Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.mft
File: nurBz77ElK6UV8hm5jYYZcTzAEg.mft (raw, json)
Hash identifier: 7R3g2MzXpEOjN/lS7JL/rUMQOwI9fJX9nS4MrppTfzA=
Subject key identifier: 26:4A:C1:53:17:00:9C:75:AF:54:15:6D:0B:CF:0B:44:C2:F1:FD:C3
Authority key identifier: 9E:EA:C1:CF:BE:C4:94:AE:94:57:C8:66:E6:36:18:65:C4:F3:00:48
Certificate issuer: /CN=9eeac1cfbec494ae9457c866e6361865c4f30048
Certificate serial: 0198D5F14A6A7502331934C12A8CE8D28AE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nurBz77ElK6UV8hm5jYYZcTzAEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.mft
Manifest number: 0C45
Signing time: Sat 23 Aug 2025 08:00:16 +0000
Manifest this update: Sat 23 Aug 2025 08:00:16 +0000
Manifest next update: Sun 24 Aug 2025 08:00:16 +0000
Files and hashes: 1: mmnZOOh4xZoAyB6ozP7dMz0vpOQ.roa (hash: MPgwr3P3oOg7+ut0sMgX1kiy6aK0r7pykdMfFbGH85I=)
2: nurBz77ElK6UV8hm5jYYZcTzAEg.crl (hash: b0qmZJmPHfQ2Zn9sJAcLNURtSKDWF4ALbGjZ0eonfSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nurBz77ElK6UV8hm5jYYZcTzAEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:4a:6a:75:02:33:19:34:c1:2a:8c:e8:d2:8a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eeac1cfbec494ae9457c866e6361865c4f30048
Validity
Not Before: Aug 23 08:00:16 2025 GMT
Not After : Aug 24 08:00:16 2025 GMT
Subject: CN=264ac15317009c75af54156d0bcf0b44c2f1fdc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c6:1c:9a:eb:19:29:36:9f:9a:af:1b:11:52:
d7:94:94:a1:61:ec:6e:62:ad:e2:9b:f9:1b:98:fc:
89:a9:f5:2f:a9:ad:c8:21:c4:b6:91:d2:01:5e:c8:
1e:2b:af:55:3d:3c:c5:15:b9:b7:42:e5:fd:cd:bf:
25:e2:4d:8e:d3:db:13:ab:36:57:ce:a9:51:9f:47:
45:ca:86:a1:83:1c:55:16:49:24:18:8d:a1:e6:fd:
a4:07:b5:c8:a8:98:b3:81:87:e4:57:84:02:a8:63:
5c:75:f6:13:8d:25:52:d6:b6:2b:ca:eb:8f:4d:cc:
08:00:de:b5:aa:d4:98:fc:ce:e0:02:54:14:67:ab:
73:54:b2:26:6f:c6:52:d8:2b:c0:b7:2a:b0:bd:cc:
ca:7a:97:94:44:71:c5:97:9d:7a:a1:67:c4:6f:2f:
69:44:74:37:71:57:88:0b:97:48:44:b8:3d:1b:f6:
81:de:57:28:6a:07:e5:e6:f5:76:c2:d9:fa:bc:1f:
0a:c2:88:eb:2b:4c:b4:93:3a:07:85:72:81:16:c8:
bc:d8:d1:32:7e:41:28:30:10:3a:61:d1:30:0f:44:
6a:9f:12:c3:93:f2:9c:3a:18:92:39:ca:2b:2a:3f:
f9:ea:16:bc:f0:1f:c5:41:5f:f1:91:36:56:7c:f2:
1e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4A:C1:53:17:00:9C:75:AF:54:15:6D:0B:CF:0B:44:C2:F1:FD:C3
X509v3 Authority Key Identifier:
keyid:9E:EA:C1:CF:BE:C4:94:AE:94:57:C8:66:E6:36:18:65:C4:F3:00:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nurBz77ElK6UV8hm5jYYZcTzAEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:05:98:ed:10:d6:89:be:b5:40:96:56:6b:80:0a:16:ec:4b:
6c:94:13:24:d2:59:07:ff:10:69:14:df:c3:12:39:17:3f:cd:
ff:26:24:4d:60:f7:64:14:49:f1:a0:f5:6d:ed:82:f4:da:97:
14:d6:f8:68:3f:33:a6:42:08:c6:62:97:1b:b0:d8:64:1b:0b:
05:77:5e:4e:a3:0f:9b:ae:ba:3e:e1:00:f8:cb:5f:d4:dd:2e:
83:48:c6:b3:21:7d:6b:ff:54:ee:e8:f2:93:f7:3d:5a:a9:e9:
ca:87:2a:0a:a1:50:21:4f:40:59:ab:1d:23:47:aa:9a:e6:68:
b7:1e:d4:52:bb:77:bc:97:4d:23:0d:f9:e0:6b:1b:0e:eb:fc:
a7:a8:4f:42:af:88:e3:65:e9:31:5f:e5:fe:6c:1d:96:40:25:
0b:88:ac:17:1b:3e:f3:36:6f:ab:5e:7c:ea:d7:11:44:4d:1e:
61:f8:fc:9e:ef:f0:8c:20:7b:67:13:26:bb:d0:ae:9c:90:95:
8a:e8:5e:37:88:d3:a5:83:be:89:63:4e:3b:a9:f5:54:1c:44:
f4:92:11:dc:42:66:fd:6e:4f:73:cc:48:4a:b8:67:e0:e1:86:
16:d7:d6:a4:9d:b0:24:0c:81:fb:d8:68:cc:1d:92:12:36:1a:
80:39:93:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8UpqdQIzGTTBKozo0ormMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZWFjMWNmYmVjNDk0YWU5NDU3Yzg2NmU2MzYxODY1YzRm
MzAwNDgwHhcNMjUwODIzMDgwMDE2WhcNMjUwODI0MDgwMDE2WjAzMTEwLwYDVQQD
EygyNjRhYzE1MzE3MDA5Yzc1YWY1NDE1NmQwYmNmMGI0NGMyZjFmZGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MYcmusZKTafmq8bEVLXlJShYexu
Yq3im/kbmPyJqfUvqa3IIcS2kdIBXsgeK69VPTzFFbm3QuX9zb8l4k2O09sTqzZX
zqlRn0dFyoahgxxVFkkkGI2h5v2kB7XIqJizgYfkV4QCqGNcdfYTjSVS1rYryuuP
TcwIAN61qtSY/M7gAlQUZ6tzVLImb8ZS2CvAtyqwvczKepeURHHFl516oWfEby9p
RHQ3cVeIC5dIRLg9G/aB3lcoagfl5vV2wtn6vB8KwojrK0y0kzoHhXKBFsi82NEy
fkEoMBA6YdEwD0RqnxLDk/KcOhiSOcorKj/56ha88B/FQV/xkTZWfPIeQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZKwVMXAJx1r1QVbQvPC0TC8f3DMB8GA1UdIwQY
MBaAFJ7qwc++xJSulFfIZuY2GGXE8wBIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnVyQno3N0VsSzZVVjhobTVqWVlaY1R6QUVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80N2U2MDktYjZiNy00NDNiLThhMDQt
ZTI4NWNkOGNhZDEyLzEvbnVyQno3N0VsSzZVVjhobTVqWVlaY1R6QUVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80N2U2MDktYjZiNy00NDNiLThhMDQtZTI4NWNkOGNhZDEy
LzEvbnVyQno3N0VsSzZVVjhobTVqWVlaY1R6QUVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQQWY7RDW
ib61QJZWa4AKFuxLbJQTJNJZB/8QaRTfwxI5Fz/N/yYkTWD3ZBRJ8aD1be2C9NqX
FNb4aD8zpkIIxmKXG7DYZBsLBXdeTqMPm666PuEA+Mtf1N0ug0jGsyF9a/9U7ujy
k/c9WqnpyocqCqFQIU9AWasdI0eqmuZotx7UUrt3vJdNIw354GsbDuv8p6hPQq+I
42XpMV/l/mwdlkAlC4isFxs+8zZvq1586tcRRE0eYfj8nu/wjCB7ZxMmu9CunJCV
iuheN4jTpYO+iWNOO6n1VBxE9JIR3EJm/W5Pc8xISrhn4OGGFtfWpJ2wJAyB+9ho
zB2SEjYagDmTQA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:24:20 2025 by rpki-client