Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
File: U_NZCAnRh_ezYfskzUP5P2ZLILM.mft (raw, json)
Hash identifier: 6uisXZafJkPW8wJO1WMmVsTT0cZLpwWnf/do7cLoioU=
Subject key identifier: B5:FB:B9:B2:26:D6:63:C6:05:D0:33:90:F9:B0:C6:67:C5:BA:7E:19
Authority key identifier: 53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
Certificate issuer: /CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Certificate serial: 0198D69872E85D913F65821C748F1BDA8370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 11:02:51 +0000
Manifest this update: Sat 23 Aug 2025 11:02:51 +0000
Manifest next update: Sun 24 Aug 2025 11:02:51 +0000
Files and hashes: 1: 4yhrEPquDWqMWiUEurgxgpe4Z64.roa (hash: GAPEp0iDkhSK0QKol83Ga2o50iNkeUXCz5jUqWOb9Ow=)
2: 5piZhUc6B_Q8SXnCvmVdLn755tk.roa (hash: 1kX1fTcGnU3vqt6H68WNwGSWbpk3Ul9d3oLOLIk5xOI=)
3: 8nljJg7c24IFr_Sv-LV4LOMZqPI.roa (hash: deVXwXvj6xoqe5dfSwVOJXQZSoWKbMhfJNni40tWyZY=)
4: U_NZCAnRh_ezYfskzUP5P2ZLILM.crl (hash: xRsI5/nFMTVmJiWnHpCa1UlZOdwp4nR5RY/ewcm3BfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:72:e8:5d:91:3f:65:82:1c:74:8f:1b:da:83:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Validity
Not Before: Aug 23 11:02:51 2025 GMT
Not After : Aug 24 11:02:51 2025 GMT
Subject: CN=b5fbb9b226d663c605d03390f9b0c667c5ba7e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cb:01:30:f0:cc:13:74:31:ce:f8:b0:1e:69:
f9:37:ff:93:7a:fc:d2:96:54:53:71:1e:bc:ee:64:
41:ff:7d:88:33:f4:eb:25:58:8f:8c:f1:56:0d:40:
4b:c8:b3:16:6d:43:52:c1:39:e5:b9:53:c1:fa:99:
e1:67:b1:be:ca:5f:5e:ac:fb:9e:47:00:fb:14:2b:
d2:00:9f:13:e9:2a:08:8f:8d:7a:56:78:fb:85:6d:
87:ea:e8:3a:41:da:62:70:e3:fb:71:32:5d:c2:a6:
a4:30:df:38:b7:16:47:6f:4e:12:a0:d0:7f:1b:c4:
e6:2d:d1:6b:dc:83:06:ab:64:c5:c5:a7:05:9e:64:
78:60:8b:74:29:02:00:bc:48:0b:37:49:c8:37:9e:
28:b5:3c:88:78:32:95:48:18:4f:33:c2:e0:d5:3c:
c3:2e:37:b9:1b:b3:83:5a:69:ff:fa:ce:a3:bc:47:
5f:27:0e:b8:06:7a:49:05:b6:b3:0a:51:cc:95:ae:
95:60:ae:3c:d7:85:29:8e:62:db:6f:66:8c:7b:95:
0d:4c:48:5e:14:9a:5f:22:da:eb:eb:1b:69:78:6f:
fd:57:f0:0e:3f:88:c5:9c:c3:6e:ee:ad:81:74:82:
8c:23:d1:ec:91:1b:80:36:70:77:6d:84:82:51:35:
c3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FB:B9:B2:26:D6:63:C6:05:D0:33:90:F9:B0:C6:67:C5:BA:7E:19
X509v3 Authority Key Identifier:
keyid:53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e9:66:9b:9c:0f:cb:12:4e:da:1b:fe:60:0b:ec:83:2d:34:
