Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
File: NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft (raw, json)
Hash identifier: LRzCzyhsI8BMkSrNKZ1+tAtCgLp6hm9knIgYCVcqr9Q=
Subject key identifier: 88:7F:A7:C6:E4:C5:AD:6B:B8:2F:70:3D:98:87:6B:3D:72:CC:CF:55
Authority key identifier: 35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
Certificate issuer: /CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Certificate serial: 0198D404590AEBE393EE04D6D73A0A1D5016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
Manifest number: 0B2D
Signing time: Fri 22 Aug 2025 23:01:51 +0000
Manifest this update: Fri 22 Aug 2025 23:01:51 +0000
Manifest next update: Sat 23 Aug 2025 23:01:51 +0000
Files and hashes: 1: NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl (hash: zz5A0MGhfUPMpOdZhTjpg3QyM0w5tl+W7ljRceNN6cQ=)
2: Zk0y4tHHB8Yu3r49IrGLEovlzps.roa (hash: Z8BlFARu3PiIVKgAzCmvXp/n3Elo4eu1cJ/tXUB0sZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:59:0a:eb:e3:93:ee:04:d6:d7:3a:0a:1d:50:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Validity
Not Before: Aug 22 23:01:51 2025 GMT
Not After : Aug 23 23:01:51 2025 GMT
Subject: CN=887fa7c6e4c5ad6bb82f703d98876b3d72cccf55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:eb:cb:74:29:19:9e:ef:53:bb:ab:f0:de:0b:
ef:25:46:86:c0:d5:9a:e1:35:78:50:68:87:9e:97:
42:37:bd:7b:07:9c:53:92:cb:55:2b:77:38:49:d3:
b3:d6:e2:33:99:d7:5f:e8:98:9f:a9:27:4f:8b:ab:
00:c2:7b:ab:40:67:fc:68:12:19:ee:ce:b2:0e:47:
ad:86:8c:3c:46:de:78:cd:49:e4:1e:e3:23:6f:7d:
f6:aa:1a:aa:47:fa:ca:7a:1e:02:c2:1c:b6:12:98:
31:6f:a1:df:be:27:d2:bd:f6:53:05:c2:6a:ed:8b:
65:3a:61:0a:f5:18:b4:0f:2f:69:39:73:73:cd:39:
47:3e:7f:c1:0a:87:fa:18:3a:66:df:b6:d7:d2:23:
b3:0b:26:52:fb:37:eb:f9:61:d4:4f:6a:b1:a3:ae:
fd:00:a3:ea:e1:be:58:fa:fd:81:2e:fe:0e:f9:c5:
71:8d:58:fa:0f:7d:25:5b:1c:5a:53:62:ae:16:2d:
48:c1:48:5d:c6:0f:e5:48:d6:b5:44:8d:7c:58:73:
8d:49:c2:7b:3a:0e:c3:2e:6c:91:c5:5c:7e:7a:30:
29:46:ce:6d:e8:84:9e:75:0e:27:08:84:85:9b:b6:
b8:3b:4e:5b:50:f1:43:a4:f2:6d:06:d7:0e:dd:a3:
49:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7F:A7:C6:E4:C5:AD:6B:B8:2F:70:3D:98:87:6B:3D:72:CC:CF:55
X509v3 Authority Key Identifier:
keyid:35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:55:69:42:2d:8e:08:65:01:e4:5a:54:bb:a5:2c:ce:26:f7:
f2:2a:66:77:dc:36:69:57:e7:53:c5:33:47:7c:e4:1a:be:56:
