Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c3e3ad-51eb-4e96-98b2-0b1d09498534/1/nzmWaGPYL6i9HKOTaQX6HiSpoL8.mft
File: nzmWaGPYL6i9HKOTaQX6HiSpoL8.mft (raw, json)
Hash identifier: Flq3Syv9uPkINf9AwF2HuQVcfLyD/llufv3FneJnLsg=
Subject key identifier: 16:80:B2:56:A5:AA:B4:BF:A2:9D:D5:53:8F:A7:17:27:F8:45:96:64
Authority key identifier: 9F:39:96:68:63:D8:2F:A8:BD:1C:A3:93:69:05:FA:1E:24:A9:A0:BF
Certificate issuer: /CN=9f39966863d82fa8bd1ca3936905fa1e24a9a0bf
Certificate serial: 0198D515EBEE1E228A1BB41033E648F865F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzmWaGPYL6i9HKOTaQX6HiSpoL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c3e3ad-51eb-4e96-98b2-0b1d09498534/1/nzmWaGPYL6i9HKOTaQX6HiSpoL8.mft
Manifest number: 15D7
Signing time: Sat 23 Aug 2025 04:00:40 +0000
Manifest this update: Sat 23 Aug 2025 04:00:40 +0000
Manifest next update: Sun 24 Aug 2025 04:00:40 +0000
Files and hashes: 1: nzmWaGPYL6i9HKOTaQX6HiSpoL8.crl (hash: DDh5s7QFNz34LdqyNRimi00+L67HueHOX+XpdzDMmMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c3e3ad-51eb-4e96-98b2-0b1d09498534/1/nzmWaGPYL6i9HKOTaQX6HiSpoL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/c3e3ad-51eb-4e96-98b2-0b1d09498534/1/nzmWaGPYL6i9HKOTaQX6HiSpoL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzmWaGPYL6i9HKOTaQX6HiSpoL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:eb:ee:1e:22:8a:1b:b4:10:33:e6:48:f8:65:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f39966863d82fa8bd1ca3936905fa1e24a9a0bf
Validity
Not Before: Aug 23 04:00:40 2025 GMT
Not After : Aug 24 04:00:40 2025 GMT
Subject: CN=1680b256a5aab4bfa29dd5538fa71727f8459664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a4:75:f5:ef:fc:2a:37:45:b6:0a:73:d6:dc:
9a:11:7e:52:40:62:d1:e0:70:11:18:bb:45:5b:9d:
78:f2:88:ff:82:d3:10:5b:eb:0d:73:cf:80:ef:68:
3a:d7:3d:fd:bb:f4:94:69:f4:c1:6f:e6:12:ab:4b:
65:a4:6c:71:16:19:d4:59:0e:15:19:f8:1f:1f:56:
8f:7c:23:4d:d1:fb:2f:e5:d9:98:e2:63:70:76:fa:
76:f7:87:f0:1b:a7:64:9d:94:fc:66:91:59:a0:3b:
e6:61:ca:d9:c4:56:66:8e:09:1c:11:0f:ff:31:cd:
6d:3e:3d:29:bb:37:db:ad:54:7c:48:5b:a2:3d:07:
cc:56:d3:30:c5:5d:8a:fc:bf:9c:ca:f7:20:cc:47:
33:13:c9:0c:6b:96:c7:53:02:14:04:da:57:13:6b:
78:d9:1e:b4:3f:96:3f:85:9c:bf:90:1b:85:f8:2c:
a6:af:4f:55:eb:60:a2:ce:6d:c9:18:26:9e:a7:bb:
b3:27:cd:e6:16:6f:69:97:c0:d3:fa:ba:95:7b:6c:
29:eb:3c:46:0e:c1:a5:b0:21:d8:bb:55:a4:15:bc:
bd:81:85:5c:ca:ee:f3:bd:8c:d5:f2:c6:fc:0b:05:
b8:9a:af:31:42:ab:38:d5:eb:a4:39:a4:b8:5e:03:
e4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:80:B2:56:A5:AA:B4:BF:A2:9D:D5:53:8F:A7:17:27:F8:45:96:64
X509v3 Authority Key Identifier:
