
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
File: nlUyAHdpaUSxYTwujJxgah4G63k.mft (raw, json)
Hash identifier: ZVlw9Vt1owebqMH5E04IWqJh11dfSSyqww+pmWlE0Rw=
Subject key identifier: D0:49:F3:6E:57:0C:A3:D3:02:6A:10:CC:57:2F:11:3A:57:09:3A:B9
Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Certificate serial: 0197CC83FDB8488440A57009251C7562D1DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
Manifest number: 15DF
Signing time: Wed 02 Jul 2025 19:01:31 +0000
Manifest this update: Wed 02 Jul 2025 19:01:31 +0000
Manifest next update: Thu 03 Jul 2025 19:01:31 +0000
Files and hashes: 1: MWa5Dj5_kmbgw0j6IBXQLJfi3UE.roa (hash: IKx6KdWK7MMrT+DuoPdaDD+mZCI7VV+oe8XMrptTZ1w=)
2: QjtWj02YBmI5Jv7YvgwRw2CvoyA.roa (hash: xzR/aqYGTG/UIUSP1rL50ozgA3zAN0ypP0J4BQa6rSk=)
3: T1_pchNqlq7DTDdnnhWMYLChBoU.roa (hash: 3peIpL8l/Rnx3wWmXa0H7Vz2+9XZpZaFvAX9xROlB/s=)
4: crvEgPTpcYjRSHsrYeLgXXEBKUk.roa (hash: 7eXEVTxEH/UTzDacXKPIjatCFJu/CB4kzr15IvQwXDk=)
5: hvCCVUZ3vm78utey9zVykeFfmZg.roa (hash: 8LKNeWR/ydRJi6I0838T1dU97Q8jY2cXv/vQVdAuDbQ=)
6: nlUyAHdpaUSxYTwujJxgah4G63k.crl (hash: I3JHS07cLd8cWeE/oDXdQYCp3QraRrWlSEajLdQc1SA=)
7: oGavUwYGf9k8hmqppcV6OhAR0l8.roa (hash: xxSUypsCBzVEfCKjWpeRgbmsfcja4p6HlyrSFwzu1Eo=)
8: ofJM-BOf8d42dE82c9Ub9dgl42A.roa (hash: 5Kr1/Loqh5IoZ9YAjtlJKKCAtdpo/Xrh4HBNFY8lq58=)
9: qealtEqMLJg3Xy2LvZJt_teWrWQ.roa (hash: jUDg3WMKq6N0QAPZM0fHhLPl0mZhBgxm/pe95LVDZy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 19:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:83:fd:b8:48:84:40:a5:70:09:25:1c:75:62:d1:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Validity
Not Before: Jul 2 19:01:31 2025 GMT
Not After : Jul 3 19:01:31 2025 GMT
Subject: CN=d049f36e570ca3d3026a10cc572f113a57093ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c6:c2:f0:18:58:0f:e3:8d:bc:c8:ed:49:46:
73:08:a9:d9:5e:f9:34:2b:92:9a:01:22:6b:d1:66:
17:15:a6:6a:51:35:ef:1b:12:6e:e0:37:84:63:f7:
94:39:34:ad:4d:be:b7:70:42:22:ba:f5:37:ab:e6:
68:64:4e:5f:f5:66:7c:72:06:7f:e9:93:ef:d2:39:
52:b7:fa:ab:55:83:98:06:cc:ee:ae:a3:02:67:b5:
24:a8:e5:0f:58:34:2b:c5:07:fc:10:08:62:42:ad:
24:9a:93:07:ee:72:79:8e:91:dd:51:a3:eb:dc:58:
0c:d3:5f:5f:49:ac:92:46:6e:d1:bd:14:6f:a2:93:
8d:f6:94:ef:fa:11:e1:39:41:15:d7:5c:78:3d:b8:
ff:7b:ec:25:1b:ba:f4:45:19:43:68:28:0c:4f:18:
94:23:e4:f4:b2:60:12:ce:80:fc:1b:b5:ce:d5:21:
d4:54:b3:27:b3:25:57:76:a6:1e:a2:77:b7:57:7d:
78:59:7b:13:04:17:bf:bd:ff:e2:65:f5:80:55:df:
a5:7e:57:71:90:4c:d8:2a:35:6b:11:c3:78:af:d3:
4c:4c:f2:51:99:2a:a1:d1:8d:6b:fd:ac:71:82:5c:
