Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
File: NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft (raw, json)
Hash identifier: EiuqSR/pOE0ZbKq0j1X/Tp499IwIUsS9ai2Qn/a4pVA=
Subject key identifier: 04:79:67:E2:98:5C:AC:E2:20:99:70:69:8A:67:6B:09:0C:6B:99:B0
Authority key identifier: 35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
Certificate issuer: /CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Certificate serial: 01988C8F2EDE77083678131A07FF0F3C7FD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
Manifest number: 0B08
Signing time: Sat 09 Aug 2025 02:00:50 +0000
Manifest this update: Sat 09 Aug 2025 02:00:50 +0000
Manifest next update: Sun 10 Aug 2025 02:00:50 +0000
Files and hashes: 1: NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl (hash: 9CTiRF+RXsXLwn2a945i1WdUIwoTN3W48/BkPTTNrRg=)
2: Zk0y4tHHB8Yu3r49IrGLEovlzps.roa (hash: Z8BlFARu3PiIVKgAzCmvXp/n3Elo4eu1cJ/tXUB0sZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:8f:2e:de:77:08:36:78:13:1a:07:ff:0f:3c:7f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Validity
Not Before: Aug 9 02:00:50 2025 GMT
Not After : Aug 10 02:00:50 2025 GMT
Subject: CN=047967e2985cace2209970698a676b090c6b99b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:27:aa:8c:ae:ec:28:ed:a3:fa:3d:ae:9a:ac:
82:42:79:11:4a:6d:b8:2d:4e:0f:8c:a4:6a:41:3c:
8c:56:9a:77:e1:3d:a9:d6:a7:15:82:5e:37:8e:e1:
31:25:76:f6:ed:06:03:47:a3:fc:ce:4d:3d:42:3c:
94:5d:82:74:7e:82:29:d0:cf:be:1e:8b:9f:2b:8c:
50:10:13:69:fc:94:cb:cc:d8:ed:f0:3a:2e:dd:f2:
04:34:d6:e8:c4:b1:72:5a:95:9d:f9:0d:d0:56:0f:
01:17:a3:23:dd:df:d1:19:33:b9:62:bd:70:98:c0:
1c:1b:db:06:22:c2:46:64:86:3f:51:37:86:7f:a5:
30:90:84:06:57:f0:0b:b1:11:55:ec:19:5d:25:06:
74:78:85:5f:5d:8f:1c:a8:d4:08:f3:b2:69:9e:1a:
ca:5f:a8:b4:3a:b6:4d:54:7d:5b:4d:e8:20:16:4c:
19:69:8c:ec:05:6a:ca:d0:d7:2e:77:a9:1d:93:aa:
e5:e5:32:57:cf:61:5b:53:6a:30:07:da:88:12:95:
32:17:28:ee:e5:93:3e:a8:9a:24:5c:88:e7:a6:39:
0d:5b:dd:e1:b6:12:12:b9:c0:01:f1:e7:70:af:fc:
d9:5b:25:39:16:46:ac:c9:2d:dc:58:16:f9:4a:77:
62:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:79:67:E2:98:5C:AC:E2:20:99:70:69:8A:67:6B:09:0C:6B:99:B0
X509v3 Authority Key Identifier:
keyid:35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:65:e5:35:e1:8b:4f:31:30:fc:25:e9:0d:cb:c2:0f:85:5b:
c8:c9:88:3e:47:db:c3:07:f5:64:9f:96:5b:46:33:02:fd:14:
