Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.mft
File: nurBz77ElK6UV8hm5jYYZcTzAEg.mft (raw, json)
Hash identifier: iYWjUc4Rp8vHdDIDMBVvMjkVZ5UZ45+Ibhsh1bnImlM=
Subject key identifier: BB:D8:61:A3:7B:E5:7D:84:7D:56:EE:62:AD:41:8F:30:75:08:7D:19
Authority key identifier: 9E:EA:C1:CF:BE:C4:94:AE:94:57:C8:66:E6:36:18:65:C4:F3:00:48
Certificate issuer: /CN=9eeac1cfbec494ae9457c866e6361865c4f30048
Certificate serial: 0199FB7C91DA34E536074753D030C5A54FCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nurBz77ElK6UV8hm5jYYZcTzAEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.mft
Manifest number: 0CDD
Signing time: Sun 19 Oct 2025 08:01:08 +0000
Manifest this update: Sun 19 Oct 2025 08:01:08 +0000
Manifest next update: Mon 20 Oct 2025 08:01:08 +0000
Files and hashes: 1: mmnZOOh4xZoAyB6ozP7dMz0vpOQ.roa (hash: MPgwr3P3oOg7+ut0sMgX1kiy6aK0r7pykdMfFbGH85I=)
2: nurBz77ElK6UV8hm5jYYZcTzAEg.crl (hash: MSpj5D6SLAJnGliSVpvF4cGhY0Al99W4HhXnclySkhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nurBz77ElK6UV8hm5jYYZcTzAEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:91:da:34:e5:36:07:47:53:d0:30:c5:a5:4f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eeac1cfbec494ae9457c866e6361865c4f30048
Validity
Not Before: Oct 19 08:01:08 2025 GMT
Not After : Oct 20 08:01:08 2025 GMT
Subject: CN=bbd861a37be57d847d56ee62ad418f3075087d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2e:bc:c5:88:fa:32:91:8b:80:18:da:f7:43:
d8:25:a7:13:4f:5f:8e:0d:15:f7:41:d8:05:5b:1e:
aa:19:a9:b7:1f:e6:98:ef:b5:03:32:ae:6b:57:97:
9a:fe:dc:1c:03:f8:0d:46:69:ee:cb:f7:d9:ea:57:
51:3b:c3:d0:c1:dd:12:c2:f4:ef:46:9e:8e:d6:24:
af:ad:b1:e4:9c:c7:d5:38:13:05:0b:8e:9e:ea:3e:
e2:62:aa:15:05:1c:d9:56:10:0b:37:de:b3:db:23:
dd:ac:1b:f3:00:6a:06:c9:a7:72:08:60:88:d1:e5:
6b:a7:e2:38:f5:86:6b:76:84:a3:4d:db:98:96:e6:
c2:a9:53:00:cf:ee:b6:77:97:2c:ab:0b:9d:54:e2:
dc:25:89:4f:2f:d4:98:a0:63:fc:3a:52:5a:0e:96:
2a:07:aa:4a:0b:44:b6:42:49:60:b9:5c:e2:de:29:
b3:87:3e:1e:e2:c8:02:4e:d1:45:a0:ff:44:4d:30:
1a:5c:7d:39:47:3b:f2:e2:4f:36:fd:07:a8:40:01:
f9:bf:3f:d7:62:ab:af:3c:86:c4:36:99:fa:b6:27:
42:df:5e:57:e4:31:8b:a8:52:84:97:25:a1:d1:0d:
a6:bd:86:52:4d:d3:f3:7b:cf:55:c3:2e:c6:9e:06:
19:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D8:61:A3:7B:E5:7D:84:7D:56:EE:62:AD:41:8F:30:75:08:7D:19
X509v3 Authority Key Identifier:
keyid:9E:EA:C1:CF:BE:C4:94:AE:94:57:C8:66:E6:36:18:65:C4:F3:00:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nurBz77ElK6UV8hm5jYYZcTzAEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:3e:92:bf:c5:c4:7a:64:30:4e:24:7c:6c:6d:66:fa:3d:1a:
