub9dgl42A.roa (hash: 5Kr1/Loqh5IoZ9YAjtlJKKCAtdpo/Xrh4HBNFY8lq58=)
9: qealtEqMLJg3Xy2LvZJt_teWrWQ.roa (hash: jUDg3WMKq6N0QAPZM0fHhLPl0mZhBgxm/pe95LVDZy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:c0:81:49:bd:67:59:0e:fc:2d:0c:01:13:a8:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Validity
Not Before: Oct 19 13:01:43 2025 GMT
Not After : Oct 20 13:01:43 2025 GMT
Subject: CN=782a5077379edd39ca7b627aeaad281224195090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:98:37:b6:fe:d9:48:4c:83:51:c2:9d:70:b4:
8f:03:d2:c2:7f:f0:bb:67:d2:f4:ca:48:90:26:fb:
b0:36:b6:20:54:9d:1b:eb:05:c5:d0:d6:d2:4b:d1:
c6:6b:f4:ab:a2:37:23:d6:07:4d:af:b0:de:aa:3b:
ef:be:f1:f1:30:62:a2:a9:70:51:a9:16:73:0c:92:
e6:50:e6:f1:17:91:97:29:02:e6:4a:85:a5:37:91:
52:f7:c8:f7:8e:8c:20:b0:41:61:69:ed:5b:01:ff:
a2:1f:5f:cf:d8:b6:5a:7d:e6:40:90:10:68:e7:a3:
36:d5:c6:94:f7:7f:51:22:22:bd:e3:e3:b1:e4:a6:
77:8f:cb:59:14:d8:82:b5:33:eb:88:71:48:74:b8:
df:a9:cc:dc:94:00:ee:42:da:89:bf:97:f1:45:6f:
39:c9:3b:74:d9:86:f8:5d:78:89:ca:bc:b3:ef:83:
26:f6:31:de:05:54:91:ef:74:09:83:9d:11:da:63:
2e:2a:6c:fe:05:af:4f:83:02:6a:21:1b:a4:b0:42:
71:89:56:49:91:f3:27:57:91:4a:1b:d5:da:8a:a6:
52:0e:cf:ef:32:d7:ff:6d:2f:fd:56:fb:a2:1c:2c:
6c:ab:65:39:80:48:a3:67:c1:71:ce:29:b8:15:69:
99:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2A:50:77:37:9E:DD:39:CA:7B:62:7A:EA:AD:28:12:24:19:50:90
X509v3 Authority Key Identifier:
keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:4f:6b:b9:3e:45:c4:31:16:86:3c:67:6a:7f:2f:34:6d:25:
2c:5a:8d:00:c9:50:c4:e9:32:7a:25:bc:70:67:6e:77:69:e3:
1a:1f:08:ef:72:70:62:5f:36:ff:f3:57:f6:d2:c2:61:f8:a1:
47:a9:71:cc:8e:9a:12:5b:d9:aa:3a:6d:68:07:d7:6b:c6:8d:
e7:19:9e:cb:30:61:50:cf:27:d4:e5:b6:b4:01:ec:75:3e:ee:
6f:0c:60:7e:8c:91:5f:b9:8c:2a:3f:36:b7:4e:6a:6f:fe:ff:
9e:3e:96:51:55:e8:5d:1c:b5:bc:45:c3:c0:71:7a:2a:7f:83:
52:9f:81:30:42:dc:60:d3:63:34:c9:bb:f0:85:b3:c2:06:1c:
df:40:60:8c:e1:00:d6:94:19:27:8e:9d:c9:d3:c6:1e:9f:9f:
bd:b6:1f:04:c3:64:e6:b3:f1:10:b1:cf:56:17:3b:ac:61:46:
05:3f:38:c5:0b:a0:9e:da:91:66:40:f0:48:68:e6:43:ba:21:
fc:8c:3c:43:bd:26:93:82:31:07:ba:2f:32:dd:8f:bb:64:a5:
97:ba:a0:7b:ce:40:32:e6:7b:79:0f:af:33:50:fd:5c:6f:6d:
fb:88:fa:9b:a8:3a:5a:7b:2a:bc:bc:18:c9:1c:c1:63:cb:7b:
a9:e0:5d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:03 2025 by rpki-client