Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
File: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft (raw, json)
Hash identifier: h4B4zKitoWhCdhHwiqr3XyND34lLFxmUsaLa5hxSWss=
Subject key identifier: 4E:AA:82:BC:2D:29:7D:DC:26:3E:30:4C:F0:B9:24:61:2C:DB:2C:43
Authority key identifier: 35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
Certificate issuer: /CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Certificate serial: 0199FBEB3B594BDA69C1841DC82E88C365CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:02:01 +0000
Manifest this update: Sun 19 Oct 2025 10:02:01 +0000
Manifest next update: Mon 20 Oct 2025 10:02:01 +0000
Files and hashes: 1: Jhw9faAWoEdqP1e__8w7b6zkmPk.roa (hash: TQENvT9b218+4xF+VAk4clIU0JMsKTFbzJxIDRXuwJ4=)
2: NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl (hash: lcBL0QuALGkxfQvKn93+PewmwaHD1TNjxjGMo/oPy+8=)
3: fubcea_39IkkaWowT_0PbtN75oM.roa (hash: b26RPXGBBJCeMiSKu69amdDTbZc6gUFdxgY2Yx3wVnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:3b:59:4b:da:69:c1:84:1d:c8:2e:88:c3:65:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=353e3f28e647e92ac8a710c305c2e21b623edc1c
Validity
Not Before: Oct 19 10:02:01 2025 GMT
Not After : Oct 20 10:02:01 2025 GMT
Subject: CN=4eaa82bc2d297ddc263e304cf0b924612cdb2c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:32:97:9f:63:4a:ee:44:80:ed:74:62:5b:2b:
8a:1f:13:60:02:c0:8d:58:67:4f:7f:ce:d8:91:95:
ab:e2:8f:85:1f:97:89:62:36:39:e3:23:2b:b6:c5:
5c:f5:c9:33:d7:68:93:2f:8d:ce:c7:9f:cb:fa:61:
51:61:e7:a2:66:1d:b6:fb:a5:b6:6a:21:84:6a:9a:
e6:75:54:59:1e:f9:58:0e:32:9e:3a:4d:be:74:50:
43:e9:c4:97:16:d5:06:07:85:dc:3c:6b:93:4e:06:
42:58:42:f1:a6:81:2f:ce:0a:9b:49:14:fb:44:65:
ca:bc:dc:11:dd:6c:a8:d3:dc:b2:6b:d9:8e:8f:1e:
32:25:5d:92:10:17:8d:8e:b3:1c:1c:07:a9:94:1c:
f2:72:a2:61:7a:ba:94:77:5b:17:5c:ed:bd:11:01:
1f:4c:9f:de:d6:02:05:e3:45:8d:03:be:55:d5:d4:
25:f0:db:ed:8f:ad:0a:1a:e3:9a:cc:77:28:b9:8e:
17:07:09:e1:46:2c:ee:b6:93:b8:3f:c3:5b:6d:7e:
66:ee:bd:0a:46:34:51:e7:c2:18:ef:26:67:e9:15:
77:aa:c8:71:e3:5b:49:6a:24:2d:93:c3:97:b2:09:
b9:34:34:49:30:fb:d1:b9:7b:e2:ad:66:24:9a:b5:
fb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AA:82:BC:2D:29:7D:DC:26:3E:30:4C:F0:B9:24:61:2C:DB:2C:43
X509v3 Authority Key Identifier:
keyid:35:3E:3F:28:E6:47:E9:2A:C8:A7:10:C3:05:C2:E2:1B:62:3E:DC:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/767933-4a73-4b2f-ac84-daca26de6f7b/1/NT4_KOZH6SrIpxDDBcLiG2I-3Bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:7d:64:0c:1c:2a:9c:84:44:66:ee:0f:c9:84:d6:d6:b7:c6:
29:90:57:87:c0:ab:32:5e:69:eb:78:ae:e8:be:2d:d3:fe:b6:
2d:e6:21:85:88:fa:88:bd:4f:9f:fa:f9:34:1b:a2:70:f7:e2:
9c:57:5c:a7:86:bb:b0:14:01:ec:1e:dc:f8:de:c7:c7:fb:2b:
16:c0:e6:13:56:fa:17:2d:2e:a5:55:a5:4f:29:5e:e7:c9:75:
80:7c:3e:dd:53:18:15:ba:57:8d:b3:8d:d5:b5:0e:55:01:27:
75:ee:61:d2:9a:41:89:b0:c9:dc:81:eb:05:a5:f7:99:f1:24:
80:bd:da:a5:ba:a8:59:f9:d0:89:8b:27:5c:09:ac:07:32:f4:
b0:12:08:ad:01:eb:26:84:6a:27:32:bd:86:1f:62:c8:ec:59:
5b:b4:ee:84:3c:32:b0:4d:7d:73:8b:12:bb:a2:76:6a:ed:63:
06:08:22:bd:41:26:77:62:69:02:63:77:b0:11:41:e7:e6:d4:
a2:c2:7d:95:a7:92:1b:72:66:16:94:51:2e:20:de:99:06:19:
07:74:22:a2:c5:a5:e2:77:11:45:24:e5:cf:b5:b6:11:61:90:
28:47:4e:a2:db:e9:80:76:84:ac:4c:1c:b1:28:5e:37:7d:1f:
e3:66:40:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76ztZS9ppwYQdyC6Iw2XMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1M2UzZjI4ZTY0N2U5MmFjOGE3MTBjMzA1YzJlMjFiNjIz
ZWRjMWMwHhcNMjUxMDE5MTAwMjAxWhcNMjUxMDIwMTAwMjAxWjAzMTEwLwYDVQQD
Eyg0ZWFhODJiYzJkMjk3ZGRjMjYzZTMwNGNmMGI5MjQ2MTJjZGIyYzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzKXn2NK7kSA7XRiWyuKHxNgAsCN
WGdPf87YkZWr4o+FH5eJYjY54yMrtsVc9ckz12iTL43Ox5/L+mFRYeeiZh22+6W2
aiGEaprmdVRZHvlYDjKeOk2+dFBD6cSXFtUGB4XcPGuTTgZCWELxpoEvzgqbSRT7
RGXKvNwR3Wyo09yya9mOjx4yJV2SEBeNjrMcHAeplBzycqJherqUd1sXXO29EQEf
TJ/e1gIF40WNA75V1dQl8Nvtj60KGuOazHcouY4XBwnhRizutpO4P8NbbX5m7r0K
RjRR58IY7yZn6RV3qshx41tJaiQtk8OXsgm5NDRJMPvRuXvirWYkmrX7rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE6qgrwtKX3cJj4wTPC5JGEs2yxDMB8GA1UdIwQY
MBaAFDU+PyjmR+kqyKcQwwXC4htiPtwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlQ0X0tPWkg2U3JJcHhEREJjTGlHMkktM0J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83Njc5MzMtNGE3My00YjJmLWFjODQt
ZGFjYTI2ZGU2ZjdiLzEvTlQ0X0tPWkg2U3JJcHhEREJjTGlHMkktM0J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi83Njc5MzMtNGE3My00YjJmLWFjODQtZGFjYTI2ZGU2Zjdi
LzEvTlQ0X0tPWkg2U3JJcHhEREJjTGlHMkktM0J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIX1kDBwq
nIREZu4PyYTW1rfGKZBXh8CrMl5p63iu6L4t0/62LeYhhYj6iL1Pn/r5NBuicPfi
nFdcp4a7sBQB7B7c+N7Hx/srFsDmE1b6Fy0upVWlTyle58l1gHw+3VMYFbpXjbON
1bUOVQEnde5h0ppBibDJ3IHrBaX3mfEkgL3apbqoWfnQiYsnXAmsBzL0sBIIrQHr
JoRqJzK9hh9iyOxZW7TuhDwysE19c4sSu6J2au1jBggivUEmd2JpAmN3sBFB5+bU
osJ9laeSG3JmFpRRLiDemQYZB3QiosWl4ncRRSTlz7W2EWGQKEdOotvpgHaErEwc
sSheN30f42ZApw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:39 2025 by rpki-client