Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
File: nzEukpe8HSfr60dt6g7hXddWVC0.mft (raw, json)
Hash identifier: DqR+xSgNvunoshVV2CDRKUK0vsg5PzaRQBjT23xzYkQ=
Subject key identifier: D2:9A:9B:16:14:90:D1:B3:E5:76:DE:E3:C3:31:EB:F7:C8:7C:70:F7
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 0197B88F87D14276922ADB77ADDB34FF0E07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
Manifest number: 0C4F
Signing time: Sat 28 Jun 2025 22:01:43 +0000
Manifest this update: Sat 28 Jun 2025 22:01:43 +0000
Manifest next update: Sun 29 Jun 2025 22:01:43 +0000
Files and hashes: 1: 1-YKY-kDb-ok-O2t52erxOSFI9tY.roa (hash: Puf+xKue+984oQxVfH82nttD3pZrp9rN15gRLEzYPtg=)
2: 9DNpUDfjfX1cw67GoTejssp0I60.roa (hash: waZpM47Y+Uz4d9MPb5IIUjKVJuGJ/1amyn5dhXRlaKQ=)
3: Aesp-0bkacoacCkCpfhQPmoA2Jo.roa (hash: auTmqPfhdn5WgGssEA4un4kBW/LnIC2gzs/3RcvN434=)
4: BuDcPMwCapskKDGJlWsZctPOBc4.roa (hash: 3bBve525vpAtWU3g8/6VOaPU/EQ0F7VvrXGpa6fOHFk=)
5: bO_WvrYP5ttqrPDJq5s463Nszpo.roa (hash: EspaZPCLRAen7G7qKwAXYq7KwKVTki6xdz4+i5S1a6Q=)
6: nVCJmhFMb83gvB2R2U-hSqvqOrY.roa (hash: /YERfaDChwnXHF/qpIBHQyOtHUuBLeX/WEtxA7mKmAY=)
7: nzEukpe8HSfr60dt6g7hXddWVC0.crl (hash: SPObeybhJSMlBe8+0N5B8q28kgLsWD3G1sBSQy1qw14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:87:d1:42:76:92:2a:db:77:ad:db:34:ff:0e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Jun 28 22:01:43 2025 GMT
Not After : Jun 29 22:01:43 2025 GMT
Subject: CN=d29a9b161490d1b3e576dee3c331ebf7c87c70f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:74:a2:3f:3f:e4:47:4f:be:79:5f:4b:ab:00:
a0:60:2a:06:b7:d9:1e:d3:45:51:2a:9b:d8:3f:b1:
69:6b:98:06:ba:02:ea:0c:d8:fa:4e:a0:57:da:33:
8b:11:f5:51:bf:5e:f9:5c:7d:12:4c:ef:e5:5a:f0:
df:da:b0:5c:a7:c6:ef:4d:cb:ef:6e:0b:b8:3b:39:
b5:d4:a6:d8:aa:83:fa:2b:fb:64:ef:82:cd:c4:db:
75:4c:69:97:64:28:1d:e2:e7:25:26:ea:1d:39:cd:
b2:50:b5:d6:43:bd:02:aa:3a:bc:24:d6:0b:c9:1b:
fd:15:23:62:7f:da:2e:be:e2:70:39:5c:5e:59:4e:
20:90:b6:8a:01:5a:bd:53:d4:7a:c7:cc:72:eb:b1:
10:0c:97:c5:d4:04:c3:49:c6:2b:d8:d5:df:f0:39:
79:fc:3d:62:91:f8:98:fb:cc:70:68:52:bc:cd:58:
a6:84:a1:60:c1:0f:af:65:eb:c9:3d:f3:4e:5f:e0:
42:bd:94:fa:33:c3:30:9d:be:58:3b:2a:3b:36:69:
33:bc:82:29:3d:27:17:fc:44:97:68:25:b7:36:0b:
bb:ce:8d:6b:a8:07:5a:9d:e9:3d:2b:32:a9:5b:30:
c1:74:9d:79:19:54:d0:0a:0d:58:53:0b:cb:ad:bd:
be:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9A:9B:16:14:90:D1:B3:E5:76:DE:E3:C3:31:EB:F7:C8:7C:70:F7
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f0:70:99:c6:a7:2c:67:f9:21:9e:19:6b:e2:18:a2:6b:ef:
b3:9b:eb:0c:8b:6c:9c:a4:90:95:f6:d7:e0:5e:8d:8c:1a:24:
b9:3f:77:14:11:11:02:2f:4e:67:cc:41:23:7d:88:48:c1:c2:
0d:f2:de:5b:32:42:d4:2f:b2:06:03:72:d2:51:22:34:3b:88:
f5:6f:07:3f:a4:62:b0:7a:d6:3b:93:2b:da:83:68:86:f3:63:
37:5e:3e:03:2e:fb:c9:9a:f3:22:39:bf:21:e2:9d:d3:a7:f4:
8b:5b:e7:6f:41:db:1f:df:8d:b0:55:74:8e:8d:11:fc:bd:81:
c9:55:df:d2:1c:e4:d7:33:33:ba:89:d9:60:d6:a2:f8:19:e5:
9c:e2:52:77:c7:aa:08:ac:c7:6f:c3:b5:a2:e0:d3:01:b4:8d:
ea:e2:28:51:d5:1f:82:77:23:98:ca:58:78:e8:fd:f4:ec:4f:
2c:c3:8d:74:8c:24:d2:a5:c4:e9:6a:e9:6d:85:18:55:b3:74:
e1:16:d8:82:5b:74:5b:40:86:2a:22:3d:80:47:9f:8a:31:2b:
93:db:c1:cb:6f:c9:6d:f5:ac:21:6c:f0:12:3f:0d:74:4a:14:
0e:38:2d:b3:51:67:71:5e:dc:f9:6f:c5:d2:8c:df:8a:95:f1:
35:b5:7f:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4j4fRQnaSKtt3rds0/w4HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMzEyZTkyOTdiYzFkMjdlYmViNDc2ZGVhMGVlMTVkZDc1
NjU0MmQwHhcNMjUwNjI4MjIwMTQzWhcNMjUwNjI5MjIwMTQzWjAzMTEwLwYDVQQD
EyhkMjlhOWIxNjE0OTBkMWIzZTU3NmRlZTNjMzMxZWJmN2M4N2M3MGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnSiPz/kR0++eV9LqwCgYCoGt9ke
00VRKpvYP7Fpa5gGugLqDNj6TqBX2jOLEfVRv175XH0STO/lWvDf2rBcp8bvTcvv
bgu4Ozm11KbYqoP6K/tk74LNxNt1TGmXZCgd4uclJuodOc2yULXWQ70Cqjq8JNYL
yRv9FSNif9ouvuJwOVxeWU4gkLaKAVq9U9R6x8xy67EQDJfF1ATDScYr2NXf8Dl5
/D1ikfiY+8xwaFK8zVimhKFgwQ+vZevJPfNOX+BCvZT6M8Mwnb5YOyo7NmkzvIIp
PScX/ESXaCW3Ngu7zo1rqAdanek9KzKpWzDBdJ15GVTQCg1YUwvLrb2+DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKamxYUkNGz5Xbe48Mx6/fIfHD3MB8GA1UdIwQY
MBaAFJ8xLpKXvB0n6+tHbeoO4V3XVlQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQt
YmQ1ZDNmMDBmYmIyLzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQtYmQ1ZDNmMDBmYmIy
LzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYvBwmcan
LGf5IZ4Za+IYomvvs5vrDItsnKSQlfbX4F6NjBokuT93FBERAi9OZ8xBI32ISMHC
DfLeWzJC1C+yBgNy0lEiNDuI9W8HP6RisHrWO5Mr2oNohvNjN14+Ay77yZrzIjm/
IeKd06f0i1vnb0HbH9+NsFV0jo0R/L2ByVXf0hzk1zMzuonZYNai+BnlnOJSd8eq
CKzHb8O1ouDTAbSN6uIoUdUfgncjmMpYeOj99OxPLMONdIwk0qXE6WrpbYUYVbN0
4RbYglt0W0CGKiI9gEefijErk9vBy2/JbfWsIWzwEj8NdEoUDjgts1FncV7c+W/F
0ozfipXxNbV/YA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:23:22 2025 by rpki-client