Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
File: NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft (raw, json)
Hash identifier: JnUMxtDpcCnUUAuatixDVv6NvPre9oxFo6agAxuRLqc=
Subject key identifier: 26:BD:40:D4:85:B3:F8:38:7B:87:4C:F9:95:9B:C6:0C:62:6A:11:B7
Authority key identifier: 35:9D:DC:73:76:84:CE:04:17:54:A9:5B:56:B5:A0:76:D8:85:10:48
Certificate issuer: /CN=359ddc737684ce041754a95b56b5a076d8851048
Certificate serial: 019933B6E42966A8F66D23E683D4354AD7C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
Manifest number: 164F
Signing time: Wed 10 Sep 2025 13:00:47 +0000
Manifest this update: Wed 10 Sep 2025 13:00:47 +0000
Manifest next update: Thu 11 Sep 2025 13:00:47 +0000
Files and hashes: 1: NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl (hash: 3mkYjyDgMq4V4OCrKG11GF9tcmcNsddEAa+pSaQ25sc=)
2: OwN_u8-wXQUeHGlWNCeV2-9Zw1E.roa (hash: GL8HC8nKjSwa4mRugn3DqDIjF1e/NuFqUhL9j08TswI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:b6:e4:29:66:a8:f6:6d:23:e6:83:d4:35:4a:d7:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359ddc737684ce041754a95b56b5a076d8851048
Validity
Not Before: Sep 10 13:00:47 2025 GMT
Not After : Sep 11 13:00:47 2025 GMT
Subject: CN=26bd40d485b3f8387b874cf9959bc60c626a11b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1f:5a:4f:0f:1c:77:3b:3a:1d:54:6d:9a:8c:
29:84:19:e0:c9:1e:22:7b:60:8f:60:74:09:c8:ca:
d6:6f:a4:41:58:09:60:f3:44:14:54:ed:d8:c7:3f:
2b:a8:f2:91:06:59:33:73:3f:b5:d0:87:5c:df:ed:
37:07:24:00:ed:95:30:47:64:9c:11:d7:01:db:f1:
a8:1b:46:73:07:42:f2:bc:bd:b8:58:10:22:f6:f3:
b4:ea:17:a1:3c:a2:4d:90:cc:bc:53:1b:e0:53:c0:
06:35:cf:90:13:fe:0a:6d:73:16:82:f0:8f:31:82:
8f:5a:db:f3:1a:ad:1b:ca:af:a2:52:d3:17:86:6c:
c5:90:92:6d:74:84:3a:76:41:36:c2:c5:0b:8c:09:
ab:a7:9f:8d:69:b4:1d:d1:c0:8c:e7:5f:cb:17:5d:
90:08:b3:35:f7:fa:db:d5:ca:fe:80:82:f1:d9:6b:
9f:7b:bf:f9:c1:b6:a8:78:d2:ea:f4:75:78:47:d3:
05:83:6b:82:35:0f:91:aa:3f:2b:37:21:37:12:1c:
a3:2b:7e:6b:ca:03:32:e6:f5:fe:a0:30:63:c9:05:
11:40:27:91:60:c7:8d:f9:11:d0:5a:85:5f:8c:90:
9a:a4:93:fa:a5:c5:6c:3d:df:59:fc:f3:db:a2:b7:
fd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:BD:40:D4:85:B3:F8:38:7B:87:4C:F9:95:9B:C6:0C:62:6A:11:B7
X509v3 Authority Key Identifier:
keyid:35:9D:DC:73:76:84:CE:04:17:54:A9:5B:56:B5:A0:76:D8:85:10:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b2e3d3-32ed-4bb2-acf6-204148c5a017/1/NZ3cc3aEzgQXVKlbVrWgdtiFEEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c1:65:26:12:39:15:a9:29:45:1d:50:86:03:91:82:95:d3:
08:d9:00:2d:a0:0c:85:f2:24:3f:bf:db:cf:87:4d:a6:96:9d:
1c:6e:51:63:af:9d:57:05:8a:91:70:31:47:18:38:8e:af:f1:
d6:33:0a:ce:a9:42:65:af:02:12:5f:38:c0:93:f1:76:00:b8:
90:e3:3d:9a:c5:d2:ed:48:1f:d8:81:e1:15:88:f9:16:e3:64:
21:a1:e9:14:90:ef:71:f3:56:62:e2:91:47:56:7e:76:23:9e:
24:fb:25:8a:c1:1e:03:ee:5d:bb:dc:c1:30:66:c0:9d:23:2c:
15:d6:4f:e7:b0:0f:e6:a0:c6:ff:83:40:ff:a3:3e:e2:52:3f:
3e:a0:7f:18:3e:3e:ba:56:6e:6e:94:ae:34:36:a3:f2:36:5a:
07:59:5d:94:f0:7c:30:ad:ad:f4:a4:6a:86:f9:91:87:20:a4:
a9:5b:78:6f:5e:8e:73:20:d2:2b:00:e8:7d:3b:6d:6a:46:89:
51:ff:ff:4d:ce:19:f8:36:57:3d:6d:d7:fe:bb:c5:bf:85:cc:
86:00:a6:4f:57:a5:49:4d:8b:e0:92:ac:85:65:b7:45:18:54:
3d:c0:1a:78:26:0f:aa:43:01:f9:eb:02:19:bc:45:2c:3f:2e:
bd:6c:fc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:25:30 2025 by rpki-client