6b:43:3d:37:6a:3c:65:8a:2f:c0:f9:00:f7:19:0d:
09:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:49:F3:6E:57:0C:A3:D3:02:6A:10:CC:57:2F:11:3A:57:09:3A:B9
X509v3 Authority Key Identifier:
keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f0:b2:8e:a1:64:be:2d:4d:ad:c8:b3:66:45:48:d3:d5:46:
a5:d8:3f:d4:04:22:b4:39:a0:fc:70:c3:a1:55:d5:03:58:99:
69:1d:19:f1:fc:0c:20:eb:dc:92:9e:5e:bf:91:e7:bd:96:e9:
04:8d:f0:b9:e6:0f:73:07:94:fd:cd:13:b5:06:24:de:c5:8c:
f1:f6:63:76:19:69:e3:13:bc:4a:55:4c:ac:20:7d:68:ba:cb:
dc:f9:6f:12:9c:84:03:a1:68:54:ae:59:a1:66:58:57:fb:7a:
9a:1d:0d:c6:9e:39:81:99:00:65:e1:9f:5a:0a:a3:4c:0e:38:
e1:c1:45:bf:2a:78:16:48:ed:b6:b3:f6:6e:50:0e:b3:2f:22:
1a:a3:82:6c:a6:20:86:9e:13:b7:4e:e3:8f:df:86:72:67:c8:
d5:7f:43:02:84:37:55:7c:f5:d0:cf:0f:a2:74:4a:f6:2b:01:
77:23:a6:0d:bb:0c:67:07:2b:84:d6:d1:b4:d8:ea:34:f7:71:
16:5b:2e:7a:29:71:04:c6:e9:02:5c:bf:08:1e:5b:40:c3:24:
8a:06:ed:d8:f0:f5:00:11:98:49:05:e3:9e:f2:b0:bd:ac:02:
32:ec:a9:9f:10:5e:c6:cb:2c:7c:33:6a:98:29:be:78:1d:a3:
41:04:be:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfMg/24SIRApXAJJRx1YtHcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNTUzMjAwNzc2OTY5NDRiMTYxM2MyZThjOWM2MDZhMWUw
NmViNzkwHhcNMjUwNzAyMTkwMTMxWhcNMjUwNzAzMTkwMTMxWjAzMTEwLwYDVQQD
EyhkMDQ5ZjM2ZTU3MGNhM2QzMDI2YTEwY2M1NzJmMTEzYTU3MDkzYWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8bC8BhYD+ONvMjtSUZzCKnZXvk0
K5KaASJr0WYXFaZqUTXvGxJu4DeEY/eUOTStTb63cEIiuvU3q+ZoZE5f9WZ8cgZ/
6ZPv0jlSt/qrVYOYBszurqMCZ7UkqOUPWDQrxQf8EAhiQq0kmpMH7nJ5jpHdUaPr
3FgM019fSaySRm7RvRRvopON9pTv+hHhOUEV11x4Pbj/e+wlG7r0RRlDaCgMTxiU
I+T0smASzoD8G7XO1SHUVLMnsyVXdqYeone3V314WXsTBBe/vf/iZfWAVd+lfldx
kEzYKjVrEcN4r9NMTPJRmSqh0Y1r/axxglxrQz03ajxlii/A+QD3GQ0JOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNBJ825XDKPTAmoQzFcvETpXCTq5MB8GA1UdIwQY
MBaAFJ5VMgB3aWlEsWE8LoycYGoeBut5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYt
MWUwZThiOTA5ZTM0LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYtMWUwZThiOTA5ZTM0
LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPPCyjqFk
vi1NrcizZkVI09VGpdg/1AQitDmg/HDDoVXVA1iZaR0Z8fwMIOvckp5ev5HnvZbp
BI3wueYPcweU/c0TtQYk3sWM8fZjdhlp4xO8SlVMrCB9aLrL3PlvEpyEA6FoVK5Z
oWZYV/t6mh0Nxp45gZkAZeGfWgqjTA444cFFvyp4FkjttrP2blAOsy8iGqOCbKYg
hp4Tt07jj9+GcmfI1X9DAoQ3VXz10M8PonRK9isBdyOmDbsMZwcrhNbRtNjqNPdx
FlsueilxBMbpAly/CB5bQMMkigbt2PD1ABGYSQXjnvKwvawCMuypnxBexsssfDNq
mCm+eB2jQQS+Fg==
-----END CERTIFICATE-----
Generated at Thu Jul 3 05:06:50 2025 by rpki-client