a6:18:85:13:49:eb:d6:dc:0f:a9:4d:d6:5a:e7:ee:c7:a2:43:
2a:a8:74:ff:78:7e:e0:0a:6e:c4:86:96:8e:b9:80:99:0c:0b:
9d:18:3a:cb:7a:2d:4e:03:6c:59:23:66:8e:d7:99:02:fd:6d:
e9:1f:f3:4f:2d:24:9d:e5:31:0d:fd:a8:5d:ba:2a:69:4e:02:
64:67:62:02:b7:25:ae:46:f0:75:fe:b0:3a:d2:d6:f5:80:ea:
e5:22:5d:10:bc:8a:e3:2a:8a:23:a5:9e:dc:fb:1c:96:4a:a5:
36:d4:3e:d3:3f:ba:82:6f:92:8d:91:2c:7b:bd:a1:15:97:10:
57:51:57:07:22:bd:a5:9a:14:e3:5e:99:f2:05:fa:d5:bc:6c:
2d:4d:de:9b:24:94:11:a8:40:49:d0:ee:4c:2a:3f:81:a1:9e:
b7:2e:63:04:67:d1:be:b4:c0:cd:59:ff:6d:f6:e1:df:67:9c:
f2:c8:ce:70:ee:9b:32:4a:80:69:12:d7:e7:e9:e9:79:7c:bb:
bc:52:e8:57:e2:ed:27:e0:86:e5:49:ac:62:7d:7e:c6:21:5a:
a6:11:cf:7a:58:f6:87:d7:70:0d:54:8b:8e:34:f8:92:08:a7:
2f:05:26:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fJHaNOU2B0dT0DDFpU/PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZWFjMWNmYmVjNDk0YWU5NDU3Yzg2NmU2MzYxODY1YzRm
MzAwNDgwHhcNMjUxMDE5MDgwMTA4WhcNMjUxMDIwMDgwMTA4WjAzMTEwLwYDVQQD
EyhiYmQ4NjFhMzdiZTU3ZDg0N2Q1NmVlNjJhZDQxOGYzMDc1MDg3ZDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2S68xYj6MpGLgBja90PYJacTT1+O
DRX3QdgFWx6qGam3H+aY77UDMq5rV5ea/twcA/gNRmnuy/fZ6ldRO8PQwd0SwvTv
Rp6O1iSvrbHknMfVOBMFC46e6j7iYqoVBRzZVhALN96z2yPdrBvzAGoGyadyCGCI
0eVrp+I49YZrdoSjTduYlubCqVMAz+62d5csqwudVOLcJYlPL9SYoGP8OlJaDpYq
B6pKC0S2QklguVzi3imzhz4e4sgCTtFFoP9ETTAaXH05Rzvy4k82/QeoQAH5vz/X
YquvPIbENpn6tidC315X5DGLqFKElyWh0Q2mvYZSTdPze89Vwy7GngYZUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvYYaN75X2EfVbuYq1BjzB1CH0ZMB8GA1UdIwQY
MBaAFJ7qwc++xJSulFfIZuY2GGXE8wBIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnVyQno3N0VsSzZVVjhobTVqWVlaY1R6QUVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80N2U2MDktYjZiNy00NDNiLThhMDQt
ZTI4NWNkOGNhZDEyLzEvbnVyQno3N0VsSzZVVjhobTVqWVlaY1R6QUVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80N2U2MDktYjZiNy00NDNiLThhMDQtZTI4NWNkOGNhZDEy
LzEvbnVyQno3N0VsSzZVVjhobTVqWVlaY1R6QUVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfT6Sv8XE
emQwTiR8bG1m+j0aphiFE0nr1twPqU3WWufux6JDKqh0/3h+4ApuxIaWjrmAmQwL
nRg6y3otTgNsWSNmjteZAv1t6R/zTy0kneUxDf2oXboqaU4CZGdiArclrkbwdf6w
OtLW9YDq5SJdELyK4yqKI6We3PsclkqlNtQ+0z+6gm+SjZEse72hFZcQV1FXByK9
pZoU416Z8gX61bxsLU3emySUEahASdDuTCo/gaGety5jBGfRvrTAzVn/bfbh32ec
8sjOcO6bMkqAaRLX5+npeXy7vFLoV+LtJ+CG5UmsYn1+xiFaphHPelj2h9dwDVSL
jjT4kginLwUmQg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:38 2025 by rpki-client