Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
File: NztHo87nmYKtsXA0HQICYCczICM.mft (raw, json)
Hash identifier: dnkpnQdgAt9X/4+eseKQ2KQtzI0mE34rVxUnkbXVLNg=
Subject key identifier: 77:39:19:31:D3:46:B4:B5:BF:14:C6:36:59:2A:0A:24:16:51:D9:89
Authority key identifier: 37:3B:47:A3:CE:E7:99:82:AD:B1:70:34:1D:02:02:60:27:33:20:23
Certificate issuer: /CN=373b47a3cee79982adb170341d02026027332023
Certificate serial: 01974779A40B8E62BB61683AE883FC54060B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
Manifest number: 157D
Signing time: Fri 06 Jun 2025 23:00:43 +0000
Manifest this update: Fri 06 Jun 2025 23:00:43 +0000
Manifest next update: Sat 07 Jun 2025 23:00:43 +0000
Files and hashes: 1: 44PWl9t-VK2hhZNHr5AmomvoGFc.roa (hash: OxQ7QHN27yQWahrAlORJzxbYRAyj5Alk9/N2TAEqxrY=)
2: NztHo87nmYKtsXA0HQICYCczICM.crl (hash: P9rLi4JmaHWx2L8wNuTDDEO7nNGNtDFrBbQWzIFloFg=)
3: fHM2AB9lWMdrr6W98wCcBfFFZto.roa (hash: O5xk5dJ9bNLjoHECEnZnVJ7Que2qp5xFQYolbd9r+sI=)
4: yGyQiv41kYE21uqhtuih0OLSi9I.roa (hash: tdu5vnXKQDyjaj/70REfOS/T9RJiHmxdfg/dwymFlGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:a4:0b:8e:62:bb:61:68:3a:e8:83:fc:54:06:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=373b47a3cee79982adb170341d02026027332023
Validity
Not Before: Jun 6 23:00:43 2025 GMT
Not After : Jun 7 23:00:43 2025 GMT
Subject: CN=77391931d346b4b5bf14c636592a0a241651d989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ba:12:ab:73:eb:d1:93:bc:50:f6:96:85:9a:
50:d7:ff:51:29:a6:d3:8c:1c:9e:7d:ae:b7:a4:c2:
58:27:34:ff:87:2c:de:4b:8c:77:a0:b3:60:b6:82:
44:68:80:a3:40:b3:8c:79:1c:1d:e8:d1:13:50:df:
4f:c7:22:d3:6c:1d:3b:c3:02:0d:27:00:73:83:bb:
e4:0c:ae:35:35:b8:6a:eb:da:95:f5:08:b0:e1:94:
54:43:1a:5f:02:be:70:2a:12:99:46:eb:94:18:2c:
90:ca:aa:70:5b:42:04:4a:b6:68:4b:74:a3:87:ba:
34:f9:96:23:f6:c9:0a:12:3d:30:94:dc:a9:fe:cf:
72:c1:ee:1f:86:6a:9f:1b:6f:69:fc:e6:38:72:18:
bd:6f:d0:e7:46:1a:c2:22:54:a8:42:70:cb:85:c6:
69:fe:1b:44:c7:38:19:fc:5a:33:f1:d8:13:cd:df:
60:d9:82:90:72:1d:00:10:e6:75:92:c5:fd:b4:87:
09:73:71:2a:66:3f:eb:f6:98:c9:4a:96:de:ee:c1:
72:77:d9:cb:e3:f3:07:4f:fe:02:97:d6:44:b5:b2:
ed:a8:40:bd:77:9a:61:a2:55:49:88:fc:b0:a2:81:
99:63:5d:00:6b:1a:81:c9:6a:cd:ab:52:97:ee:98:
d0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:39:19:31:D3:46:B4:B5:BF:14:C6:36:59:2A:0A:24:16:51:D9:89
X509v3 Authority Key Identifier:
keyid:37:3B:47:A3:CE:E7:99:82:AD:B1:70:34:1D:02:02:60:27:33:20:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:14:a0:e0:90:f8:38:d3:f5:d0:67:55:27:02:78:e8:1a:7d:
