Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
File: nzcg6XD6oOB_UKY4nnrlOvpDnas.mft (raw, json)
Hash identifier: hIklfdgB+2IXW8Q15c49ifkxHifs5x9zGwCT83/tcxo=
Subject key identifier: 19:D6:C5:7C:1A:77:FC:73:8D:EA:EE:90:31:B1:54:F3:E5:AB:DE:45
Authority key identifier: 9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB
Certificate issuer: /CN=9f3720e970faa0e07f50a6389e7ae53afa439dab
Certificate serial: 0199FC58D2478403813124FC5818F982F91B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 12:01:43 +0000
Manifest this update: Sun 19 Oct 2025 12:01:43 +0000
Manifest next update: Mon 20 Oct 2025 12:01:43 +0000
Files and hashes: 1: Etd-zR5nQJ_3oZWsvX_yh9qZs04.roa (hash: Va9UidVPtYR8CQHobQQrWe+S/Z2ABdjjbhF7ggqh2M0=)
2: nzcg6XD6oOB_UKY4nnrlOvpDnas.crl (hash: HsmQrw5G2/cJbDiGPW3YsQXRRhQq4v0MmB2JawbjIY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:d2:47:84:03:81:31:24:fc:58:18:f9:82:f9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3720e970faa0e07f50a6389e7ae53afa439dab
Validity
Not Before: Oct 19 12:01:43 2025 GMT
Not After : Oct 20 12:01:43 2025 GMT
Subject: CN=19d6c57c1a77fc738deaee9031b154f3e5abde45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1a:c5:d6:80:89:56:e6:01:60:d8:05:f1:8e:
71:8c:bf:d2:86:f5:6a:14:b0:87:9a:8b:4e:85:2e:
32:5f:f4:90:d3:fc:b4:8d:e9:28:ba:55:bc:f9:ce:
0c:64:6a:1a:72:06:38:c2:a7:2c:17:be:d3:a3:5f:
16:17:85:43:4d:1b:fc:ae:8d:48:3b:d9:81:25:86:
94:02:91:db:80:b5:29:23:2f:b2:f6:1c:ea:f3:0a:
b7:be:4c:20:5c:fc:eb:65:73:a7:ab:07:4a:2f:4b:
55:f2:79:2a:5f:44:66:4a:fe:b9:01:7a:b6:93:9c:
93:62:85:0f:85:1f:d7:4f:79:4f:f1:4d:04:5d:ce:
30:15:31:28:3c:38:dd:54:e1:c0:4e:47:ea:65:53:
e7:2a:66:7f:c5:d9:ac:fd:b1:a7:7f:0f:4b:1b:8a:
f9:cc:8b:bf:4e:4c:48:9d:72:bf:ea:cb:34:b0:95:
d8:7a:1e:f3:3b:66:35:2f:e5:6c:a9:7e:44:38:6b:
3f:76:67:7b:2d:31:e1:5e:4e:a0:cd:a9:d0:03:6a:
29:6a:d6:3a:c3:3e:4f:f9:3b:43:7c:e1:b6:ab:bd:
04:a0:9b:0f:87:1f:64:eb:34:5d:d8:e4:bd:7a:a1:
a8:75:8a:c1:cb:86:6e:ca:ce:66:ec:50:0a:1a:c4:
f0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D6:C5:7C:1A:77:FC:73:8D:EA:EE:90:31:B1:54:F3:E5:AB:DE:45
X509v3 Authority Key Identifier:
keyid:9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c6:ea:64:14:d9:e0:fc:ad:97:fa:9c:a6:6f:57:ad:6c:ee:
7e:61:fb:e8:d0:54:b1:73:a0:86:c4:d1:96:29:c0:80:f8:43:
8d:ea:3f:18:60:6f:1b:13:85:c4:cb:f9:16:db:ec:42:9a:ea:
a4:71:d7:03:a1:90:db:6f:24:98:1a:62:f5:f8:51:b3:ea:ea:
7f:54:28:6f:86:77:21:4d:95:33:64:d0:7a:8f:c1:6a:43:81:
1b:df:1d:f1:23:d9:13:e5:2b:a2:3b:11:86:d3:ec:61:a9:bc:
27:91:f7:e5:bb:d8:d6:78:f0:b2:8e:a6:7d:a0:1d:e3:7e:80:
f1:ba:1a:1e:4e:fc:c8:67:8d:f0:73:87:7b:52:77:9a:08:2e:
71:0e:02:7d:d2:8a:91:d3:25:42:89:3e:0e:34:b2:2f:b6:bb:
03:27:af:ba:aa:22:76:c5:d1:83:62:76:60:00:2a:af:0f:1d:
4f:59:2f:5b:54:2b:e4:0c:33:09:67:c2:7a:4d:8e:d0:2d:ad:
f0:a8:b7:34:c0:b0:bf:39:b6:be:04:10:49:7a:95:11:a7:21:
3b:d8:76:74:15:02:f1:6d:7c:d7:6f:b1:1c:97:ff:b0:f7:24:
4b:e4:57:82:58:e7:f6:85:7b:d7:04:74:d3:6c:b0:5d:85:94:
5f:7a:f5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:31 2025 by rpki-client