Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.mft
File: Nz3Mauaq2IhZH7d75OqWDzU1__Q.mft (raw, json)
Hash identifier: EavJ2vaB/SZSR3hYrtjasbtmGZiPj46jvxAku2jyTE0=
Subject key identifier: D4:DF:31:5D:44:4F:7E:77:F3:D5:38:1F:F1:79:45:73:69:AC:A1:41
Authority key identifier: 37:3D:CC:6A:E6:AA:D8:88:59:1F:B7:7B:E4:EA:96:0F:35:35:FF:F4
Certificate issuer: /CN=373dcc6ae6aad888591fb77be4ea960f3535fff4
Certificate serial: 0199FBEAC2A731C320C4C6129B1BE3E8FE65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nz3Mauaq2IhZH7d75OqWDzU1__Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.mft
Manifest number: 0D46
Signing time: Sun 19 Oct 2025 10:01:30 +0000
Manifest this update: Sun 19 Oct 2025 10:01:30 +0000
Manifest next update: Mon 20 Oct 2025 10:01:30 +0000
Files and hashes: 1: Nz3Mauaq2IhZH7d75OqWDzU1__Q.crl (hash: xkBVbHL1QZNSOXZ3Jc6DZXL8WEmYLGHv7EsbJ+zSDuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nz3Mauaq2IhZH7d75OqWDzU1__Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:c2:a7:31:c3:20:c4:c6:12:9b:1b:e3:e8:fe:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=373dcc6ae6aad888591fb77be4ea960f3535fff4
Validity
Not Before: Oct 19 10:01:30 2025 GMT
Not After : Oct 20 10:01:30 2025 GMT
Subject: CN=d4df315d444f7e77f3d5381ff179457369aca141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7a:ab:66:fa:a6:a7:1d:2c:49:4f:af:d4:2a:
87:32:34:49:12:97:82:7f:b4:ff:46:19:47:b3:e8:
4c:73:16:58:d7:c2:d3:1e:9c:a4:59:c6:53:7b:8b:
27:31:cd:e8:11:63:42:22:73:8f:cc:ef:d6:8f:90:
ee:7f:8e:0e:63:22:41:35:46:a9:48:4a:62:7a:4d:
40:aa:a9:a0:3f:29:20:0f:c0:b7:ee:c4:a6:fd:02:
fa:f1:5f:49:c5:ad:bc:f1:b5:dd:df:62:89:dd:7d:
4c:f9:31:64:b3:ac:db:f2:ca:92:73:e2:bb:d0:29:
be:5f:d2:69:6e:c1:0e:bc:2a:05:27:f2:06:d2:10:
b0:a4:8a:50:2f:8b:3a:b9:98:43:97:5a:4e:8a:1b:
1b:30:c4:ba:cf:d2:a3:a5:cf:39:c6:5a:f3:b5:d9:
5e:e2:e2:cc:63:33:7e:8c:8f:de:d1:58:1a:b2:27:
e4:55:86:64:c7:73:60:21:d1:50:f6:5a:d1:36:09:
53:05:9f:91:c2:3d:60:b7:ba:9d:06:ff:f0:48:60:
81:57:19:df:2f:f7:eb:99:fb:6a:0b:d4:c9:d6:cd:
2e:2b:55:5e:97:d5:f1:46:5b:d5:73:49:0c:3c:30:
15:35:b3:82:c2:b5:da:00:32:72:70:74:96:75:b7:
4a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DF:31:5D:44:4F:7E:77:F3:D5:38:1F:F1:79:45:73:69:AC:A1:41
X509v3 Authority Key Identifier:
keyid:37:3D:CC:6A:E6:AA:D8:88:59:1F:B7:7B:E4:EA:96:0F:35:35:FF:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nz3Mauaq2IhZH7d75OqWDzU1__Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:46:ce:64:a7:20:a9:d0:d5:3d:06:a9:24:4b:8a:85:cc:b5:
