Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
File: 1NZco0qWiw2FYauHdtuwLdt8eDM.mft (raw, json)
Hash identifier: QUPtoxDVrQaIiSF285d3kCr4s280wsDCXq9cvzXQefY=
Subject key identifier: 12:10:37:33:4B:22:41:2F:01:CA:65:09:A0:3A:F2:3A:61:07:33:77
Authority key identifier: D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33
Certificate issuer: /CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833
Certificate serial: 0199FEEBF71170AC4BD25CB5112236A85025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
Manifest number: 06C4
Signing time: Mon 20 Oct 2025 00:01:41 +0000
Manifest this update: Mon 20 Oct 2025 00:01:41 +0000
Manifest next update: Tue 21 Oct 2025 00:01:41 +0000
Files and hashes: 1: 1NZco0qWiw2FYauHdtuwLdt8eDM.crl (hash: 0E8V+5NdfTdR51JxTAem35XW3kKiEW4QUFKCr/e0DrY=)
2: 7jIS7Kg3pQ0rAdPTN8-mhFQ9NMI.roa (hash: X1BBv86nq4mpZk7vS1wx5rzfijmXxCD6/5jYb3vftEE=)
3: JBZwLHOeun9xUsFliq37fa6QYAo.roa (hash: 8ByuZxbvTl/x0Sjxc//zO5GFMR7JeQh92bNKijR57Vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:f7:11:70:ac:4b:d2:5c:b5:11:22:36:a8:50:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833
Validity
Not Before: Oct 20 00:01:41 2025 GMT
Not After : Oct 21 00:01:41 2025 GMT
Subject: CN=121037334b22412f01ca6509a03af23a61073377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e1:37:75:10:2b:90:20:b7:18:ac:bc:bb:53:
e7:97:3e:c4:41:1f:af:7f:ea:72:93:63:2e:63:35:
6e:43:28:e0:07:c7:05:92:4f:92:9e:75:b7:8b:a2:
46:e7:08:90:72:2c:18:0c:b1:27:9d:45:28:f0:78:
b8:03:18:a4:33:7d:f4:31:72:8a:77:84:76:53:fe:
74:22:c0:82:0d:0d:25:f5:fe:79:06:b7:77:5d:69:
4c:19:da:d0:d8:ac:c0:f4:6b:32:32:48:89:6b:f8:
1e:0f:3f:f3:b0:9f:95:07:e0:f3:ea:fc:78:ef:49:
fa:0d:43:02:c4:5b:d8:40:d7:53:a5:d9:1e:5d:c4:
53:db:ce:65:2f:a7:84:92:11:50:79:af:46:2c:ed:
0e:04:43:48:42:29:e5:16:84:10:a6:41:8a:3d:aa:
bb:7b:49:1e:86:64:3f:ca:4f:cd:24:0b:10:72:c1:
74:28:c6:12:da:8b:0d:5b:7d:e8:18:33:f2:d8:5b:
3b:08:36:3d:68:72:73:a3:cf:dd:50:b0:f9:65:27:
6a:0c:46:61:66:d3:9c:8e:f0:f7:79:8a:e7:74:48:
03:d1:7f:9b:24:6f:8b:f7:27:5f:cc:ed:c9:3e:da:
f8:b7:42:e9:4a:ce:8d:50:d3:d5:c7:3d:75:a2:5b:
c7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:10:37:33:4B:22:41:2F:01:CA:65:09:A0:3A:F2:3A:61:07:33:77
X509v3 Authority Key Identifier:
keyid:D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:69:c7:23:e3:5f:02:64:bb:f6:da:d1:8a:f9:aa:e7:77:76:
c4:ec:32:91:f0:ec:af:e2:7f:81:6d:1b:4b:48:c3:a5:f4:5e:
a8:96:d5:2d:b6:41:93:71:ec:0c:30:51:43:95:6e:fb:a0:02:
d3:62:46:e0:f2:4c:e7:01:22:89:cc:fc:7b:2e:65:e7:3d:e0:
5b:90:01:10:96:99:89:f7:f6:b6:96:c0:59:61:70:c4:b3:b8:
e3:6d:bd:25:29:13:18:8c:83:20:58:e3:10:89:93:8c:7b:67:
26:cf:4f:d9:9f:c7:ab:93:77:fa:8a:7a:31:27:c3:f0:77:dc:
a5:74:46:13:a4:ea:e9:b3:ba:15:41:a1:f4:d9:3d:b5:70:bc:
9b:26:0e:f7:41:31:cf:3e:01:eb:a2:9b:9c:fc:8f:b2:cd:a7:
c4:90:cd:c6:7f:a8:f4:2b:d7:9a:49:bc:47:7d:43:6f:84:b7:
2d:3e:13:52:78:20:87:61:4c:4b:90:d5:76:1a:ed:e7:b5:67:
95:d1:96:f5:08:a4:4b:0e:86:fe:ed:11:8b:6b:76:f3:2c:ec:
81:5c:0d:b0:e4:a4:b1:e7:68:56:04:91:22:03:f6:9d:12:45:
c8:1b:be:33:d6:47:00:b5:a5:2f:38:0b:ae:9e:6b:ef:db:98:
08:06:5a:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+6/cRcKxL0ly1ESI2qFAlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZDY1Y2EzNGE5NjhiMGQ4NTYxYWI4Nzc2ZGJiMDJkZGI3
Yzc4MzMwHhcNMjUxMDIwMDAwMTQxWhcNMjUxMDIxMDAwMTQxWjAzMTEwLwYDVQQD
EygxMjEwMzczMzRiMjI0MTJmMDFjYTY1MDlhMDNhZjIzYTYxMDczMzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuE3dRArkCC3GKy8u1Pnlz7EQR+v
f+pyk2MuYzVuQyjgB8cFkk+SnnW3i6JG5wiQciwYDLEnnUUo8Hi4AxikM330MXKK
d4R2U/50IsCCDQ0l9f55Brd3XWlMGdrQ2KzA9GsyMkiJa/geDz/zsJ+VB+Dz6vx4
70n6DUMCxFvYQNdTpdkeXcRT285lL6eEkhFQea9GLO0OBENIQinlFoQQpkGKPaq7
e0kehmQ/yk/NJAsQcsF0KMYS2osNW33oGDPy2Fs7CDY9aHJzo8/dULD5ZSdqDEZh
ZtOcjvD3eYrndEgD0X+bJG+L9ydfzO3JPtr4t0LpSs6NUNPVxz11olvHyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBIQNzNLIkEvAcplCaA68jphBzN3MB8GA1UdIwQY
MBaAFNTWXKNKlosNhWGrh3bbsC3bfHgzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU5aY28wcVdpdzJGWWF1SGR0dXdMZHQ4ZURNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8zY2MzNGQtMGYzMi00YTVkLTk4NGIt
MzJlZmY5NWIzOWRjLzEvMU5aY28wcVdpdzJGWWF1SGR0dXdMZHQ4ZURNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8zY2MzNGQtMGYzMi00YTVkLTk4NGItMzJlZmY5NWIzOWRj
LzEvMU5aY28wcVdpdzJGWWF1SGR0dXdMZHQ4ZURNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJGnHI+Nf
AmS79trRivmq53d2xOwykfDsr+J/gW0bS0jDpfReqJbVLbZBk3HsDDBRQ5Vu+6AC
02JG4PJM5wEiicz8ey5l5z3gW5ABEJaZiff2tpbAWWFwxLO44229JSkTGIyDIFjj
EImTjHtnJs9P2Z/Hq5N3+op6MSfD8HfcpXRGE6Tq6bO6FUGh9Nk9tXC8myYO90Ex
zz4B66KbnPyPss2nxJDNxn+o9CvXmkm8R31Db4S3LT4TUnggh2FMS5DVdhrt57Vn
ldGW9QikSw6G/u0Ri2t28yzsgVwNsOSksedoVgSRIgP2nRJFyBu+M9ZHALWlLzgL
rp5r79uYCAZaoQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:28:31 2025 by rpki-client