Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft
File: nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft (raw, json)
Hash identifier: fJdsayHeG+PrCTiXBgPdPprTiv+9muyxwE76Ejy0Xng=
Subject key identifier: F4:60:C9:E3:6F:10:E7:3B:7B:49:29:E4:8B:5D:91:67:4A:84:DA:72
Authority key identifier: 9F:36:40:DA:7F:1B:C2:3E:D4:59:9F:84:A0:85:3C:83:99:F3:5D:72
Certificate issuer: /CN=9f3640da7f1bc23ed4599f84a0853c8399f35d72
Certificate serial: 0199FBEAD29843479220AB2812FAAC0BE553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft
Manifest number: 0829
Signing time: Sun 19 Oct 2025 10:01:34 +0000
Manifest this update: Sun 19 Oct 2025 10:01:34 +0000
Manifest next update: Mon 20 Oct 2025 10:01:34 +0000
Files and hashes: 1: BlYqXPvciPfdyJ-GQUZOsP4jpLI.roa (hash: LmatIhZjxo/kiezrlbpjhiTczB9qo8t5QvMaWwqWJt0=)
2: nzZA2n8bwj7UWZ-EoIU8g5nzXXI.crl (hash: Fk4EYUQw8bIS3rcqXRrBML0uEyUvPR3XHL49p4Ie6tA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:d2:98:43:47:92:20:ab:28:12:fa:ac:0b:e5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3640da7f1bc23ed4599f84a0853c8399f35d72
Validity
Not Before: Oct 19 10:01:34 2025 GMT
Not After : Oct 20 10:01:34 2025 GMT
Subject: CN=f460c9e36f10e73b7b4929e48b5d91674a84da72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ee:61:1d:93:d4:87:bd:1a:b1:19:cd:93:29:
49:3f:49:28:51:b7:be:8f:58:de:e2:fb:9d:c7:84:
a5:c5:63:96:d0:d9:6b:c4:ab:06:07:10:d2:59:b8:
a0:ad:a9:25:24:2e:30:da:2b:5a:93:66:ff:e3:e6:
c9:da:44:98:66:d2:51:97:ca:28:28:b4:15:0c:04:
04:90:e6:28:a6:92:55:c6:74:84:5a:3b:14:a2:f1:
e7:a4:46:99:8e:47:9a:88:0a:43:3f:c1:81:89:13:
f2:be:03:29:55:6a:86:1e:df:43:97:e0:00:f3:25:
5a:50:39:ff:33:98:24:1c:05:05:d4:ca:c7:5f:ea:
78:6e:7d:82:38:46:c8:2e:c6:83:56:7c:e2:33:57:
52:25:4e:15:cc:65:4d:bc:de:5a:ac:5a:6e:98:cd:
9a:58:a1:5e:bd:06:6a:55:4a:6e:31:4a:95:ea:b5:
31:82:96:13:f5:db:67:68:4b:32:8b:d0:43:3d:80:
ef:67:db:3c:fa:20:ca:cc:e9:f7:82:6a:05:43:2b:
e0:fb:b4:fa:51:af:79:00:d2:b2:62:92:49:ca:cc:
2b:5b:5b:cc:2f:4a:90:66:21:00:f1:eb:ae:7e:61:
3f:f0:4a:89:02:e5:5c:25:19:e1:79:d2:3b:8c:28:
4b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:60:C9:E3:6F:10:E7:3B:7B:49:29:E4:8B:5D:91:67:4A:84:DA:72
X509v3 Authority Key Identifier:
keyid:9F:36:40:DA:7F:1B:C2:3E:D4:59:9F:84:A0:85:3C:83:99:F3:5D:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:5e:db:9e:3f:66:a4:92:33:3a:75:b0:4e:ee:ba:19:45:16:
98:d8:9e:74:44:ec:c8:33:aa:66:c8:82:2c:25:d5:32:0c:ae:
76:f6:f3:5d:e3:82:f9:02:1a:4f:0f:27:4c:fe:4e:a7:d3:e6:
c6:ba:b6:ee:66:a1:b5:a7:bc:c4:15:2f:71:17:a3:ad:65:3b:
b2:79:b3:fa:3f:b3:c3:d8:1a:df:08:5f:59:a4:c5:9a:9d:a9:
4b:a1:ca:57:68:59:40:4f:0d:c1:0e:6b:9b:f8:55:d1:b2:c4:
78:7c:58:fc:88:24:69:10:eb:39:66:5a:d4:f9:35:3c:a9:21:
25:cc:40:39:05:f1:97:c5:de:e6:52:95:85:5b:b5:f1:44:23:
be:62:a9:ba:46:e1:cf:72:83:11:a5:24:1d:98:5d:55:75:8c:
2a:99:dd:82:87:b1:bb:57:a7:aa:94:6a:4b:5b:55:73:af:dc:
94:75:8e:d3:09:1e:0f:10:dd:e7:43:01:d0:00:6b:c3:31:49:
97:3f:f3:cb:ac:88:61:b4:b2:07:b1:60:3f:67:91:56:b7:1e:
2a:e0:62:6a:9e:0a:1f:cf:b5:e2:02:92:f4:4b:fa:0e:d2:17:
56:e8:0c:84:17:29:7a:c4:93:91:89:1b:2f:80:f5:b7:7a:f6:
d3:77:44:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:28 2025 by rpki-client