Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
File: NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft (raw, json)
Hash identifier: QVwn7wXc8hzyQ+YkNMp5lBbCnNKeBZxVx9YiT2wTZRc=
Subject key identifier: 16:52:05:66:E4:44:1F:F1:8A:0E:6F:3E:5C:1B:01:19:1B:D7:05:67
Authority key identifier: 35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
Certificate issuer: /CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Certificate serial: 0199FD6B2717C288E3E19598927BDEE3947D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
Manifest number: 0BC7
Signing time: Sun 19 Oct 2025 17:01:21 +0000
Manifest this update: Sun 19 Oct 2025 17:01:21 +0000
Manifest next update: Mon 20 Oct 2025 17:01:21 +0000
Files and hashes: 1: NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl (hash: 23n9ebE8JgTtCwejCL/rRZLEVRH8Kuv2m7qex3pf/Co=)
2: Zk0y4tHHB8Yu3r49IrGLEovlzps.roa (hash: Z8BlFARu3PiIVKgAzCmvXp/n3Elo4eu1cJ/tXUB0sZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:27:17:c2:88:e3:e1:95:98:92:7b:de:e3:94:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Validity
Not Before: Oct 19 17:01:21 2025 GMT
Not After : Oct 20 17:01:21 2025 GMT
Subject: CN=16520566e4441ff18a0e6f3e5c1b01191bd70567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bd:c7:13:7b:3e:ba:01:a1:96:ca:aa:9b:bc:
18:83:6c:ff:ed:20:ad:b0:2e:51:78:c1:fd:de:e7:
ba:72:2a:84:ee:a3:e8:43:15:09:33:5f:4c:dc:61:
5b:22:67:f2:fa:45:69:22:24:25:9b:34:1a:47:a4:
6c:03:e2:d2:d3:e3:e2:47:76:22:8d:4d:64:3b:b6:
2e:a3:bd:34:d3:30:30:6b:e4:0b:0b:45:e8:66:9b:
c2:a0:e9:cd:41:a4:fd:b9:85:f7:36:09:70:b4:9b:
32:b2:d6:fc:0a:c5:5e:af:4a:38:39:08:6f:2d:7b:
b0:ec:52:33:3c:cc:cd:0e:3a:62:7d:21:c1:8d:62:
b8:37:da:97:20:19:92:0c:42:5f:25:c7:a5:57:69:
c0:f6:9c:15:99:b9:97:be:84:fc:22:72:dc:55:1c:
95:10:21:ab:a5:5a:49:0e:ea:c4:b7:cf:24:d4:39:
ce:83:b5:b5:f4:e6:4c:b3:e6:f5:56:bc:9d:1f:5f:
5c:a4:5a:33:64:6e:f4:d5:25:13:3e:d9:2a:91:9d:
14:66:8f:3c:0d:8f:24:b4:51:a4:80:b1:52:c7:68:
ef:ee:94:41:6d:25:8e:8c:79:7e:07:a3:7d:1c:5f:
ed:24:3d:35:be:bc:81:1f:f4:b3:bf:43:1d:b7:f0:
53:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:52:05:66:E4:44:1F:F1:8A:0E:6F:3E:5C:1B:01:19:1B:D7:05:67
X509v3 Authority Key Identifier:
keyid:35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f2:20:fe:ab:94:4c:69:03:6f:b9:1f:91:4e:7b:c8:82:f4:
89:82:b2:cd:d4:47:c6:9d:07:cc:e9:71:eb:00:da:68:48:9f:
f0:70:4c:f9:b5:10:6e:eb:cb:e4:39:d9:18:b5:91:cf:3b:8b:
96:4d:40:2f:69:6b:99:3b:0e:12:dd:dc:04:47:dd:8d:ac:9a:
7f:cb:0a:0a:68:31:f2:f9:6e:74:cf:03:83:a6:a9:f0:11:58:
e2:b0:d1:28:7b:16:8e:0c:52:6e:6d:1b:68:03:cb:89:4c:f3:
56:27:ae:1b:89:90:29:18:4b:15:14:86:7f:ec:52:50:7a:f0:
c6:cc:bf:0d:c8:e4:8d:36:89:61:70:12:dd:64:db:b1:ae:c5:
8a:69:03:87:7a:fa:56:48:ce:79:f4:47:47:8e:52:40:94:2c:
3a:e9:40:fd:cc:6a:40:bc:ea:a4:47:c0:6b:46:3e:6f:5d:8a:
2a:b2:0b:76:a8:eb:62:5e:c8:80:40:e0:2e:d1:71:d9:98:e6:
80:e3:b2:8d:a3:8f:3b:3f:e1:e0:bb:8d:f3:fd:0a:37:7f:72:
ee:1f:42:78:fe:0a:0a:84:7e:bf:c2:f6:8f:10:2e:5a:82:3c:
ca:44:37:57:7a:5d:38:58:20:2a:e1:dd:34:8f:78:aa:0f:7a:
7f:d8:84:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:28:04 2025 by rpki-client