Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
File: r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft (raw, json)
Hash identifier: rSdL42LXzFbIZFypwouQyOqN7wPJ64eIEGNnTzpH3N4=
Subject key identifier: 07:2F:26:C4:4F:69:31:07:72:DB:B7:9F:72:B6:43:64:DE:1B:DF:00
Authority key identifier: AF:F3:59:65:46:D4:62:0B:02:A9:64:2F:08:B7:7C:FE:65:02:AE:99
Certificate issuer: /CN=aff3596546d4620b02a9642f08b77cfe6502ae99
Certificate serial: 019A70A525EFBBDBF7D11BB8509E25570297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 02:01:02 +0000
Manifest this update: Tue 11 Nov 2025 02:01:02 +0000
Manifest next update: Wed 12 Nov 2025 02:01:02 +0000
Files and hashes: 1: r_NZZUbUYgsCqWQvCLd8_mUCrpk.crl (hash: Vd1FyqG6cEkuhnacz8HMgGONb7Pc1NFmB40l+Geiat4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:25:ef:bb:db:f7:d1:1b:b8:50:9e:25:57:02:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff3596546d4620b02a9642f08b77cfe6502ae99
Validity
Not Before: Nov 11 02:01:02 2025 GMT
Not After : Nov 12 02:01:02 2025 GMT
Subject: CN=072f26c44f69310772dbb79f72b64364de1bdf00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f8:e1:d9:de:58:5a:e2:e6:88:3d:3a:2c:1c:
1e:b0:7d:09:21:d1:04:ef:ad:42:9e:a4:89:ce:32:
97:83:5e:25:49:b5:1a:be:7a:0a:45:15:19:7f:2b:
0a:36:66:78:c7:e0:5f:ee:b4:34:7b:d9:09:0c:19:
bf:7a:22:ed:a2:97:70:a2:84:e2:0b:a8:ad:2d:2d:
75:ed:ba:a8:47:36:7b:f2:db:38:fe:58:78:46:6f:
fe:bf:0d:52:f4:a4:b9:ff:43:82:56:8a:00:a4:ac:
40:e7:ae:4c:b0:08:b7:59:9d:83:11:07:eb:98:7d:
af:4d:02:69:e4:93:15:ec:5a:70:a6:0e:86:a6:85:
52:63:1d:39:1b:c5:6e:fc:97:b8:07:b7:5e:28:bb:
7a:56:dd:39:4e:5c:10:a3:ef:49:cb:c1:fb:4c:e9:
67:a3:20:13:a3:42:15:52:0d:bf:ea:1b:25:dc:3f:
34:d9:a5:88:71:53:88:e9:2b:de:52:e5:6d:3d:72:
c3:9b:eb:38:92:98:34:96:ca:f5:0c:de:a1:a9:c7:
1f:8c:1f:8a:ad:82:eb:90:1c:1f:4a:72:92:62:3d:
84:1e:39:dc:6f:94:15:95:ad:71:03:28:17:07:2b:
e9:a8:41:89:f8:9d:a1:08:4a:c2:7a:4b:46:b4:0f:
2f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:2F:26:C4:4F:69:31:07:72:DB:B7:9F:72:B6:43:64:DE:1B:DF:00
X509v3 Authority Key Identifier:
keyid:AF:F3:59:65:46:D4:62:0B:02:A9:64:2F:08:B7:7C:FE:65:02:AE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:0d:fd:3d:5f:48:55:8c:1a:a0:8e:cf:a9:72:d7:ae:90:47:
b9:22:7b:38:ec:40:8f:a7:1b:5b:54:97:b0:4a:88:c9:9a:61:
9f:ec:a3:18:a9:7f:e1:b9:f1:9b:d8:f9:13:1f:f3:d8:28:df:
32:cf:25:45:ab:de:ee:cc:f3:fe:ea:27:35:8d:df:be:ce:78:
0f:67:4e:8e:75:09:a3:00:f7:1a:42:e7:ba:9a:ac:e5:50:75:
fd:47:05:ee:1b:73:70:2e:0c:dc:d7:71:9c:68:9c:9a:e2:2c:
6c:44:09:6a:34:4f:a8:29:7f:20:97:40:51:a6:2f:0a:2e:c1:
b7:88:a7:01:94:6c:54:4c:0d:38:17:08:11:dc:30:d5:f4:5f:
0a:57:6b:0f:19:30:0d:40:4b:49:c6:a8:8a:97:20:57:57:84:
9f:bb:5a:e9:ad:fa:a1:9f:54:1b:65:2a:6a:9c:c6:0b:b9:31:
4a:db:db:32:97:a4:ba:1c:43:29:21:5b:dc:da:c5:2d:f4:b4:
28:b3:18:cd:f6:af:b2:37:10:5a:f1:6e:18:c5:d8:75:e2:6d:
f2:1c:56:2e:06:64:e4:d0:b0:02:4f:a5:8e:d2:9b:b8:95:50:
57:e4:36:b9:3b:bc:74:d7:6e:4b:c0:2d:cf:55:18:ac:c8:0a:
ed:11:cb:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpSXvu9v30Ru4UJ4lVwKXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZjM1OTY1NDZkNDYyMGIwMmE5NjQyZjA4Yjc3Y2ZlNjUw
MmFlOTkwHhcNMjUxMTExMDIwMTAyWhcNMjUxMTEyMDIwMTAyWjAzMTEwLwYDVQQD
EygwNzJmMjZjNDRmNjkzMTA3NzJkYmI3OWY3MmI2NDM2NGRlMWJkZjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvjh2d5YWuLmiD06LBwesH0JIdEE
761CnqSJzjKXg14lSbUavnoKRRUZfysKNmZ4x+Bf7rQ0e9kJDBm/eiLtopdwooTi
C6itLS117bqoRzZ78ts4/lh4Rm/+vw1S9KS5/0OCVooApKxA565MsAi3WZ2DEQfr
mH2vTQJp5JMV7Fpwpg6GpoVSYx05G8Vu/Je4B7deKLt6Vt05TlwQo+9Jy8H7TOln
oyATo0IVUg2/6hsl3D802aWIcVOI6SveUuVtPXLDm+s4kpg0lsr1DN6hqccfjB+K
rYLrkBwfSnKSYj2EHjncb5QVla1xAygXByvpqEGJ+J2hCErCektGtA8vYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAcvJsRPaTEHctu3n3K2Q2TeG98AMB8GA1UdIwQY
MBaAFK/zWWVG1GILAqlkLwi3fP5lAq6ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcl9OWlpVYlVZZ3NDcVdRdkNMZDhfbVVDcnBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wMjk5ZjQtZDAwZC00NTdjLWJiNjct
MmFiOWFmOTM4NDM0LzEvcl9OWlpVYlVZZ3NDcVdRdkNMZDhfbVVDcnBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8wMjk5ZjQtZDAwZC00NTdjLWJiNjctMmFiOWFmOTM4NDM0
LzEvcl9OWlpVYlVZZ3NDcVdRdkNMZDhfbVVDcnBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANQ39PV9I
VYwaoI7PqXLXrpBHuSJ7OOxAj6cbW1SXsEqIyZphn+yjGKl/4bnxm9j5Ex/z2Cjf
Ms8lRave7szz/uonNY3fvs54D2dOjnUJowD3GkLnupqs5VB1/UcF7htzcC4M3Ndx
nGicmuIsbEQJajRPqCl/IJdAUaYvCi7Bt4inAZRsVEwNOBcIEdww1fRfCldrDxkw
DUBLScaoipcgV1eEn7ta6a36oZ9UG2UqapzGC7kxStvbMpekuhxDKSFb3NrFLfS0
KLMYzfavsjcQWvFuGMXYdeJt8hxWLgZk5NCwAk+ljtKbuJVQV+Q2uTu8dNduS8At
z1UYrMgK7RHLwQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:07 2025 by rpki-client