Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
File: nksygbCOa17B_esNBEBSjtk03D8.mft (raw, json)
Hash identifier: OobilgRrHOxJDdBPy9DV9NXtFMs6cjkWQTUF/1b8+X0=
Subject key identifier: C6:E9:46:E9:16:55:D1:4D:49:17:65:29:6F:B2:23:77:D1:BE:49:FF
Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
Certificate issuer: /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Certificate serial: 0198D54E6545B575D9B601C66AD152DC709F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
Manifest number: 1654
Signing time: Sat 23 Aug 2025 05:02:21 +0000
Manifest this update: Sat 23 Aug 2025 05:02:21 +0000
Manifest next update: Sun 24 Aug 2025 05:02:21 +0000
Files and hashes: 1: L1HdFt_deyOuIyEh6ohLDMoi2Hk.roa (hash: 5OEmyz/JOCY7uzs6X4meQ1O5LJEXih2dkz+QsDhsQ6g=)
2: atuec3UTPwJqa2nbFVc6PceCm_U.roa (hash: mxjn4P2BAxt4/rhflGcv4gtLgmXNo6T8LNPaEGy8CeQ=)
3: kg9t18MET9vHkp7c3ZCFI-WKvIA.roa (hash: ATnWiMlDUB6UoUtR8mC5SAsRs5s+5t+PXg+EI7niqTU=)
4: lnxBICiuOhb0S2Ss6UKdeHcB0oo.roa (hash: hdI3xj2P7Sjw6pCwaS0Na+6UrppqSPkWbMvSGZ4mxkQ=)
5: nksygbCOa17B_esNBEBSjtk03D8.crl (hash: rd9BzhOS2kGSLIVwE57QoJ5t6nQvRXnqQbKyOnXlRoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:65:45:b5:75:d9:b6:01:c6:6a:d1:52:dc:70:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Validity
Not Before: Aug 23 05:02:21 2025 GMT
Not After : Aug 24 05:02:21 2025 GMT
Subject: CN=c6e946e91655d14d491765296fb22377d1be49ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ea:fe:5e:b5:6b:ce:a2:7c:d9:b0:58:56:e5:
6b:af:78:a5:88:68:60:f7:8d:75:f3:1e:c9:ef:aa:
0d:da:e8:53:5c:84:4c:ab:84:2b:f3:f9:7f:a1:3f:
0b:99:9c:4e:b3:0d:45:87:53:09:fc:70:16:d9:b6:
d8:19:7e:fd:85:23:76:7c:86:8e:f6:7d:f7:7e:5d:
01:4f:dd:0b:a9:da:10:7c:2b:4f:3e:7d:4f:94:3c:
bf:6e:df:da:3e:1b:e7:5e:79:5b:70:0a:3c:97:72:
73:ce:9c:22:a2:ec:ff:b1:9d:da:e8:47:6b:6b:56:
4a:3d:b5:9d:42:99:57:9d:02:a2:74:a2:71:80:b6:
e6:4f:f4:b5:c7:13:2e:2f:ff:88:9c:dc:e7:74:c9:
5c:04:16:d2:47:e1:d6:72:26:c4:26:42:c9:a0:07:
b2:7f:48:fd:f0:dc:bc:14:90:b7:b3:03:fb:82:ea:
18:96:c9:7f:90:36:fb:a7:21:4a:57:ad:3f:06:c9:
05:ca:41:b7:56:3d:39:89:e0:81:f8:1d:ae:f1:67:
f8:a7:2b:ff:8e:7a:a6:0f:fa:01:28:ac:97:cf:26:
24:40:81:fd:85:31:bf:a3:22:02:c9:bd:bc:c9:4f:
fa:96:ae:ef:8f:f6:e0:72:a4:99:94:b3:ff:70:bc:
6e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E9:46:E9:16:55:D1:4D:49:17:65:29:6F:B2:23:77:D1:BE:49:FF
X509v3 Authority Key Identifier:
keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:97:8d:80:ec:cd:d2:65:86:ba:1b:30:a1:f5:3b:43:a0:7a:
16:df:4d:de:bb:6f:6f:05:ee:ee:92:6c:f1:71:27:b9:77:fd:
a2:86:1b:c6:2c:54:a6:45:de:8c:5c:ae:55:87:92:e3:7f:55:
92:48:5f:38:c4:82:e9:77:69:19:7a:b9:30:1e:d6:29:af:f8:
50:fa:20:15:05:29:55:35:e0:12:6e:91:3b:4a:50:fc:00:a1:
f6:7c:cc:95:80:8e:2d:e0:bb:37:65:a2:3c:3f:ae:c6:2e:d4:
8d:f1:42:cc:87:bf:d2:c6:7d:0f:55:d6:bb:df:c1:d5:c9:97:
a3:97:85:d4:41:1e:3f:28:50:0b:e2:d7:49:bd:02:10:78:8d:
c9:77:3f:63:09:79:84:56:96:45:be:eb:9c:b1:58:46:a9:20:
bb:72:cf:d1:c2:42:86:a9:c3:1a:6c:bd:90:12:47:bb:d0:a7:
e9:36:05:87:d4:6c:06:de:33:5b:37:e1:f2:cd:a5:99:dd:4a:
59:65:a8:a6:b9:c1:62:b9:f3:a5:03:05:e1:5e:2b:9e:34:71:
3b:79:36:39:7c:9c:3c:f1:f3:2d:0c:d6:ac:57:99:6a:50:f1:
2f:58:74:66:18:72:59:1d:4d:d0:5d:eb:97:73:54:44:85:f8:
76:2c:bc:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTmVFtXXZtgHGatFS3HCfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNGIzMjgxYjA4ZTZiNWVjMWZkZWIwZDA0NDA1MjhlZDkz
NGRjM2YwHhcNMjUwODIzMDUwMjIxWhcNMjUwODI0MDUwMjIxWjAzMTEwLwYDVQQD
EyhjNmU5NDZlOTE2NTVkMTRkNDkxNzY1Mjk2ZmIyMjM3N2QxYmU0OWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOr+XrVrzqJ82bBYVuVrr3iliGhg
94118x7J76oN2uhTXIRMq4Qr8/l/oT8LmZxOsw1Fh1MJ/HAW2bbYGX79hSN2fIaO
9n33fl0BT90LqdoQfCtPPn1PlDy/bt/aPhvnXnlbcAo8l3Jzzpwiouz/sZ3a6Edr
a1ZKPbWdQplXnQKidKJxgLbmT/S1xxMuL/+InNzndMlcBBbSR+HWcibEJkLJoAey
f0j98Ny8FJC3swP7guoYlsl/kDb7pyFKV60/BskFykG3Vj05ieCB+B2u8Wf4pyv/
jnqmD/oBKKyXzyYkQIH9hTG/oyICyb28yU/6lq7vj/bgcqSZlLP/cLxufQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMbpRukWVdFNSRdlKW+yI3fRvkn/MB8GA1UdIwQY
MBaAFJ5LMoGwjmtewf3rDQRAUo7ZNNw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGIt
NmIyZDQ2OTI0YzZmLzEvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9mZjdkMzMtZTRmNy00M2MwLTkyNGItNmIyZDQ2OTI0YzZm
LzEvbmtzeWdiQ09hMTdCX2VzTkJFQlNqdGswM0Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJeNgOzN
0mWGuhswofU7Q6B6Ft9N3rtvbwXu7pJs8XEnuXf9ooYbxixUpkXejFyuVYeS439V
kkhfOMSC6XdpGXq5MB7WKa/4UPogFQUpVTXgEm6RO0pQ/ACh9nzMlYCOLeC7N2Wi
PD+uxi7UjfFCzIe/0sZ9D1XWu9/B1cmXo5eF1EEePyhQC+LXSb0CEHiNyXc/Ywl5
hFaWRb7rnLFYRqkgu3LP0cJChqnDGmy9kBJHu9Cn6TYFh9RsBt4zWzfh8s2lmd1K
WWWoprnBYrnzpQMF4V4rnjRxO3k2OXycPPHzLQzWrFeZalDxL1h0ZhhyWR1N0F3r
l3NURIX4diy84g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:26 2025 by rpki-client