47:91:71:30:78:29:1e:27:f7:26:5a:1e:81:37:51:0e:7b:21:
20:7d:87:b1:fb:66:9d:24:04:ce:49:6b:d6:63:fb:e5:55:4a:
eb:ef:f2:f1:55:72:e5:59:85:3e:5a:e1:5b:f0:00:e2:6b:db:
16:92:88:4a:ca:f0:89:8d:ac:a2:fe:2d:83:11:50:df:84:9c:
ce:56:ac:28:2a:99:31:f9:c4:1d:09:e8:bf:7e:94:72:e7:7d:
36:e0:c2:f6:f9:c2:e5:6d:be:04:b5:e0:31:9a:f0:19:65:c1:
ce:52:bb:45:6c:32:56:55:6f:1a:c2:a3:57:a4:5f:55:5d:90:
c6:0e:13:61:c8:51:d4:a5:0e:4a:50:bd:7d:e2:c8:59:c6:80:
7b:b9:cc:b6:9b:3b:39:30:d4:ee:de:ed:99:b1:f7:39:53:7a:
2d:35:a8:0e:cf:40:6f:27:6f:c3:9f:dc:ae:08:ec:cd:67:d9:
a1:14:6d:72:68:4e:dd:22:88:4e:d0:e0:47:0b:60:7d:57:b7:
3b:40:25:87:e3:a4:71:8b:eb:3b:95:2e:7b:c5:c6:56:c1:a7:
27:0e:d3:95:9b:e0:f8:34:69:54:9f:22:34:55:bc:59:30:df:
b9:89:e8:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76sKnMcMgxMYSmxvj6P5lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3M2RjYzZhZTZhYWQ4ODg1OTFmYjc3YmU0ZWE5NjBmMzUz
NWZmZjQwHhcNMjUxMDE5MTAwMTMwWhcNMjUxMDIwMTAwMTMwWjAzMTEwLwYDVQQD
EyhkNGRmMzE1ZDQ0NGY3ZTc3ZjNkNTM4MWZmMTc5NDU3MzY5YWNhMTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnqrZvqmpx0sSU+v1CqHMjRJEpeC
f7T/RhlHs+hMcxZY18LTHpykWcZTe4snMc3oEWNCInOPzO/Wj5Duf44OYyJBNUap
SEpiek1AqqmgPykgD8C37sSm/QL68V9Jxa288bXd32KJ3X1M+TFks6zb8sqSc+K7
0Cm+X9JpbsEOvCoFJ/IG0hCwpIpQL4s6uZhDl1pOihsbMMS6z9Kjpc85xlrztdle
4uLMYzN+jI/e0VgasifkVYZkx3NgIdFQ9lrRNglTBZ+Rwj1gt7qdBv/wSGCBVxnf
L/frmftqC9TJ1s0uK1Vel9XxRlvVc0kMPDAVNbOCwrXaADJycHSWdbdK4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNTfMV1ET35389U4H/F5RXNprKFBMB8GA1UdIwQY
MBaAFDc9zGrmqtiIWR+3e+Tqlg81Nf/0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnozTWF1YXEySWhaSDdkNzVPcVdEelUxX19RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy80NDg5MGYtZDc0NC00YjhmLWE1ZjQt
MjI5YTcwYTAwMzg0LzEvTnozTWF1YXEySWhaSDdkNzVPcVdEelUxX19RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy80NDg5MGYtZDc0NC00YjhmLWE1ZjQtMjI5YTcwYTAwMzg0
LzEvTnozTWF1YXEySWhaSDdkNzVPcVdEelUxX19RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOUbOZKcg
qdDVPQapJEuKhcy1R5FxMHgpHif3JloegTdRDnshIH2HsftmnSQEzklr1mP75VVK
6+/y8VVy5VmFPlrhW/AA4mvbFpKISsrwiY2sov4tgxFQ34SczlasKCqZMfnEHQno
v36Ucud9NuDC9vnC5W2+BLXgMZrwGWXBzlK7RWwyVlVvGsKjV6RfVV2Qxg4TYchR
1KUOSlC9feLIWcaAe7nMtps7OTDU7t7tmbH3OVN6LTWoDs9Abydvw5/crgjszWfZ
oRRtcmhO3SKITtDgRwtgfVe3O0Alh+OkcYvrO5Uue8XGVsGnJw7TlZvg+DRpVJ8i
NFW8WTDfuYnoSA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:06 2025 by rpki-client