58:b3:98:cc:69:6b:94:2e:bd:4a:c4:0c:5b:c4:cd:06:19:df:
e8:74:cb:65:8a:98:90:a3:32:5e:cc:94:0b:5a:3e:a4:33:55:
f3:43:dc:24:27:7f:cb:6d:7f:d6:f3:92:ff:ed:01:ca:e5:8e:
33:4c:eb:01:93:c5:12:f1:d1:d0:f4:e0:7b:02:08:1e:43:c5:
db:36:0c:46:4a:ef:5c:4c:eb:54:83:07:de:0d:69:f7:ef:76:
c4:a8:b4:b0:69:43:5c:9d:49:f4:e7:fa:df:d9:86:7a:31:b6:
07:80:a8:f6:c4:09:8c:aa:af:e8:17:51:4c:ad:5c:26:97:09:
cc:a1:cd:cf:a1:68:25:63:f6:04:53:a2:44:d7:eb:34:f3:f3:
de:8d:c3:f6:b5:96:c1:72:8c:d1:41:9f:53:8b:e9:b1:55:79:
6a:35:2c:e4:50:f0:5a:5f:3b:59:8b:67:be:40:d8:74:1a:27:
18:85:1e:0c:eb:89:d1:e5:4f:5e:41:8c:63:39:42:c1:c8:97:
83:45:01:74:22:a0:1e:4d:44:f7:42:50:2d:ab:e8:82:33:11:
f1:36:1e:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUBFkK6+OT7gTW1zoKHVAWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MTY1MmI4MzhmZjJkOTY3MmFjOGNhNjZiYTY2MGRkNGU0
NWQ2OTkwHhcNMjUwODIyMjMwMTUxWhcNMjUwODIzMjMwMTUxWjAzMTEwLwYDVQQD
Eyg4ODdmYTdjNmU0YzVhZDZiYjgyZjcwM2Q5ODg3NmIzZDcyY2NjZjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuvLdCkZnu9Tu6vw3gvvJUaGwNWa
4TV4UGiHnpdCN717B5xTkstVK3c4SdOz1uIzmddf6JifqSdPi6sAwnurQGf8aBIZ
7s6yDkethow8Rt54zUnkHuMjb332qhqqR/rKeh4Cwhy2Epgxb6HfvifSvfZTBcJq
7YtlOmEK9Ri0Dy9pOXNzzTlHPn/BCof6GDpm37bX0iOzCyZS+zfr+WHUT2qxo679
AKPq4b5Y+v2BLv4O+cVxjVj6D30lWxxaU2KuFi1IwUhdxg/lSNa1RI18WHONScJ7
Og7DLmyRxVx+ejApRs5t6ISedQ4nCISFm7a4O05bUPFDpPJtBtcO3aNJ2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIh/p8bkxa1ruC9wPZiHaz1yzM9VMB8GA1UdIwQY
MBaAFDUWUrg4/y2WcqyMpmumYN1ORdaZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlJaU3VEal9MWlp5ckl5bWE2WmczVTVGMXBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi85Y2U2MGItY2JjNC00MGQ5LTk4YWQt
MWNkNTA2MDcwYmI1LzEvTlJaU3VEal9MWlp5ckl5bWE2WmczVTVGMXBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi85Y2U2MGItY2JjNC00MGQ5LTk4YWQtMWNkNTA2MDcwYmI1
LzEvTlJaU3VEal9MWlp5ckl5bWE2WmczVTVGMXBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhVVpQi2O
CGUB5FpUu6Uszib38ipmd9w2aVfnU8UzR3zkGr5WWLOYzGlrlC69SsQMW8TNBhnf
6HTLZYqYkKMyXsyUC1o+pDNV80PcJCd/y21/1vOS/+0ByuWOM0zrAZPFEvHR0PTg
ewIIHkPF2zYMRkrvXEzrVIMH3g1p9+92xKi0sGlDXJ1J9Of639mGejG2B4Co9sQJ
jKqv6BdRTK1cJpcJzKHNz6FoJWP2BFOiRNfrNPPz3o3D9rWWwXKM0UGfU4vpsVV5
ajUs5FDwWl87WYtnvkDYdBonGIUeDOuJ0eVPXkGMYzlCwciXg0UBdCKgHk1E90JQ
LavogjMR8TYe4Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:54 2025 by rpki-client