fb:ae:8d:a3:72:7f:93:fd:a2:f1:f4:3e:0d:f6:8d:e8:28:c1:
1c:3b:44:5b:e0:92:63:4d:79:76:ac:82:67:77:1e:9e:ff:95:
29:58:ce:32:4d:af:ef:9f:c2:77:8d:fd:7a:c2:a0:0c:4f:50:
30:f4:84:22:25:be:49:59:34:07:89:8a:fc:78:81:7b:cc:bc:
ff:9e:0e:ba:ea:5e:a2:64:03:50:2a:0e:80:f6:93:0b:91:08:
80:31:c3:ee:13:19:bd:9a:52:08:ad:a2:91:f0:5b:4b:6a:ca:
8c:47:12:0a:3a:7f:3b:0d:5c:e9:95:52:7c:b6:fb:b4:e0:ef:
cc:43:5b:5c:c0:a9:9b:c9:d9:94:e3:00:b6:28:3c:c3:aa:96:
6c:a3:d6:87:1a:2a:dc:ef:ad:1d:6f:64:73:0f:ee:be:ee:04:
b1:97:cc:2a:37:45:fc:4d:f7:d1:21:40:f7:5d:bf:f6:52:f5:
df:2d:d5:a8:39:8f:f3:63:30:f4:3e:f3:52:4e:a5:ec:2c:cd:
0d:0e:e8:6c:d7:5f:c9:ac:d6:b0:3f:d4:22:ef:f0:3d:eb:f1:
8a:b7:0d:f4:c3:a6:a0:35:1e:ec:c0:29:be:10:e4:da:1a:2f:
b3:8c:29:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHeaQLjmK7YWg66IP8VAYLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3M2I0N2EzY2VlNzk5ODJhZGIxNzAzNDFkMDIwMjYwMjcz
MzIwMjMwHhcNMjUwNjA2MjMwMDQzWhcNMjUwNjA3MjMwMDQzWjAzMTEwLwYDVQQD
Eyg3NzM5MTkzMWQzNDZiNGI1YmYxNGM2MzY1OTJhMGEyNDE2NTFkOTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsroSq3Pr0ZO8UPaWhZpQ1/9RKabT
jByefa63pMJYJzT/hyzeS4x3oLNgtoJEaICjQLOMeRwd6NETUN9PxyLTbB07wwIN
JwBzg7vkDK41Nbhq69qV9Qiw4ZRUQxpfAr5wKhKZRuuUGCyQyqpwW0IESrZoS3Sj
h7o0+ZYj9skKEj0wlNyp/s9ywe4fhmqfG29p/OY4chi9b9DnRhrCIlSoQnDLhcZp
/htExzgZ/Foz8dgTzd9g2YKQch0AEOZ1ksX9tIcJc3EqZj/r9pjJSpbe7sFyd9nL
4/MHT/4Cl9ZEtbLtqEC9d5pholVJiPywooGZY10AaxqByWrNq1KX7pjQGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHc5GTHTRrS1vxTGNlkqCiQWUdmJMB8GA1UdIwQY
MBaAFDc7R6PO55mCrbFwNB0CAmAnMyAjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnp0SG84N25tWUt0c1hBMEhRSUNZQ2N6SUNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC83YzJhMTUtYWM0ZC00NjRhLWE3N2Ut
MzJmOWEyODJmNTZjLzEvTnp0SG84N25tWUt0c1hBMEhRSUNZQ2N6SUNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC83YzJhMTUtYWM0ZC00NjRhLWE3N2UtMzJmOWEyODJmNTZj
LzEvTnp0SG84N25tWUt0c1hBMEhRSUNZQ2N6SUNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIxSg4JD4
ONP10GdVJwJ46Bp9+66No3J/k/2i8fQ+DfaN6CjBHDtEW+CSY015dqyCZ3cenv+V
KVjOMk2v75/Cd439esKgDE9QMPSEIiW+SVk0B4mK/HiBe8y8/54OuupeomQDUCoO
gPaTC5EIgDHD7hMZvZpSCK2ikfBbS2rKjEcSCjp/Ow1c6ZVSfLb7tODvzENbXMCp
m8nZlOMAtig8w6qWbKPWhxoq3O+tHW9kcw/uvu4EsZfMKjdF/E330SFA912/9lL1
3y3VqDmP82Mw9D7zUk6l7CzNDQ7obNdfyazWsD/UIu/wPevxircN9MOmoDUe7MAp
vhDk2hovs4wprQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 10:32:52 2025 by rpki-client