Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft
File: nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft (raw, json)
Hash identifier: 7/JqcuXLeGhF75X4amEhv8YyVCUwdwg3uk/IZxORpq0=
Subject key identifier: 31:30:AB:0E:93:81:43:22:59:6B:68:5F:5A:F1:91:B5:69:10:5C:4B
Authority key identifier: 9F:36:40:DA:7F:1B:C2:3E:D4:59:9F:84:A0:85:3C:83:99:F3:5D:72
Certificate issuer: /CN=9f3640da7f1bc23ed4599f84a0853c8399f35d72
Certificate serial: 019A1EAD65888DAEE6A90D8BC1A01F3DC2B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft
Manifest number: 083B
Signing time: Sun 26 Oct 2025 04:01:11 +0000
Manifest this update: Sun 26 Oct 2025 04:01:11 +0000
Manifest next update: Mon 27 Oct 2025 04:01:11 +0000
Files and hashes: 1: BlYqXPvciPfdyJ-GQUZOsP4jpLI.roa (hash: LmatIhZjxo/kiezrlbpjhiTczB9qo8t5QvMaWwqWJt0=)
2: nzZA2n8bwj7UWZ-EoIU8g5nzXXI.crl (hash: OmbyC4lJgwalyb8LQ6tS8JrN7pr5HXQjPde+M9kK+jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ad:65:88:8d:ae:e6:a9:0d:8b:c1:a0:1f:3d:c2:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3640da7f1bc23ed4599f84a0853c8399f35d72
Validity
Not Before: Oct 26 04:01:11 2025 GMT
Not After : Oct 27 04:01:11 2025 GMT
Subject: CN=3130ab0e93814322596b685f5af191b569105c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0a:2a:76:93:88:77:80:08:ba:0e:90:19:8c:
e3:25:66:f5:f2:9f:64:fa:37:d9:6a:af:c2:04:54:
33:20:e3:ca:74:11:22:9f:18:2f:41:83:af:cd:ac:
de:3c:bd:b7:45:cb:be:4a:08:6a:c8:74:78:2e:9e:
15:be:49:bc:8d:db:cd:5d:58:9d:51:88:f9:cb:f6:
21:63:86:bc:c5:71:6e:66:29:12:33:d6:66:3f:43:
cb:c1:41:49:f6:49:40:07:76:73:a2:16:5a:f2:e5:
19:3b:69:f1:a5:01:38:e3:08:bf:6c:df:2e:23:06:
5b:65:3e:44:a2:6e:d9:0c:b1:14:90:d9:a8:09:df:
b9:4c:22:c6:61:4f:a3:d4:c4:a1:0b:56:66:1d:d2:
df:93:23:26:8a:fe:b1:aa:eb:e9:f7:46:84:2a:92:
50:b1:63:35:17:f2:6a:69:9d:d5:ef:a2:23:15:fa:
f5:34:58:0f:93:9a:a9:28:ab:3b:c0:12:27:fe:13:
a8:ab:af:bb:04:91:c2:7f:b8:6a:e2:86:7c:62:72:
78:41:a7:d3:0b:6a:46:b8:5c:ac:8c:a3:e1:c5:89:
0b:9d:4e:f0:4b:36:83:24:fd:4d:03:be:9c:dc:a8:
b6:1e:60:21:23:5e:65:62:23:8a:07:e9:bc:d9:f9:
d8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:30:AB:0E:93:81:43:22:59:6B:68:5F:5A:F1:91:B5:69:10:5C:4B
X509v3 Authority Key Identifier:
keyid:9F:36:40:DA:7F:1B:C2:3E:D4:59:9F:84:A0:85:3C:83:99:F3:5D:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:3d:44:22:20:c7:c9:be:e4:41:57:70:c0:a2:9e:26:2a:72:
e9:f4:d2:ee:1c:48:3f:a8:52:c9:5d:23:f5:49:1e:58:41:1c:
c7:1c:f5:5e:ec:59:86:50:d6:91:92:da:c4:87:71:01:e9:47:
89:fc:71:f8:50:c7:52:87:eb:48:49:b2:2a:e3:b1:46:e1:0e:
65:2a:2d:4f:dd:aa:3e:82:7f:bb:d9:42:af:53:65:d6:93:40:
71:83:1d:42:9e:5c:b8:5f:4e:ac:17:66:cd:a1:d0:63:35:8e:
ca:60:9f:f6:2e:53:8d:e1:6f:02:91:1b:73:e1:b2:d5:90:79:
4f:09:8a:4d:ab:9d:9a:78:0d:1e:fa:25:f3:ff:6b:fb:48:a3:
df:9d:62:48:9c:80:d3:7e:60:28:c0:80:e1:78:cc:72:75:e0:
b2:50:64:b3:1a:e7:ca:12:03:23:3a:8f:81:c7:89:06:8f:9e:
39:23:6c:50:3d:a2:06:e6:2f:4a:76:95:a8:ef:84:dd:23:f5:
d1:fc:59:36:b4:26:86:ad:79:dd:b2:dc:66:46:5f:37:03:6d:
92:2b:a4:f7:ef:71:30:74:a8:3c:8d:d8:70:77:b3:d4:af:f3:
a2:ee:d7:59:44:12:1f:fa:ea:52:bf:05:b2:34:c6:09:f9:bf:
71:07:62:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoerWWIja7mqQ2LwaAfPcKxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMzY0MGRhN2YxYmMyM2VkNDU5OWY4NGEwODUzYzgzOTlm
MzVkNzIwHhcNMjUxMDI2MDQwMTExWhcNMjUxMDI3MDQwMTExWjAzMTEwLwYDVQQD
EygzMTMwYWIwZTkzODE0MzIyNTk2YjY4NWY1YWYxOTFiNTY5MTA1YzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwoqdpOId4AIug6QGYzjJWb18p9k
+jfZaq/CBFQzIOPKdBEinxgvQYOvzazePL23Rcu+SghqyHR4Lp4Vvkm8jdvNXVid
UYj5y/YhY4a8xXFuZikSM9ZmP0PLwUFJ9klAB3ZzohZa8uUZO2nxpQE44wi/bN8u
IwZbZT5Eom7ZDLEUkNmoCd+5TCLGYU+j1MShC1ZmHdLfkyMmiv6xquvp90aEKpJQ
sWM1F/JqaZ3V76IjFfr1NFgPk5qpKKs7wBIn/hOoq6+7BJHCf7hq4oZ8YnJ4QafT
C2pGuFysjKPhxYkLnU7wSzaDJP1NA76c3Ki2HmAhI15lYiOKB+m82fnYrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEwqw6TgUMiWWtoX1rxkbVpEFxLMB8GA1UdIwQY
MBaAFJ82QNp/G8I+1FmfhKCFPIOZ811yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnpaQTJuOGJ3ajdVV1otRW9JVThnNW56WFhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9iYjQ3YzItZjEwYi00YTc3LThiMDMt
ZWRjMzM2NjUyZWQ3LzEvbnpaQTJuOGJ3ajdVV1otRW9JVThnNW56WFhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9iYjQ3YzItZjEwYi00YTc3LThiMDMtZWRjMzM2NjUyZWQ3
LzEvbnpaQTJuOGJ3ajdVV1otRW9JVThnNW56WFhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOT1EIiDH
yb7kQVdwwKKeJipy6fTS7hxIP6hSyV0j9UkeWEEcxxz1XuxZhlDWkZLaxIdxAelH
ifxx+FDHUofrSEmyKuOxRuEOZSotT92qPoJ/u9lCr1Nl1pNAcYMdQp5cuF9OrBdm
zaHQYzWOymCf9i5TjeFvApEbc+Gy1ZB5TwmKTaudmngNHvol8/9r+0ij351iSJyA
035gKMCA4XjMcnXgslBksxrnyhIDIzqPgceJBo+eOSNsUD2iBuYvSnaVqO+E3SP1
0fxZNrQmhq153bLcZkZfNwNtkiuk9+9xMHSoPI3YcHez1K/zou7XWUQSH/rqUr8F
sjTGCfm/cQdi2A==
-----END CERTIFICATE-----
Generated at Sun Oct 26 10:54:23 2025 by rpki-client