Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
File: NztHo87nmYKtsXA0HQICYCczICM.mft (raw, json)
Hash identifier: DfXzGo+EgT9MjiRoEhECWkAJJDarWZt/YBg7VCzKQts=
Subject key identifier: 60:82:E6:69:66:29:59:6A:F3:06:AA:5D:2C:54:6F:39:3A:F9:D2:3B
Authority key identifier: 37:3B:47:A3:CE:E7:99:82:AD:B1:70:34:1D:02:02:60:27:33:20:23
Certificate issuer: /CN=373b47a3cee79982adb170341d02026027332023
Certificate serial: 019916F65F0780C0E2C46D4408D76B42BA28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
Manifest number: 166D
Signing time: Thu 04 Sep 2025 23:01:08 +0000
Manifest this update: Thu 04 Sep 2025 23:01:08 +0000
Manifest next update: Fri 05 Sep 2025 23:01:08 +0000
Files and hashes: 1: 44PWl9t-VK2hhZNHr5AmomvoGFc.roa (hash: OxQ7QHN27yQWahrAlORJzxbYRAyj5Alk9/N2TAEqxrY=)
2: NztHo87nmYKtsXA0HQICYCczICM.crl (hash: G8JZilD1jDfhJRpMZ/hQYd33+XafQXIuOh+Vr+UPZpE=)
3: fHM2AB9lWMdrr6W98wCcBfFFZto.roa (hash: O5xk5dJ9bNLjoHECEnZnVJ7Que2qp5xFQYolbd9r+sI=)
4: yGyQiv41kYE21uqhtuih0OLSi9I.roa (hash: tdu5vnXKQDyjaj/70REfOS/T9RJiHmxdfg/dwymFlGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:f6:5f:07:80:c0:e2:c4:6d:44:08:d7:6b:42:ba:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=373b47a3cee79982adb170341d02026027332023
Validity
Not Before: Sep 4 23:01:08 2025 GMT
Not After : Sep 5 23:01:08 2025 GMT
Subject: CN=6082e6696629596af306aa5d2c546f393af9d23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:66:38:ff:66:d7:87:99:3c:bb:a7:7d:99:1d:
ac:41:51:34:82:a7:34:f5:f8:32:54:59:46:21:dd:
b6:16:86:db:03:9e:ab:3c:47:a5:6a:39:42:54:15:
af:db:b9:97:b8:0d:19:fa:20:19:48:b2:9b:92:2e:
72:d9:d2:ce:3a:21:b0:43:5d:be:9f:51:2d:da:6d:
ed:93:c3:0a:bd:94:6b:3c:2c:8c:59:fd:73:55:07:
0b:9c:d6:d7:04:91:8e:a1:91:02:fd:07:81:40:c4:
5c:08:ab:34:6f:d6:20:b0:39:a5:8d:46:5a:de:67:
f2:c6:cf:8a:d4:b3:c6:e4:c8:87:cc:9a:80:da:87:
12:8e:d0:2e:e2:e6:40:07:ea:83:ff:ca:35:34:77:
18:f6:58:77:cb:f9:91:44:fd:e0:63:ea:9c:93:e2:
22:2b:5d:a9:61:7b:13:b7:8c:66:9d:ff:8e:bd:b5:
f1:4d:5e:65:ec:f1:b6:ae:a2:ba:81:5e:a4:69:a3:
f0:ea:95:3a:91:7d:8d:04:df:a9:9b:17:71:e7:da:
d1:4b:bb:87:fe:db:21:7e:3f:e5:5b:f1:80:fe:4c:
56:f3:ed:4e:b6:5a:b8:62:4a:95:39:7d:b1:a1:db:
23:71:79:c8:0d:de:87:79:c6:91:04:6f:f6:06:26:
73:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:82:E6:69:66:29:59:6A:F3:06:AA:5D:2C:54:6F:39:3A:F9:D2:3B
X509v3 Authority Key Identifier:
keyid:37:3B:47:A3:CE:E7:99:82:AD:B1:70:34:1D:02:02:60:27:33:20:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:28:45:66:f9:f2:15:2a:e1:1d:3b:7c:b8:04:b0:e8:e1:fb:
31:d2:32:17:7b:81:8d:ba:58:89:c5:51:77:93:8e:22:dd:ef:
ac:c1:ad:eb:1c:13:48:db:82:83:09:a2:1a:6d:be:52:53:c5:
22:9c:39:ae:8a:af:da:a1:3f:89:68:a8:50:01:b4:2f:b9:bd:
fb:47:b6:0c:05:a3:9f:cb:22:76:de:b7:4b:81:2e:6d:f2:c9:
17:85:0d:61:58:85:e4:f1:28:e1:3d:64:2b:18:92:aa:91:fb:
96:98:47:ab:a3:c5:8c:2b:ce:6a:04:ae:56:00:70:43:de:15:
da:ce:f7:a3:77:21:5b:5b:63:a1:5a:86:da:dc:1e:dd:e8:9e:
6f:9a:9d:74:1f:b6:e8:dc:4c:fc:2e:6f:97:e1:5a:ed:af:3b:
52:36:f4:c9:38:ae:e5:72:63:ce:97:7c:e4:f1:76:88:55:6e:
62:9f:4d:63:23:2b:42:d7:e3:be:e7:23:db:d4:de:73:9a:5a:
14:bd:bc:69:82:3e:88:9a:b6:10:96:42:cd:47:89:14:f4:4b:
13:1f:8f:40:c2:0f:31:be:73:31:3e:d1:d9:b5:bc:22:c0:12:
58:08:be:f5:eb:84:b7:4e:e9:6b:14:82:dc:b9:62:0b:30:75:
49:a6:ba:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:25 2025 by rpki-client