Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
File: U_NZCAnRh_ezYfskzUP5P2ZLILM.mft (raw, json)
Hash identifier: eQ+kGiDvFfyQ7WlX3VD9wcibwT0j2HWaTrAN4Wmx4HI=
Subject key identifier: 75:30:7A:67:A0:48:3B:8F:DA:DF:59:C4:EE:DC:15:A4:3B:81:B9:28
Authority key identifier: 53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
Certificate issuer: /CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Certificate serial: 019A4D3CDEA63F4FDA69D058947D577AAAE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 05:00:25 +0000
Manifest this update: Tue 04 Nov 2025 05:00:25 +0000
Manifest next update: Wed 05 Nov 2025 05:00:25 +0000
Files and hashes: 1: 4yhrEPquDWqMWiUEurgxgpe4Z64.roa (hash: GAPEp0iDkhSK0QKol83Ga2o50iNkeUXCz5jUqWOb9Ow=)
2: 5piZhUc6B_Q8SXnCvmVdLn755tk.roa (hash: 1kX1fTcGnU3vqt6H68WNwGSWbpk3Ul9d3oLOLIk5xOI=)
3: 8nljJg7c24IFr_Sv-LV4LOMZqPI.roa (hash: deVXwXvj6xoqe5dfSwVOJXQZSoWKbMhfJNni40tWyZY=)
4: U_NZCAnRh_ezYfskzUP5P2ZLILM.crl (hash: rSOb4pW1Ejv/0pd7P+0KpXGpJBITDBDCyYPDj2oJSmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:de:a6:3f:4f:da:69:d0:58:94:7d:57:7a:aa:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Validity
Not Before: Nov 4 05:00:25 2025 GMT
Not After : Nov 5 05:00:25 2025 GMT
Subject: CN=75307a67a0483b8fdadf59c4eedc15a43b81b928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:87:75:55:76:62:ce:97:4d:40:11:d7:a7:6a:
b7:a7:8a:cf:1e:50:fe:15:e7:c4:e7:5d:7f:5d:09:
eb:7f:b4:fe:2b:97:fa:93:dd:cf:b2:e4:2f:b5:1d:
3c:89:c8:b2:8a:fd:44:6c:da:15:25:f1:a3:5c:05:
73:dc:cb:89:d5:ea:fb:a3:c2:62:ac:3e:73:91:8b:
8c:45:51:f9:14:ba:53:7a:71:ed:03:25:d8:02:00:
db:4a:ef:57:c3:d8:38:2e:f0:0e:49:6d:34:b5:26:
2e:7c:4d:b4:3c:4b:7a:82:ef:5a:71:0e:c0:d9:63:
f0:8c:bf:73:c7:cc:fc:15:76:aa:b0:51:c9:02:3a:
fe:85:b7:d1:fe:d2:ff:7c:21:23:5b:9f:35:26:ae:
4d:04:41:f3:8d:fc:69:1b:96:8f:62:db:bc:5d:50:
96:9e:52:34:14:b1:0c:b6:12:0b:5a:5e:27:3c:d5:
79:87:ce:ec:ec:c4:e1:5c:33:3f:30:7c:89:7f:6f:
1e:a2:45:5e:90:fa:74:ec:95:b2:2f:0f:89:08:00:
fd:d9:59:1f:94:51:31:d5:09:fe:57:a4:50:2d:03:
d0:cd:c0:b2:52:7d:4c:03:b5:5e:f3:96:0a:8a:b6:
46:03:bd:e8:7c:fa:f0:c1:98:fd:ee:82:fd:90:10:
e9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:30:7A:67:A0:48:3B:8F:DA:DF:59:C4:EE:DC:15:A4:3B:81:B9:28
X509v3 Authority Key Identifier:
keyid:53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:49:99:ed:f4:34:16:c7:85:ec:4d:c6:4c:bc:02:ec:13:b3:
57:32:6c:a4:78:3e:23:a2:a4:f8:01:11:4f:a5:29:2b:ba:ed:
a6:95:68:a1:73:a6:a8:1f:a8:58:f8:c2:1e:a4:e9:83:82:89:
ee:b9:b2:e6:9a:ed:d7:3b:84:59:96:5a:a0:fe:f7:61:42:fc:
79:2b:3f:bd:16:ac:1c:6f:a6:6a:34:a5:60:54:a7:65:99:16:
02:aa:12:09:33:42:d1:82:5d:95:e9:89:b6:29:20:26:64:4d:
eb:5f:12:85:8e:a4:0a:86:34:87:3a:b0:77:e3:cc:b8:39:75:
95:aa:6f:8c:28:d2:77:45:cf:5e:5f:a8:48:42:cb:8d:95:9f:
13:44:3a:72:b8:bf:73:1c:df:b4:22:69:3e:f7:3e:20:d0:19:
4d:53:ff:65:fc:5d:6d:05:bc:2d:2d:9f:cf:dc:bf:2e:b1:af:
b9:7f:15:0e:76:24:46:c9:d8:50:c2:70:98:3f:f5:b3:be:cf:
ce:89:d6:cf:c2:1d:2b:38:09:8f:1a:41:f4:9d:40:4c:6c:b8:
c2:86:68:2c:af:0e:71:f7:5f:28:6c:13:c0:0c:b6:38:d4:2c:
45:e6:68:f1:7e:74:78:d5:aa:d7:92:54:19:2a:87:5c:7e:25:
00:1a:31:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPN6mP0/aadBYlH1XeqrmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZjM1OTA4MDlkMTg3ZjdiMzYxZmIyNGNkNDNmOTNmNjY0
YjIwYjMwHhcNMjUxMTA0MDUwMDI1WhcNMjUxMTA1MDUwMDI1WjAzMTEwLwYDVQQD
Eyg3NTMwN2E2N2EwNDgzYjhmZGFkZjU5YzRlZWRjMTVhNDNiODFiOTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqId1VXZizpdNQBHXp2q3p4rPHlD+
FefE511/XQnrf7T+K5f6k93PsuQvtR08iciyiv1EbNoVJfGjXAVz3MuJ1er7o8Ji
rD5zkYuMRVH5FLpTenHtAyXYAgDbSu9Xw9g4LvAOSW00tSYufE20PEt6gu9acQ7A
2WPwjL9zx8z8FXaqsFHJAjr+hbfR/tL/fCEjW581Jq5NBEHzjfxpG5aPYtu8XVCW
nlI0FLEMthILWl4nPNV5h87s7MThXDM/MHyJf28eokVekPp07JWyLw+JCAD92Vkf
lFEx1Qn+V6RQLQPQzcCyUn1MA7Ve85YKirZGA73ofPrwwZj97oL9kBDpqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHUwemegSDuP2t9ZxO7cFaQ7gbkoMB8GA1UdIwQY
MBaAFFPzWQgJ0Yf3s2H7JM1D+T9mSyCzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVV9OWkNBblJoX2V6WWZza3pVUDVQMlpMSUxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9kZTYzODMtNGFkNS00NTdiLTk1M2Mt
YTc3NmZlZGU5OTA1LzEvVV9OWkNBblJoX2V6WWZza3pVUDVQMlpMSUxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9kZTYzODMtNGFkNS00NTdiLTk1M2MtYTc3NmZlZGU5OTA1
LzEvVV9OWkNBblJoX2V6WWZza3pVUDVQMlpMSUxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAckmZ7fQ0
FseF7E3GTLwC7BOzVzJspHg+I6Kk+AERT6UpK7rtppVooXOmqB+oWPjCHqTpg4KJ
7rmy5prt1zuEWZZaoP73YUL8eSs/vRasHG+majSlYFSnZZkWAqoSCTNC0YJdlemJ
tikgJmRN618ShY6kCoY0hzqwd+PMuDl1lapvjCjSd0XPXl+oSELLjZWfE0Q6cri/
cxzftCJpPvc+INAZTVP/ZfxdbQW8LS2fz9y/LrGvuX8VDnYkRsnYUMJwmD/1s77P
zonWz8IdKzgJjxpB9J1ATGy4woZoLK8OcfdfKGwTwAy2ONQsReZo8X50eNWq15JU
GSqHXH4lABoxDQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:58 2025 by rpki-client