Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
File: nzcg6XD6oOB_UKY4nnrlOvpDnas.mft (raw, json)
Hash identifier: CThDQiFWfFFaqaZ22c16vD+dp52ItyI+sj4xirVxz4c=
Subject key identifier: D9:4D:33:7A:71:0E:09:99:8B:ED:2E:6F:16:52:7A:A4:F5:2F:82:7E
Authority key identifier: 9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB
Certificate issuer: /CN=9f3720e970faa0e07f50a6389e7ae53afa439dab
Certificate serial: 019769CEB442A539F57DDFB0699D97ADC65B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
Manifest number: 1592
Signing time: Fri 13 Jun 2025 15:00:43 +0000
Manifest this update: Fri 13 Jun 2025 15:00:43 +0000
Manifest next update: Sat 14 Jun 2025 15:00:43 +0000
Files and hashes: 1: Etd-zR5nQJ_3oZWsvX_yh9qZs04.roa (hash: Va9UidVPtYR8CQHobQQrWe+S/Z2ABdjjbhF7ggqh2M0=)
2: nzcg6XD6oOB_UKY4nnrlOvpDnas.crl (hash: YnnUIniJsIMTB43NEyCJWWZiJuNXxjPH11MMaGf3M2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:b4:42:a5:39:f5:7d:df:b0:69:9d:97:ad:c6:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3720e970faa0e07f50a6389e7ae53afa439dab
Validity
Not Before: Jun 13 15:00:43 2025 GMT
Not After : Jun 14 15:00:43 2025 GMT
Subject: CN=d94d337a710e09998bed2e6f16527aa4f52f827e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:18:20:16:e0:41:f3:88:bc:96:8b:e1:fe:dc:
b8:1d:2d:6f:16:1c:24:4c:dc:59:c8:3a:f4:71:9e:
0e:e3:91:3f:be:63:63:ba:90:71:42:2c:ea:f5:2d:
ba:41:b8:57:a3:48:cf:f3:4e:ac:8e:9a:65:21:95:
d4:a7:f3:88:b9:5e:f8:29:8f:5f:1f:fe:d3:be:f3:
94:54:cf:5f:43:13:d2:c1:cd:d0:15:05:36:7c:6f:
2b:ef:80:f2:e2:f9:cd:b5:99:7b:5c:1f:ba:58:97:
8f:ee:a9:83:07:8f:ca:9c:a4:72:1d:42:91:be:0a:
ba:b6:e3:04:3b:00:e3:82:a5:5e:30:bb:74:c6:9d:
f0:92:98:16:70:d7:2e:1d:89:6c:28:fa:e1:ed:9f:
25:3b:a5:6b:ac:92:94:95:dc:05:ff:c2:27:f7:f1:
0c:ef:5f:69:d0:67:6b:8a:f0:85:1c:1a:cf:ad:44:
df:93:93:de:1e:89:ec:cc:12:43:b3:25:17:bd:62:
bd:ce:7d:5f:75:85:cf:68:5c:72:57:52:37:ce:dd:
07:e0:da:0d:8a:0b:85:85:d5:4a:a2:e1:ad:a6:15:
30:b3:73:5d:e6:b6:3a:13:92:a4:e4:16:67:63:e1:
27:52:34:b7:9a:c0:3d:10:68:26:33:35:90:56:a5:
6b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4D:33:7A:71:0E:09:99:8B:ED:2E:6F:16:52:7A:A4:F5:2F:82:7E
X509v3 Authority Key Identifier:
keyid:9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:3b:2f:7c:f9:36:1e:fb:26:13:8e:59:70:f9:c9:b5:75:86:
a0:0d:e8:78:0d:4a:2c:c9:c9:13:6d:56:43:20:ac:6c:56:55:
f3:5e:32:b6:75:c0:36:5f:09:f4:09:4e:0e:dc:63:ba:14:fe:
4f:34:c6:42:ab:c5:74:84:8a:13:22:d0:32:a1:08:f8:bd:95:
2a:3d:be:37:0e:39:a8:22:7e:a6:d4:74:65:14:47:96:f7:45:
b0:19:ff:55:4a:90:95:2b:d1:17:b2:94:86:a1:85:9d:ee:9c:
ff:37:40:bc:4b:27:3a:e4:1a:fb:93:e6:18:7e:4a:9c:ee:d1:
72:d4:d7:dd:ec:26:af:81:18:d3:49:2d:76:87:82:f6:c5:d2:
fd:87:8d:c0:76:0d:d4:c2:4b:81:d6:3b:3c:ea:d8:1a:76:14:
5f:c5:e5:e9:28:0f:93:78:38:7b:2b:93:7a:3f:11:3a:9a:11:
a3:9d:c5:4e:c7:1c:1a:b2:48:16:db:f2:a1:c7:bd:ca:4b:2b:
d5:2e:ce:2c:5a:a6:75:50:9c:1a:0a:49:9e:49:d3:1f:82:27:
a6:19:b8:e9:3d:68:c4:76:f4:d9:f6:a5:7f:fd:73:79:d9:58:
72:91:be:9b:f7:d8:78:11:10:55:ee:a0:22:cf:f3:dc:bf:c2:
74:73:a9:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpzrRCpTn1fd+waZ2XrcZbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMzcyMGU5NzBmYWEwZTA3ZjUwYTYzODllN2FlNTNhZmE0
MzlkYWIwHhcNMjUwNjEzMTUwMDQzWhcNMjUwNjE0MTUwMDQzWjAzMTEwLwYDVQQD
EyhkOTRkMzM3YTcxMGUwOTk5OGJlZDJlNmYxNjUyN2FhNGY1MmY4MjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxggFuBB84i8lovh/ty4HS1vFhwk
TNxZyDr0cZ4O45E/vmNjupBxQizq9S26QbhXo0jP806sjpplIZXUp/OIuV74KY9f
H/7TvvOUVM9fQxPSwc3QFQU2fG8r74Dy4vnNtZl7XB+6WJeP7qmDB4/KnKRyHUKR
vgq6tuMEOwDjgqVeMLt0xp3wkpgWcNcuHYlsKPrh7Z8lO6VrrJKUldwF/8In9/EM
719p0GdrivCFHBrPrUTfk5PeHonszBJDsyUXvWK9zn1fdYXPaFxyV1I3zt0H4NoN
iguFhdVKouGtphUws3Nd5rY6E5Kk5BZnY+EnUjS3msA9EGgmMzWQVqVrqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNlNM3pxDgmZi+0ubxZSeqT1L4J+MB8GA1UdIwQY
MBaAFJ83IOlw+qDgf1CmOJ565Tr6Q52rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnpjZzZYRDZvT0JfVUtZNG5ucmxPdnBEbmFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9iYjdjMGUtZWU2OC00YmY4LWJiMzQt
MTJlNmEwZDQzMThhLzEvbnpjZzZYRDZvT0JfVUtZNG5ucmxPdnBEbmFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9iYjdjMGUtZWU2OC00YmY4LWJiMzQtMTJlNmEwZDQzMThh
LzEvbnpjZzZYRDZvT0JfVUtZNG5ucmxPdnBEbmFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeDsvfPk2
HvsmE45ZcPnJtXWGoA3oeA1KLMnJE21WQyCsbFZV814ytnXANl8J9AlODtxjuhT+
TzTGQqvFdISKEyLQMqEI+L2VKj2+Nw45qCJ+ptR0ZRRHlvdFsBn/VUqQlSvRF7KU
hqGFne6c/zdAvEsnOuQa+5PmGH5KnO7RctTX3ewmr4EY00ktdoeC9sXS/YeNwHYN
1MJLgdY7POrYGnYUX8Xl6SgPk3g4eyuTej8ROpoRo53FTsccGrJIFtvyoce9yksr
1S7OLFqmdVCcGgpJnknTH4Inphm46T1oxHb02falf/1zedlYcpG+m/fYeBEQVe6g
Is/z3L/CdHOphw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:46:59 2025 by rpki-client