Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
File: nzcg6XD6oOB_UKY4nnrlOvpDnas.mft (raw, json)
Hash identifier: pVJ/8LhaPZuFbukvkeCYUh/UqscVJo1qZEn+Vsw5EGE=
Subject key identifier: DC:62:90:87:47:57:4F:9A:CC:1A:FC:95:4A:1D:49:3F:A9:7E:78:41
Authority key identifier: 9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB
Certificate issuer: /CN=9f3720e970faa0e07f50a6389e7ae53afa439dab
Certificate serial: 0197D5F543D19BC7B9887939B8E1986E3CF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
Manifest number: 15CA
Signing time: Fri 04 Jul 2025 15:01:50 +0000
Manifest this update: Fri 04 Jul 2025 15:01:50 +0000
Manifest next update: Sat 05 Jul 2025 15:01:50 +0000
Files and hashes: 1: Etd-zR5nQJ_3oZWsvX_yh9qZs04.roa (hash: Va9UidVPtYR8CQHobQQrWe+S/Z2ABdjjbhF7ggqh2M0=)
2: nzcg6XD6oOB_UKY4nnrlOvpDnas.crl (hash: sU/OfBCB0q1/8bt5BCKAsAa16GWR3Vs9F0e8Sm0T0Ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d5:f5:43:d1:9b:c7:b9:88:79:39:b8:e1:98:6e:3c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3720e970faa0e07f50a6389e7ae53afa439dab
Validity
Not Before: Jul 4 15:01:50 2025 GMT
Not After : Jul 5 15:01:50 2025 GMT
Subject: CN=dc62908747574f9acc1afc954a1d493fa97e7841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:43:3e:09:d5:22:88:31:e6:f7:4c:1a:3d:24:
28:5a:25:1a:0e:74:c2:e1:5b:3c:93:e1:dc:aa:80:
36:33:15:da:2f:7f:1f:08:a4:9a:c7:7e:3d:98:fd:
05:df:9b:70:18:fa:66:74:19:b8:c6:61:af:0a:e4:
5c:da:ad:b4:ad:ad:4e:40:55:b6:f6:1d:a3:59:60:
67:27:23:64:08:22:8c:9c:54:33:a4:1b:38:23:d2:
ac:d5:1c:eb:12:9c:b8:39:8b:b0:4c:6c:8a:f5:1d:
02:0a:b8:29:d4:c4:e4:ef:d6:ac:ea:5a:40:2c:c4:
ef:87:c7:87:5f:61:fa:e3:28:c9:e5:24:22:14:10:
e1:9f:e8:a4:5b:59:56:82:0d:33:20:45:a4:aa:04:
36:db:c2:72:7b:99:25:88:89:7d:69:e2:d5:85:a2:
35:31:c2:c7:37:9f:4a:19:db:e8:f4:70:6a:2b:c2:
22:72:64:74:9a:94:53:01:36:26:e9:9f:e4:ba:12:
0b:0d:a1:db:39:8e:c0:2b:7e:3b:b7:a1:f2:e6:6f:
6e:a1:ee:09:ee:3e:a8:59:78:97:1e:2e:e0:3b:66:
33:9e:29:a1:ef:5a:d1:0f:3c:b2:ee:8d:5b:69:aa:
3c:54:bc:12:87:bc:d1:19:21:35:88:1b:af:f0:e3:
53:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:62:90:87:47:57:4F:9A:CC:1A:FC:95:4A:1D:49:3F:A9:7E:78:41
X509v3 Authority Key Identifier:
keyid:9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:fe:6b:01:86:1a:1a:b7:e7:e1:04:59:0d:fa:2e:0f:58:e5:
9b:7d:b2:fe:91:2e:f4:49:5c:a6:8b:51:a0:89:1a:06:57:ba:
b1:db:5a:9c:4d:4b:82:28:8b:c2:8a:f8:5e:27:cb:91:01:fd:
9d:56:4a:f7:4f:35:65:ae:83:3b:c0:ca:bc:ef:8e:9a:8a:06:
cb:58:40:cb:0e:72:dd:d8:eb:6f:10:e6:2a:7a:fd:5b:1a:75:
d3:9a:a2:75:ec:ca:df:e6:d8:f8:0d:ca:8b:23:e2:cc:72:51:
b9:c8:aa:0f:15:5e:18:d6:a1:68:51:59:f4:29:12:6e:b4:3b:
51:19:ea:ec:78:48:51:dd:76:37:e4:c5:a2:bf:b5:02:52:5d:
69:3b:86:57:9b:9e:f8:98:b5:ac:21:36:ac:1d:3c:89:6e:a6:
97:e0:86:f0:2b:61:d9:ec:9a:71:69:b4:7d:f8:a7:5a:24:53:
97:f2:88:43:0f:59:65:25:f4:4f:59:f7:8c:9e:b3:61:31:e8:
58:dd:9b:b6:de:d9:44:82:6c:d2:37:9c:31:4d:f7:7d:a7:d6:
a9:47:60:9f:8d:27:cd:44:e4:08:6d:01:4d:a2:cd:8e:67:de:
bc:21:84:6b:fd:d8:35:f6:b1:c0:0c:b9:4e:22:8d:f7:d3:16:
da:50:ad:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfV9UPRm8e5iHk5uOGYbjzzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMzcyMGU5NzBmYWEwZTA3ZjUwYTYzODllN2FlNTNhZmE0
MzlkYWIwHhcNMjUwNzA0MTUwMTUwWhcNMjUwNzA1MTUwMTUwWjAzMTEwLwYDVQQD
EyhkYzYyOTA4NzQ3NTc0ZjlhY2MxYWZjOTU0YTFkNDkzZmE5N2U3ODQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUM+CdUiiDHm90waPSQoWiUaDnTC
4Vs8k+HcqoA2MxXaL38fCKSax349mP0F35twGPpmdBm4xmGvCuRc2q20ra1OQFW2
9h2jWWBnJyNkCCKMnFQzpBs4I9Ks1RzrEpy4OYuwTGyK9R0CCrgp1MTk79as6lpA
LMTvh8eHX2H64yjJ5SQiFBDhn+ikW1lWgg0zIEWkqgQ228Jye5kliIl9aeLVhaI1
McLHN59KGdvo9HBqK8IicmR0mpRTATYm6Z/kuhILDaHbOY7AK347t6Hy5m9uoe4J
7j6oWXiXHi7gO2Yznimh71rRDzyy7o1baao8VLwSh7zRGSE1iBuv8ONTlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxikIdHV0+azBr8lUodST+pfnhBMB8GA1UdIwQY
MBaAFJ83IOlw+qDgf1CmOJ565Tr6Q52rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnpjZzZYRDZvT0JfVUtZNG5ucmxPdnBEbmFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9iYjdjMGUtZWU2OC00YmY4LWJiMzQt
MTJlNmEwZDQzMThhLzEvbnpjZzZYRDZvT0JfVUtZNG5ucmxPdnBEbmFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9iYjdjMGUtZWU2OC00YmY4LWJiMzQtMTJlNmEwZDQzMThh
LzEvbnpjZzZYRDZvT0JfVUtZNG5ucmxPdnBEbmFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ/5rAYYa
Grfn4QRZDfouD1jlm32y/pEu9ElcpotRoIkaBle6sdtanE1LgiiLwor4XifLkQH9
nVZK9081Za6DO8DKvO+OmooGy1hAyw5y3djrbxDmKnr9Wxp105qidezK3+bY+A3K
iyPizHJRuciqDxVeGNahaFFZ9CkSbrQ7URnq7HhIUd12N+TFor+1AlJdaTuGV5ue
+Ji1rCE2rB08iW6ml+CG8Cth2eyacWm0ffinWiRTl/KIQw9ZZSX0T1n3jJ6zYTHo
WN2btt7ZRIJs0jecMU33fafWqUdgn40nzUTkCG0BTaLNjmfevCGEa/3YNfaxwAy5
TiKN99MW2lCt5w==
-----END CERTIFICATE-----
Generated at Fri Jul 4 17:40:50 2025 by rpki-client