Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
File: NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft (raw, json)
Hash identifier: 9UST7NNWRBchxcrAbhGB0h0UAIZAwYjVIH6A2twu6Jc=
Subject key identifier: 79:F6:2A:F6:41:70:57:92:53:8B:0E:3D:39:46:B4:D3:DA:7D:AF:CD
Authority key identifier: 35:9D:DC:73:76:84:CE:04:17:54:A9:5B:56:B5:A0:76:D8:85:10:48
Certificate issuer: /CN=359ddc737684ce041754a95b56b5a076d8851048
Certificate serial: 0199FAA16C5F5303C729EF15E815BF423ECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
Manifest number: 16B6
Signing time: Sun 19 Oct 2025 04:01:46 +0000
Manifest this update: Sun 19 Oct 2025 04:01:46 +0000
Manifest next update: Mon 20 Oct 2025 04:01:46 +0000
Files and hashes: 1: NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl (hash: ta58ZOoaHFcUQcv2HdxmJJ+sQt2oUSCuswV+NsAY7L0=)
2: OwN_u8-wXQUeHGlWNCeV2-9Zw1E.roa (hash: GL8HC8nKjSwa4mRugn3DqDIjF1e/NuFqUhL9j08TswI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:6c:5f:53:03:c7:29:ef:15:e8:15:bf:42:3e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359ddc737684ce041754a95b56b5a076d8851048
Validity
Not Before: Oct 19 04:01:46 2025 GMT
Not After : Oct 20 04:01:46 2025 GMT
Subject: CN=79f62af641705792538b0e3d3946b4d3da7dafcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8d:61:58:be:c2:62:f1:53:04:d7:8a:2b:cb:
ba:31:7f:09:33:74:8e:c8:7b:58:6b:4b:9c:98:51:
49:2e:78:3c:29:3d:2c:40:3d:57:5e:e5:08:0d:b6:
d5:34:80:d5:a8:96:68:5a:29:87:c5:e8:e2:3d:16:
ff:ce:2d:c6:a3:64:6e:a8:3d:4c:fd:96:b0:aa:98:
51:8b:97:e9:a5:99:bd:68:43:67:6b:84:d3:72:eb:
1e:a5:77:b7:37:5b:03:ac:2f:22:37:29:8a:79:94:
60:4a:3d:0f:36:f5:ef:87:52:4a:ec:5f:3f:54:97:
74:0f:c7:f3:4f:f1:d3:77:83:a2:00:1c:c1:1c:f6:
bd:8e:5a:3b:bc:20:bd:60:b2:80:fb:11:fe:ce:ef:
66:d4:05:9e:3f:4c:a1:9d:04:00:b7:be:56:bf:3c:
71:10:14:f5:a8:db:20:44:ae:ba:2d:b8:4f:01:b5:
53:86:d9:de:cb:14:f4:d2:a8:68:6e:9f:7b:93:60:
95:f1:92:f6:55:0f:bf:42:71:97:2a:99:af:16:09:
2e:6b:38:99:1e:ad:60:60:e3:21:23:dd:27:24:29:
44:53:3b:59:75:50:cd:9b:d1:4d:eb:e8:ea:29:ef:
a1:64:e8:a0:a6:69:5c:24:41:dc:b1:2f:b8:b1:b3:
20:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F6:2A:F6:41:70:57:92:53:8B:0E:3D:39:46:B4:D3:DA:7D:AF:CD
X509v3 Authority Key Identifier:
keyid:35:9D:DC:73:76:84:CE:04:17:54:A9:5B:56:B5:A0:76:D8:85:10:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:03:68:1f:59:68:55:90:ad:82:73:75:a8:65:82:d9:c5:0b:
cd:62:bc:b9:18:5f:32:f6:47:ac:ec:34:8c:48:54:9f:75:7f:
b6:8e:e1:8b:8c:81:9f:7c:14:52:6e:5c:cf:48:f7:ec:08:d5:
1b:18:21:ce:f1:25:c6:8d:d5:bb:f6:ae:59:8d:ae:ab:01:0c:
60:cb:9e:1b:b8:d7:c8:e6:ff:7d:11:0a:76:53:ff:fc:66:9f:
49:58:f7:84:67:f0:8c:a6:41:fe:c5:bf:5a:fb:0d:55:19:0d:
4a:b7:8b:81:d2:1a:56:af:94:ff:ab:a3:20:78:6f:35:f4:75:
12:e1:1a:e2:82:02:54:07:68:ce:2f:20:a7:e5:2d:cd:d3:ec:
60:a5:3c:90:64:80:12:60:18:b7:00:13:fe:5c:09:9d:83:b9:
1e:22:c9:85:67:af:cf:ea:f5:fc:db:30:25:68:0f:e1:44:2a:
b9:c5:88:8d:e1:86:6a:3b:0e:7e:19:dc:88:60:ad:2b:ed:18:
2e:0f:e8:40:1f:02:bc:47:10:e1:6f:2c:79:00:c4:f1:85:ec:
41:87:c9:6c:9f:13:ab:58:c2:fb:17:e5:69:fa:f7:f3:1f:1f:
08:73:79:a3:30:d3:e6:07:96:91:a3:98:4c:7c:5d:d3:08:70:
bc:65:18:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:34 2025 by rpki-client