18:a1:f0:2b:a3:18:c0:70:a0:75:5b:b3:74:dc:8c:9e:97:9e:
62:2d:c9:3e:f1:20:af:eb:78:9e:23:d4:2b:1b:12:2c:95:3e:
a1:45:73:f7:34:1d:83:ad:e2:94:33:61:ea:a8:cd:5c:66:e3:
03:09:df:7d:5c:3a:71:77:14:73:16:84:0b:be:1f:ec:f7:34:
eb:10:ec:e8:40:5f:5d:ee:98:65:cc:f1:5e:d8:45:e1:b2:cb:
e6:88:66:21:57:9a:7e:2a:01:9d:8f:20:b0:21:6a:b6:bb:d8:
41:57:e2:1b:b8:d2:85:14:d4:e6:9d:53:41:a6:a1:84:77:67:
ec:0a:21:15:ea:e3:53:99:7b:a2:3c:c4:60:d1:91:96:59:da:
d1:c7:b5:f0:74:a9:8a:46:e9:c7:39:28:1e:2e:1a:23:b2:82:
de:ff:96:69:5b:12:69:81:ce:02:a9:fd:a8:af:2a:74:0b:ef:
bd:56:48:61:2e:31:f9:1d:a2:41:87:ae:e9:c0:65:d1:15:3e:
2d:9e:6f:27:99:8e:95:78:7f:0c:0d:2b:2b:f1:7d:e7:c2:75:
ed:7e:38:9e:02:f6:80:93:42:db:e8:09:35:9e:6f:9a:ca:0c:
11:a3:df:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmHLoXZE/ZYIcdI8b2oNwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZjM1OTA4MDlkMTg3ZjdiMzYxZmIyNGNkNDNmOTNmNjY0
YjIwYjMwHhcNMjUwODIzMTEwMjUxWhcNMjUwODI0MTEwMjUxWjAzMTEwLwYDVQQD
EyhiNWZiYjliMjI2ZDY2M2M2MDVkMDMzOTBmOWIwYzY2N2M1YmE3ZTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8sBMPDME3QxzviwHmn5N/+TevzS
llRTcR687mRB/32IM/TrJViPjPFWDUBLyLMWbUNSwTnluVPB+pnhZ7G+yl9erPue
RwD7FCvSAJ8T6SoIj416Vnj7hW2H6ug6QdpicOP7cTJdwqakMN84txZHb04SoNB/
G8TmLdFr3IMGq2TFxacFnmR4YIt0KQIAvEgLN0nIN54otTyIeDKVSBhPM8Lg1TzD
Lje5G7ODWmn/+s6jvEdfJw64BnpJBbazClHMla6VYK4814UpjmLbb2aMe5UNTEhe
FJpfItrr6xtpeG/9V/AOP4jFnMNu7q2BdIKMI9HskRuANnB3bYSCUTXDqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLX7ubIm1mPGBdAzkPmwxmfFun4ZMB8GA1UdIwQY
MBaAFFPzWQgJ0Yf3s2H7JM1D+T9mSyCzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVV9OWkNBblJoX2V6WWZza3pVUDVQMlpMSUxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9kZTYzODMtNGFkNS00NTdiLTk1M2Mt
YTc3NmZlZGU5OTA1LzEvVV9OWkNBblJoX2V6WWZza3pVUDVQMlpMSUxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9kZTYzODMtNGFkNS00NTdiLTk1M2MtYTc3NmZlZGU5OTA1
LzEvVV9OWkNBblJoX2V6WWZza3pVUDVQMlpMSUxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG+lmm5wP
yxJO2hv+YAvsgy00GKHwK6MYwHCgdVuzdNyMnpeeYi3JPvEgr+t4niPUKxsSLJU+
oUVz9zQdg63ilDNh6qjNXGbjAwnffVw6cXcUcxaEC74f7Pc06xDs6EBfXe6YZczx
XthF4bLL5ohmIVeafioBnY8gsCFqtrvYQVfiG7jShRTU5p1TQaahhHdn7AohFerj
U5l7ojzEYNGRllna0ce18HSpikbpxzkoHi4aI7KC3v+WaVsSaYHOAqn9qK8qdAvv
vVZIYS4x+R2iQYeu6cBl0RU+LZ5vJ5mOlXh/DA0rK/F958J17X44ngL2gJNC2+gJ
NZ5vmsoMEaPftQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:29:39 2025 by rpki-client