keyid:9F:39:96:68:63:D8:2F:A8:BD:1C:A3:93:69:05:FA:1E:24:A9:A0:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzmWaGPYL6i9HKOTaQX6HiSpoL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c3e3ad-51eb-4e96-98b2-0b1d09498534/1/nzmWaGPYL6i9HKOTaQX6HiSpoL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c3e3ad-51eb-4e96-98b2-0b1d09498534/1/nzmWaGPYL6i9HKOTaQX6HiSpoL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:f7:a7:08:2b:fb:8a:89:ad:fd:f0:1a:ec:28:b3:b5:1e:35:
f5:cf:57:f4:f7:b3:1d:23:06:49:f8:7c:d1:7b:d0:af:63:b9:
27:14:72:8a:2b:ed:29:6f:78:b1:f5:ce:d6:e0:68:06:7e:99:
42:f3:ab:1e:4d:ee:99:33:98:50:60:5c:09:cb:5b:80:b1:87:
92:d4:53:dd:e1:b4:c1:3e:f4:7c:dd:0e:34:45:08:70:b8:83:
0f:de:6a:82:17:83:6e:6b:56:b1:92:ff:c2:31:5d:1d:ef:bd:
b3:c1:c6:0e:86:2f:ba:f6:fa:95:a3:08:10:3f:de:b5:1a:07:
2c:ff:74:71:8e:89:f0:6e:07:28:b6:fa:f3:13:6c:37:29:55:
7c:0b:27:8f:28:ed:6b:67:ec:9e:9c:84:e6:0e:6f:bb:54:1a:
52:27:94:98:40:67:f3:2b:44:91:d7:f2:47:58:cc:f5:26:ac:
35:a7:29:e0:ef:7a:54:7a:2c:e7:3c:55:d6:61:15:b7:7b:6b:
37:17:2f:68:ad:8e:5d:38:cd:ac:4b:02:52:d5:41:6c:37:a7:
48:d1:4b:76:f7:ee:7f:cf:0e:23:68:a1:1f:2d:df:c4:6d:db:
ea:75:5b:3f:42:f6:2d:58:91:72:5f:2b:17:8b:14:27:e0:5a:
b4:76:35:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFevuHiKKG7QQM+ZI+GX0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMzk5NjY4NjNkODJmYThiZDFjYTM5MzY5MDVmYTFlMjRh
OWEwYmYwHhcNMjUwODIzMDQwMDQwWhcNMjUwODI0MDQwMDQwWjAzMTEwLwYDVQQD
EygxNjgwYjI1NmE1YWFiNGJmYTI5ZGQ1NTM4ZmE3MTcyN2Y4NDU5NjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KR19e/8KjdFtgpz1tyaEX5SQGLR
4HARGLtFW5148oj/gtMQW+sNc8+A72g61z39u/SUafTBb+YSq0tlpGxxFhnUWQ4V
GfgfH1aPfCNN0fsv5dmY4mNwdvp294fwG6dknZT8ZpFZoDvmYcrZxFZmjgkcEQ//
Mc1tPj0puzfbrVR8SFuiPQfMVtMwxV2K/L+cyvcgzEczE8kMa5bHUwIUBNpXE2t4
2R60P5Y/hZy/kBuF+Cymr09V62Cizm3JGCaep7uzJ83mFm9pl8DT+rqVe2wp6zxG
DsGlsCHYu1WkFby9gYVcyu7zvYzV8sb8CwW4mq8xQqs41eukOaS4XgPkowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBaAslalqrS/op3VU4+nFyf4RZZkMB8GA1UdIwQY
MBaAFJ85lmhj2C+ovRyjk2kF+h4kqaC/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnptV2FHUFlMNmk5SEtPVGFRWDZIaVNwb0w4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9jM2UzYWQtNTFlYi00ZTk2LTk4YjIt
MGIxZDA5NDk4NTM0LzEvbnptV2FHUFlMNmk5SEtPVGFRWDZIaVNwb0w4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9jM2UzYWQtNTFlYi00ZTk2LTk4YjItMGIxZDA5NDk4NTM0
LzEvbnptV2FHUFlMNmk5SEtPVGFRWDZIaVNwb0w4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1/enCCv7
iomt/fAa7CiztR419c9X9PezHSMGSfh80XvQr2O5JxRyiivtKW94sfXO1uBoBn6Z
QvOrHk3umTOYUGBcCctbgLGHktRT3eG0wT70fN0ONEUIcLiDD95qgheDbmtWsZL/
wjFdHe+9s8HGDoYvuvb6laMIED/etRoHLP90cY6J8G4HKLb68xNsNylVfAsnjyjt
a2fsnpyE5g5vu1QaUieUmEBn8ytEkdfyR1jM9SasNacp4O96VHos5zxV1mEVt3tr
NxcvaK2OXTjNrEsCUtVBbDenSNFLdvfuf88OI2ihHy3fxG3b6nVbP0L2LViRcl8r
F4sUJ+BatHY1xg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:30 2025 by rpki-client