Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
File: NztHo87nmYKtsXA0HQICYCczICM.mft (raw, json)
Hash identifier: ACKJPqgEFqL5Hl5/sR/IJw/ckGggMVOHsNW5wT6rSU0=
Subject key identifier: 8D:7F:13:23:CC:17:C3:9D:69:54:EB:3A:64:F6:68:ED:A8:4D:83:FF
Authority key identifier: 37:3B:47:A3:CE:E7:99:82:AD:B1:70:34:1D:02:02:60:27:33:20:23
Certificate issuer: /CN=373b47a3cee79982adb170341d02026027332023
Certificate serial: 0199FEB4AE393F9B1CAD6233C7DC663F9EEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 23:01:17 +0000
Manifest this update: Sun 19 Oct 2025 23:01:17 +0000
Manifest next update: Mon 20 Oct 2025 23:01:17 +0000
Files and hashes: 1: 44PWl9t-VK2hhZNHr5AmomvoGFc.roa (hash: OxQ7QHN27yQWahrAlORJzxbYRAyj5Alk9/N2TAEqxrY=)
2: NztHo87nmYKtsXA0HQICYCczICM.crl (hash: j3mbKSjVQi8+gNUe8mpB4yCzIot7wonxCf0eoaZRXxU=)
3: fHM2AB9lWMdrr6W98wCcBfFFZto.roa (hash: O5xk5dJ9bNLjoHECEnZnVJ7Que2qp5xFQYolbd9r+sI=)
4: yGyQiv41kYE21uqhtuih0OLSi9I.roa (hash: tdu5vnXKQDyjaj/70REfOS/T9RJiHmxdfg/dwymFlGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:ae:39:3f:9b:1c:ad:62:33:c7:dc:66:3f:9e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=373b47a3cee79982adb170341d02026027332023
Validity
Not Before: Oct 19 23:01:17 2025 GMT
Not After : Oct 20 23:01:17 2025 GMT
Subject: CN=8d7f1323cc17c39d6954eb3a64f668eda84d83ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a2:2b:7e:89:dd:c2:ff:84:50:7b:cb:2c:c9:
2c:55:30:88:aa:61:af:a3:43:0b:3f:45:d6:b0:c8:
dd:f1:da:ee:26:13:18:af:ee:44:9e:91:d5:86:d0:
42:86:92:c4:70:af:f8:8a:d8:27:6f:7d:17:dd:99:
44:b4:03:3f:ad:25:d2:a7:4b:17:ee:37:7b:0a:4f:
f5:2b:f3:08:a7:78:61:10:29:8c:ac:1c:06:47:6d:
a3:6b:bc:ca:dc:9b:e8:a8:b6:6e:3c:e4:f8:2d:31:
0f:a2:bd:94:01:8c:04:dd:01:77:c0:0a:41:a0:3d:
6b:59:ae:43:d7:2a:76:7c:07:54:ab:a7:29:6c:53:
a9:94:b9:bb:51:0f:3b:e0:27:84:9a:5f:a5:8a:b6:
80:20:92:44:81:86:ec:8c:51:42:6d:03:c7:da:a9:
b2:1c:41:6f:65:05:24:e5:6c:38:b0:71:c9:76:f6:
05:4c:5a:cd:5a:bc:3b:76:bb:35:e3:d1:97:bf:f7:
dd:db:d4:a9:2b:94:5a:84:98:e2:a7:43:47:04:7f:
2d:55:91:d9:86:e7:92:8c:13:84:8e:46:ce:69:2a:
a9:c6:9a:ec:78:51:5e:ef:58:0c:62:61:57:68:08:
6b:5b:9a:80:7c:cd:be:8c:10:04:9b:a2:a0:80:cf:
51:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7F:13:23:CC:17:C3:9D:69:54:EB:3A:64:F6:68:ED:A8:4D:83:FF
X509v3 Authority Key Identifier:
keyid:37:3B:47:A3:CE:E7:99:82:AD:B1:70:34:1D:02:02:60:27:33:20:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f2:d0:d6:09:06:ee:24:53:24:cc:17:dd:28:ee:44:34:7c:
99:a6:b9:83:09:80:87:28:12:eb:17:5e:92:bf:c8:5d:40:a8:
05:a8:0d:93:6d:33:e9:f8:a8:a3:ae:67:50:c9:61:35:f9:7d:
f1:7b:90:32:82:fd:39:42:73:09:25:59:40:f3:47:9f:ea:35:
98:23:f4:29:a1:65:58:1c:14:fd:fd:e2:28:da:d9:d6:7f:cd:
b9:25:33:b5:ac:d2:6c:77:a0:d1:ef:73:49:d1:0e:64:64:1f:
56:62:e4:b9:89:f4:bf:2f:80:14:a5:96:e1:27:d6:34:5b:a0:
25:2d:48:48:cb:8a:d3:28:96:7a:67:8e:6c:9a:76:5b:db:6f:
57:df:da:84:42:25:85:ad:19:8f:93:d2:af:9c:9b:e0:a8:e6:
29:81:2c:92:36:6e:68:b4:1a:64:f6:a3:d5:17:d9:52:46:99:
bc:0d:2f:82:33:91:05:19:fc:0f:65:1d:38:67:6e:a9:60:25:
3a:97:0a:7c:53:b9:52:1f:90:5c:6a:b1:b3:9a:6b:59:e7:c2:
08:7d:83:64:78:0d:5e:4e:24:2f:22:50:2b:87:93:f1:ff:4a:
bd:ac:c6:71:13:57:b9:bc:df:cb:bb:d6:cc:f0:66:98:88:65:
73:8d:f5:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+tK45P5scrWIzx9xmP57vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3M2I0N2EzY2VlNzk5ODJhZGIxNzAzNDFkMDIwMjYwMjcz
MzIwMjMwHhcNMjUxMDE5MjMwMTE3WhcNMjUxMDIwMjMwMTE3WjAzMTEwLwYDVQQD
Eyg4ZDdmMTMyM2NjMTdjMzlkNjk1NGViM2E2NGY2NjhlZGE4NGQ4M2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqIrfondwv+EUHvLLMksVTCIqmGv
o0MLP0XWsMjd8druJhMYr+5EnpHVhtBChpLEcK/4itgnb30X3ZlEtAM/rSXSp0sX
7jd7Ck/1K/MIp3hhECmMrBwGR22ja7zK3JvoqLZuPOT4LTEPor2UAYwE3QF3wApB
oD1rWa5D1yp2fAdUq6cpbFOplLm7UQ874CeEml+liraAIJJEgYbsjFFCbQPH2qmy
HEFvZQUk5Ww4sHHJdvYFTFrNWrw7drs149GXv/fd29SpK5RahJjip0NHBH8tVZHZ
hueSjBOEjkbOaSqpxprseFFe71gMYmFXaAhrW5qAfM2+jBAEm6KggM9RywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1/EyPMF8OdaVTrOmT2aO2oTYP/MB8GA1UdIwQY
MBaAFDc7R6PO55mCrbFwNB0CAmAnMyAjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnp0SG84N25tWUt0c1hBMEhRSUNZQ2N6SUNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC83YzJhMTUtYWM0ZC00NjRhLWE3N2Ut
MzJmOWEyODJmNTZjLzEvTnp0SG84N25tWUt0c1hBMEhRSUNZQ2N6SUNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC83YzJhMTUtYWM0ZC00NjRhLWE3N2UtMzJmOWEyODJmNTZj
LzEvTnp0SG84N25tWUt0c1hBMEhRSUNZQ2N6SUNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB/LQ1gkG
7iRTJMwX3SjuRDR8maa5gwmAhygS6xdekr/IXUCoBagNk20z6fioo65nUMlhNfl9
8XuQMoL9OUJzCSVZQPNHn+o1mCP0KaFlWBwU/f3iKNrZ1n/NuSUztazSbHeg0e9z
SdEOZGQfVmLkuYn0vy+AFKWW4SfWNFugJS1ISMuK0yiWemeObJp2W9tvV9/ahEIl
ha0Zj5PSr5yb4KjmKYEskjZuaLQaZPaj1RfZUkaZvA0vgjORBRn8D2UdOGduqWAl
OpcKfFO5Uh+QXGqxs5prWefCCH2DZHgNXk4kLyJQK4eT8f9KvazGcRNXubzfy7vW
zPBmmIhlc431Vg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:28:25 2025 by rpki-client