Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft
File: NNUZJHQCvPvfDs6QIK1kYi6dO64.mft (raw, json)
Hash identifier: tBeT9vbxC0t/6B7T8MA9Je8w3AbYXA0TjIgRgK/0c/8=
Subject key identifier: A3:F2:72:3B:44:14:3E:85:8A:D6:F9:E1:1E:FC:3B:6D:C9:6E:44:E7
Authority key identifier: 34:D5:19:24:74:02:BC:FB:DF:0E:CE:90:20:AD:64:62:2E:9D:3B:AE
Certificate issuer: /CN=34d519247402bcfbdf0ece9020ad64622e9d3bae
Certificate serial: 019A28551A2342E0C24337935557980A3145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft
Manifest number: 0F8B
Signing time: Tue 28 Oct 2025 01:00:57 +0000
Manifest this update: Tue 28 Oct 2025 01:00:57 +0000
Manifest next update: Wed 29 Oct 2025 01:00:57 +0000
Files and hashes: 1: 1-UL9cqmZR86h5znGrLr9rng1OoA.roa (hash: E9P7J2BtII/1SfdjE4hkF/I8cNTQ+7Tkvjo9UHiDiQ4=)
2: 16Vx9JFdsAydCBt8o5HI01kMvEY.roa (hash: uE6o+4HCde5Q2IcMEoOR7KpTVTAt1VCw3Ve7SEAAgA8=)
3: AVkM8pQNQe4Lv2gygeYw_iwNR8o.roa (hash: eBDfXYDOLbSmgkFxViph+uhEyXOWfI38ugg/5BV4TtY=)
4: NNUZJHQCvPvfDs6QIK1kYi6dO64.crl (hash: 0JA1HzPWIlTd0TYlmBeayS9YXzUx8Adtcr+d0y2dlMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft
rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:55:1a:23:42:e0:c2:43:37:93:55:57:98:0a:31:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34d519247402bcfbdf0ece9020ad64622e9d3bae
Validity
Not Before: Oct 28 01:00:57 2025 GMT
Not After : Oct 29 01:00:57 2025 GMT
Subject: CN=a3f2723b44143e858ad6f9e11efc3b6dc96e44e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b2:a8:d6:9a:54:89:ee:1a:0a:f7:97:7c:df:
71:51:2d:c7:ed:44:dc:cc:25:02:e2:d9:ef:c2:fa:
67:96:13:09:bb:51:15:ee:5e:6e:5c:3d:37:80:e4:
bd:42:bb:1f:ca:61:b8:c7:1f:86:c2:81:99:4f:a4:
91:76:59:6a:3e:c1:ce:97:5e:4e:01:c1:2e:4c:47:
d4:75:fb:ba:1d:1b:25:b6:a2:d3:39:7d:ee:67:72:
37:66:0f:1f:f9:d5:20:98:5d:e5:89:1b:e7:15:3c:
f9:74:60:cc:38:88:75:e9:99:67:43:2e:7c:3c:9b:
de:84:57:a4:c8:06:2c:46:bd:ff:a3:b2:63:ee:66:
8e:30:8e:85:79:5e:b5:91:69:16:7f:81:64:ad:ec:
ee:7c:da:ad:58:47:e3:0c:46:98:63:d3:12:d3:eb:
c5:8d:e2:45:d0:43:f8:5d:2a:aa:5c:d0:a2:8b:57:
83:34:94:0d:33:fa:de:8c:5a:bc:da:6b:23:3d:1c:
59:22:b4:f2:e2:55:6f:67:b1:cc:fe:b2:11:4b:dd:
99:25:81:ba:89:5e:1a:09:c9:1b:21:ea:93:25:16:
58:40:ee:6b:5d:00:db:35:a9:26:13:a9:35:9b:f4:
82:08:b7:9c:32:8e:6e:c5:72:67:dd:11:96:d0:5c:
c7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F2:72:3B:44:14:3E:85:8A:D6:F9:E1:1E:FC:3B:6D:C9:6E:44:E7
X509v3 Authority Key Identifier:
keyid:34:D5:19:24:74:02:BC:FB:DF:0E:CE:90:20:AD:64:62:2E:9D:3B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:12:12:54:37:28:1b:68:57:e8:3c:6c:00:77:7b:91:1c:48:
3e:d9:f1:8c:50:45:9c:d4:e3:d8:58:ac:34:29:8b:bf:d9:9c:
c7:e9:63:3d:da:99:c4:2e:b4:3f:11:6a:11:7d:26:8c:5e:9f:
19:f9:15:3b:67:67:bc:f8:ea:3d:b6:1b:13:14:5b:92:11:3a:
6f:e8:6e:fe:c4:09:c0:33:27:cb:58:33:5c:c0:9f:3c:34:ff:
6f:a0:73:41:50:5b:17:37:26:a0:d7:c0:c2:8a:7d:b4:ae:04:
ae:5a:0c:db:27:de:87:ac:25:82:dc:46:2e:b4:2e:f4:13:47:
89:6d:0f:1f:28:e2:23:84:ef:87:58:d9:ab:2a:b2:fb:1f:78:
5a:c0:d5:c4:93:eb:6c:5f:37:07:a7:cb:9c:2a:12:9e:75:04:
3b:36:1e:ac:d4:e6:1f:15:5c:bc:ad:e9:1e:24:e8:7b:ec:4c:
e0:66:68:b7:60:f8:ad:b4:03:05:2c:b0:b1:d7:c9:24:7a:f0:
be:33:5c:dd:96:97:43:57:57:9b:8f:c2:20:f4:b8:11:7c:87:
99:6e:b6:8d:04:70:47:8a:d4:7b:d6:62:eb:34:cd:b4:3f:5a:
6c:b3:7c:da:2c:3f:1d:6c:0a:b7:3b:1f:ae:61:5f:dd:53:87:
97:d8:b3:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZooVRojQuDCQzeTVVeYCjFFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZDUxOTI0NzQwMmJjZmJkZjBlY2U5MDIwYWQ2NDYyMmU5
ZDNiYWUwHhcNMjUxMDI4MDEwMDU3WhcNMjUxMDI5MDEwMDU3WjAzMTEwLwYDVQQD
EyhhM2YyNzIzYjQ0MTQzZTg1OGFkNmY5ZTExZWZjM2I2ZGM5NmU0NGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprKo1ppUie4aCveXfN9xUS3H7UTc
zCUC4tnvwvpnlhMJu1EV7l5uXD03gOS9QrsfymG4xx+GwoGZT6SRdllqPsHOl15O
AcEuTEfUdfu6HRsltqLTOX3uZ3I3Zg8f+dUgmF3liRvnFTz5dGDMOIh16ZlnQy58
PJvehFekyAYsRr3/o7Jj7maOMI6FeV61kWkWf4FkrezufNqtWEfjDEaYY9MS0+vF
jeJF0EP4XSqqXNCii1eDNJQNM/rejFq82msjPRxZIrTy4lVvZ7HM/rIRS92ZJYG6
iV4aCckbIeqTJRZYQO5rXQDbNakmE6k1m/SCCLecMo5uxXJn3RGW0FzHXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPycjtEFD6Fitb54R78O23JbkTnMB8GA1UdIwQY
MBaAFDTVGSR0Arz73w7OkCCtZGIunTuuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk5VWkpIUUN2UHZmRHM2UUlLMWtZaTZkTzY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zMDgxNzktYmU2OS00YzEwLTg2OTQt
ZmJkMzk5YTQ0NzVlLzEvTk5VWkpIUUN2UHZmRHM2UUlLMWtZaTZkTzY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8zMDgxNzktYmU2OS00YzEwLTg2OTQtZmJkMzk5YTQ0NzVl
LzEvTk5VWkpIUUN2UHZmRHM2UUlLMWtZaTZkTzY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcBISVDco
G2hX6DxsAHd7kRxIPtnxjFBFnNTj2FisNCmLv9mcx+ljPdqZxC60PxFqEX0mjF6f
GfkVO2dnvPjqPbYbExRbkhE6b+hu/sQJwDMny1gzXMCfPDT/b6BzQVBbFzcmoNfA
wop9tK4ErloM2yfeh6wlgtxGLrQu9BNHiW0PHyjiI4Tvh1jZqyqy+x94WsDVxJPr
bF83B6fLnCoSnnUEOzYerNTmHxVcvK3pHiToe+xM4GZot2D4rbQDBSywsdfJJHrw
vjNc3ZaXQ1dXm4/CIPS4EXyHmW62jQRwR4rUe9Zi6zTNtD9abLN82iw/HWwKtzsf
rmFf3VOHl9izhQ==
-----END CERTIFICATE-----
Generated at Tue Oct 28 03:35:59 2025 by rpki-client