1c:fc:dd:ba:de:5b:5b:58:b2:bd:17:8f:ae:05:2b:1a:50:db:
c0:b5:32:8a:7e:8a:d5:ce:27:e3:d9:e2:cc:b8:78:1a:d5:f4:
59:a8:ac:d5:8b:46:61:b0:b0:8e:75:02:59:95:e5:2d:4d:b4:
51:30:e7:7c:b3:5b:aa:4f:fb:34:50:79:85:4e:30:f9:ba:5e:
3d:a0:55:11:f8:15:9c:1c:0b:ad:c3:27:08:0f:e1:06:35:05:
0c:cc:6f:1c:7d:9c:bf:1e:85:fc:eb:09:e5:37:7c:50:9c:42:
91:fb:71:5c:89:d4:a5:ed:67:c6:07:07:ec:1c:99:cc:1b:e8:
01:31:46:0b:e7:ef:86:2c:55:15:e9:5f:71:26:1b:c2:9f:d7:
1e:5e:80:9f:55:6e:e8:33:9e:fb:a5:62:8a:96:cd:f7:91:2b:
83:c2:ad:8d:73:10:b2:ed:c4:6d:24:62:fb:b0:4e:dc:9d:f3:
09:66:66:72:e6:d9:1f:8f:13:ce:ac:d2:e4:2a:00:04:5d:f4:
5d:70:c5:33:20:d8:b8:04:b3:1b:a6:e7:fb:c9:de:22:2c:ab:
5f:d2:ec:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiMjy7edwg2eBMaB/8PPH/TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MTY1MmI4MzhmZjJkOTY3MmFjOGNhNjZiYTY2MGRkNGU0
NWQ2OTkwHhcNMjUwODA5MDIwMDUwWhcNMjUwODEwMDIwMDUwWjAzMTEwLwYDVQQD
EygwNDc5NjdlMjk4NWNhY2UyMjA5OTcwNjk4YTY3NmIwOTBjNmI5OWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCeqjK7sKO2j+j2umqyCQnkRSm24
LU4PjKRqQTyMVpp34T2p1qcVgl43juExJXb27QYDR6P8zk09QjyUXYJ0foIp0M++
HoufK4xQEBNp/JTLzNjt8Dou3fIENNboxLFyWpWd+Q3QVg8BF6Mj3d/RGTO5Yr1w
mMAcG9sGIsJGZIY/UTeGf6UwkIQGV/ALsRFV7BldJQZ0eIVfXY8cqNQI87JpnhrK
X6i0OrZNVH1bTeggFkwZaYzsBWrK0Ncud6kdk6rl5TJXz2FbU2owB9qIEpUyFyju
5ZM+qJokXIjnpjkNW93hthISucAB8edwr/zZWyU5FkasyS3cWBb5SndizwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAR5Z+KYXKziIJlwaYpnawkMa5mwMB8GA1UdIwQY
MBaAFDUWUrg4/y2WcqyMpmumYN1ORdaZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlJaU3VEal9MWlp5ckl5bWE2WmczVTVGMXBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi85Y2U2MGItY2JjNC00MGQ5LTk4YWQt
MWNkNTA2MDcwYmI1LzEvTlJaU3VEal9MWlp5ckl5bWE2WmczVTVGMXBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi85Y2U2MGItY2JjNC00MGQ5LTk4YWQtMWNkNTA2MDcwYmI1
LzEvTlJaU3VEal9MWlp5ckl5bWE2WmczVTVGMXBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUmXlNeGL
TzEw/CXpDcvCD4VbyMmIPkfbwwf1ZJ+WW0YzAv0UHPzdut5bW1iyvRePrgUrGlDb
wLUyin6K1c4n49nizLh4GtX0Wais1YtGYbCwjnUCWZXlLU20UTDnfLNbqk/7NFB5
hU4w+bpePaBVEfgVnBwLrcMnCA/hBjUFDMxvHH2cvx6F/OsJ5Td8UJxCkftxXInU
pe1nxgcH7ByZzBvoATFGC+fvhixVFelfcSYbwp/XHl6An1Vu6DOe+6ViipbN95Er
g8KtjXMQsu3EbSRi+7BO3J3zCWZmcubZH48TzqzS5CoABF30XXDFMyDYuASzG6bn
+8neIiyrX9LsHA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:40:06 2025 by rpki-client