Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
File: nzcg6XD6oOB_UKY4nnrlOvpDnas.mft (raw, json)
Hash identifier: +IePjvnyqeMOrlqtZpUix+dGRzmvYS8/ZAJ2ADforko=
Subject key identifier: C8:F0:D6:99:BD:4D:C0:58:CA:45:4A:94:49:54:A5:B1:0C:A4:DB:B2
Authority key identifier: 9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB
Certificate issuer: /CN=9f3720e970faa0e07f50a6389e7ae53afa439dab
Certificate serial: 0198D6CD35C50DB01078343E794D77998AD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 12:00:29 +0000
Manifest this update: Sat 23 Aug 2025 12:00:29 +0000
Manifest next update: Sun 24 Aug 2025 12:00:29 +0000
Files and hashes: 1: Etd-zR5nQJ_3oZWsvX_yh9qZs04.roa (hash: Va9UidVPtYR8CQHobQQrWe+S/Z2ABdjjbhF7ggqh2M0=)
2: nzcg6XD6oOB_UKY4nnrlOvpDnas.crl (hash: EIm3OBX/6jnE6nU5tDZoiL5041Vj7qq0po7/9LmEvv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:35:c5:0d:b0:10:78:34:3e:79:4d:77:99:8a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3720e970faa0e07f50a6389e7ae53afa439dab
Validity
Not Before: Aug 23 12:00:29 2025 GMT
Not After : Aug 24 12:00:29 2025 GMT
Subject: CN=c8f0d699bd4dc058ca454a944954a5b10ca4dbb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:22:10:1a:21:05:b3:1b:dd:f9:3c:b6:6a:00:
1e:89:9e:8b:a1:14:04:a3:19:c1:9c:4d:ed:08:08:
a9:64:9d:ce:37:fd:50:f4:c2:e3:d9:23:cb:85:11:
55:e4:20:76:5c:33:21:ae:48:d5:5e:16:ac:3f:63:
85:9a:57:7f:a5:70:ad:40:7c:73:0b:eb:a3:f6:a0:
2e:79:0b:18:cc:65:83:f3:0d:76:fc:94:de:2d:d7:
9e:a9:d6:0b:5b:49:ad:cb:08:35:0f:20:6a:d7:f7:
f9:64:5d:5a:c4:5e:ec:ac:68:8e:7d:c1:27:2b:19:
50:b5:4e:bb:91:65:c1:02:58:0c:83:7a:a9:14:b9:
9c:10:a4:1f:b1:5d:03:ba:a0:86:79:8c:c2:19:17:
13:ed:6a:a6:c7:2a:9e:88:12:4a:17:78:9f:95:fd:
4f:ab:a3:3b:08:7a:81:d6:3a:d0:4d:6d:79:0f:26:
9b:f0:cd:f1:44:a4:67:78:07:0a:24:75:d6:d8:c3:
46:f6:84:87:08:4f:e8:cc:87:4d:1f:d5:6f:7d:87:
ae:43:ea:81:68:a5:12:e0:25:cc:11:a9:60:54:4f:
09:8e:6d:e4:3d:15:02:55:67:21:8f:f8:d1:c1:84:
ca:59:8c:8c:60:9c:12:1a:97:47:92:13:a3:ff:bd:
3b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F0:D6:99:BD:4D:C0:58:CA:45:4A:94:49:54:A5:B1:0C:A4:DB:B2
X509v3 Authority Key Identifier:
keyid:9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:57:79:0e:49:e6:98:f6:62:0d:dc:76:fc:62:53:86:a4:18:
4b:f0:f6:e3:ba:8a:35:49:ea:f1:76:64:0e:06:62:9c:1e:63:
a8:92:79:00:df:dc:b6:da:b0:b7:f2:4f:cc:33:82:02:c6:34:
37:91:28:bc:76:2e:f5:41:44:74:df:45:57:3b:95:5b:7c:bb:
84:52:d2:6d:fc:16:7c:6d:79:93:27:23:33:85:6d:a5:95:ca:
aa:b1:2c:6b:e8:f6:ff:61:0e:7d:ca:27:96:95:a5:79:7f:e8:
73:e2:63:5a:04:08:9e:76:ac:4d:99:5b:1b:c9:ab:ed:7d:e2:
b5:30:d1:a7:71:51:f1:b9:01:97:9f:04:1e:de:54:a1:c6:07:
52:75:4d:2e:d3:a6:dc:30:5e:de:a4:2a:6b:88:b4:68:59:86:
09:a9:ad:cb:1e:40:e8:6a:aa:aa:5f:9a:09:eb:93:4c:ce:5e:
35:74:68:ba:f2:7b:2c:a0:6b:63:a4:80:96:3f:b1:97:e9:d2:
9c:b8:36:84:77:37:1a:3c:9b:f3:ba:63:bf:5a:4d:f2:db:b5:
10:47:a0:c6:29:77:2c:38:4e:f2:54:b3:df:0e:c0:22:3e:b8:
2f:09:be:a9:86:78:4a:af:a2:ed:b7:fd:9b:0f:31:76:12:80:
42:34:25:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:22:03 2025 by rpki-client