Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
File: nUZUJyZmhDb6k-dX_u9NReJM1uM.mft (raw, json)
Hash identifier: CRo5E4hg5gp/8QxSV/WoWLvjGA8/q1EPchlE6Who7Ag=
Subject key identifier: C9:7F:12:BC:26:F9:A3:9B:62:3D:00:A9:5E:B3:C0:E9:F0:78:9D:53
Authority key identifier: 9D:46:54:27:26:66:84:36:FA:93:E7:57:FE:EF:4D:45:E2:4C:D6:E3
Certificate issuer: /CN=9d46542726668436fa93e757feef4d45e24cd6e3
Certificate serial: 0199FC5854B872F286583CB2CEFF0A0D94DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
Manifest number: 1424
Signing time: Sun 19 Oct 2025 12:01:11 +0000
Manifest this update: Sun 19 Oct 2025 12:01:11 +0000
Manifest next update: Mon 20 Oct 2025 12:01:11 +0000
Files and hashes: 1: _1ZVUyiWiKcUkDQ7d9MEjN-Qxjg.roa (hash: B9N8iWkGu9FMB4JofKmJJULgTYSFoSVSwpeNEHQNG3o=)
2: nUZUJyZmhDb6k-dX_u9NReJM1uM.crl (hash: xQolHT8mZHv+y1nbX3fftSRtX4ynWtCZkl1QEsdlkBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:54:b8:72:f2:86:58:3c:b2:ce:ff:0a:0d:94:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d46542726668436fa93e757feef4d45e24cd6e3
Validity
Not Before: Oct 19 12:01:11 2025 GMT
Not After : Oct 20 12:01:11 2025 GMT
Subject: CN=c97f12bc26f9a39b623d00a95eb3c0e9f0789d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:55:56:3d:e7:d7:9e:e4:81:4f:0e:54:7c:89:
0c:e4:d0:f2:cf:8a:79:82:30:1b:c6:02:65:9a:c5:
67:0c:c1:c7:1f:8b:53:d5:7f:bb:cd:ee:6f:b1:e8:
a0:bc:a3:9d:f2:51:bc:2d:2f:0d:55:b4:73:69:4c:
a0:a6:90:71:cf:bf:69:48:37:51:63:31:e3:39:60:
25:b2:4a:d3:a9:2e:46:7b:e9:69:5a:97:d4:08:f8:
59:cd:17:c1:af:e2:e3:f8:13:78:aa:fd:c2:9d:96:
d1:86:9d:74:9d:aa:bc:d2:b5:b3:f2:a5:08:84:76:
69:d9:24:6c:c8:bc:10:e7:e4:69:44:08:f1:da:88:
0b:f6:77:63:c5:97:7d:d5:75:5e:c5:7f:51:84:51:
a7:b2:8c:18:e4:ac:ae:97:62:14:6b:9e:7f:7a:9b:
a9:a6:8b:01:ed:19:8a:23:a1:31:97:39:e6:c2:72:
61:fd:0f:3d:0d:2c:22:dc:c5:29:e8:97:06:29:df:
17:4c:b1:b1:b4:70:ec:0d:40:66:d3:3c:d0:51:74:
41:40:b5:bf:31:03:18:8b:26:8f:2d:2e:56:8f:6a:
3b:fc:22:ac:8c:3c:23:c0:cb:58:ca:19:5f:ea:56:
ff:95:23:03:26:af:08:19:7a:fd:85:07:11:91:33:
7b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7F:12:BC:26:F9:A3:9B:62:3D:00:A9:5E:B3:C0:E9:F0:78:9D:53
X509v3 Authority Key Identifier:
keyid:9D:46:54:27:26:66:84:36:FA:93:E7:57:FE:EF:4D:45:E2:4C:D6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:79:08:25:96:ff:cb:98:62:a2:03:49:d8:24:ed:77:ec:3f:
0f:36:96:91:95:d1:6a:46:50:4e:48:c0:78:72:8b:06:5e:e5:
87:0d:cb:9a:ff:4f:20:ec:21:9b:c4:b5:98:25:c3:fc:6f:0f:
27:8d:3a:9d:83:3c:fe:14:80:5d:f4:0a:19:1f:de:aa:57:ed:
b4:1f:64:02:7a:e9:d2:5c:0a:14:84:fa:c6:3e:18:fe:88:f7:
86:81:59:c4:0f:bc:b7:f4:14:22:b9:ed:bd:0f:78:64:07:3a:
9f:f6:ac:82:4a:e7:8c:29:66:77:94:4e:cb:b5:9e:93:41:0e:
e1:20:cd:63:92:c5:eb:e4:8a:b6:0f:b4:b4:c1:a2:de:f6:58:
ae:d5:06:04:1a:98:a3:52:61:bc:c4:8d:1e:53:3f:98:45:94:
d0:98:0e:a2:df:8e:0f:8a:77:be:52:39:f4:87:e1:cc:f4:29:
ea:60:b7:bc:90:54:3b:24:a5:4d:56:43:fe:6a:f4:75:91:90:
ea:d6:53:ef:4d:58:3c:2f:54:fd:4a:26:17:d3:19:13:d8:bb:
a3:7d:44:76:db:03:74:6f:70:e7:06:88:be:75:06:ac:65:0a:
b3:73:b9:13:b8:a2:f7:e8:e3:35:dc:ad:12:95:0d:30:46:4b:
a3:b4:6c:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WFS4cvKGWDyyzv8KDZTbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkNDY1NDI3MjY2Njg0MzZmYTkzZTc1N2ZlZWY0ZDQ1ZTI0
Y2Q2ZTMwHhcNMjUxMDE5MTIwMTExWhcNMjUxMDIwMTIwMTExWjAzMTEwLwYDVQQD
EyhjOTdmMTJiYzI2ZjlhMzliNjIzZDAwYTk1ZWIzYzBlOWYwNzg5ZDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlVWPefXnuSBTw5UfIkM5NDyz4p5
gjAbxgJlmsVnDMHHH4tT1X+7ze5vseigvKOd8lG8LS8NVbRzaUygppBxz79pSDdR
YzHjOWAlskrTqS5Ge+lpWpfUCPhZzRfBr+Lj+BN4qv3CnZbRhp10naq80rWz8qUI
hHZp2SRsyLwQ5+RpRAjx2ogL9ndjxZd91XVexX9RhFGnsowY5Kyul2IUa55/epup
posB7RmKI6ExlznmwnJh/Q89DSwi3MUp6JcGKd8XTLGxtHDsDUBm0zzQUXRBQLW/
MQMYiyaPLS5Wj2o7/CKsjDwjwMtYyhlf6lb/lSMDJq8IGXr9hQcRkTN7ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMl/Erwm+aObYj0AqV6zwOnweJ1TMB8GA1UdIwQY
MBaAFJ1GVCcmZoQ2+pPnV/7vTUXiTNbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblVaVUp5Wm1oRGI2ay1kWF91OU5SZUpNMXVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81ODAwNWEtNTIzMy00ODQ0LWIwMjQt
MjllMzVhZTkxMmRhLzEvblVaVUp5Wm1oRGI2ay1kWF91OU5SZUpNMXVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS81ODAwNWEtNTIzMy00ODQ0LWIwMjQtMjllMzVhZTkxMmRh
LzEvblVaVUp5Wm1oRGI2ay1kWF91OU5SZUpNMXVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsnkIJZb/
y5hiogNJ2CTtd+w/DzaWkZXRakZQTkjAeHKLBl7lhw3Lmv9PIOwhm8S1mCXD/G8P
J406nYM8/hSAXfQKGR/eqlfttB9kAnrp0lwKFIT6xj4Y/oj3hoFZxA+8t/QUIrnt
vQ94ZAc6n/asgkrnjClmd5ROy7Wek0EO4SDNY5LF6+SKtg+0tMGi3vZYrtUGBBqY
o1JhvMSNHlM/mEWU0JgOot+OD4p3vlI59IfhzPQp6mC3vJBUOySlTVZD/mr0dZGQ
6tZT701YPC9U/UomF9MZE9i7o31EdtsDdG9w5waIvnUGrGUKs3O5E7ii9+jjNdyt
EpUNMEZLo7Rseg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:17 2025 by rpki-client