Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
File: nUZUJyZmhDb6k-dX_u9NReJM1uM.mft (raw, json)
Hash identifier: +ESVJV4Cwhcs4Gqxk9RPGPA2DcBNZ1ibO0eEqyMhPZw=
Subject key identifier: CD:1C:35:4E:29:1B:71:BC:83:26:F2:F6:3E:80:9B:67:16:C5:F2:D9
Authority key identifier: 9D:46:54:27:26:66:84:36:FA:93:E7:57:FE:EF:4D:45:E2:4C:D6:E3
Certificate issuer: /CN=9d46542726668436fa93e757feef4d45e24cd6e3
Certificate serial: 0199221E788B161F38075331E9E227FBD72E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
Manifest number: 13B3
Signing time: Sun 07 Sep 2025 03:00:46 +0000
Manifest this update: Sun 07 Sep 2025 03:00:46 +0000
Manifest next update: Mon 08 Sep 2025 03:00:46 +0000
Files and hashes: 1: _1ZVUyiWiKcUkDQ7d9MEjN-Qxjg.roa (hash: B9N8iWkGu9FMB4JofKmJJULgTYSFoSVSwpeNEHQNG3o=)
2: nUZUJyZmhDb6k-dX_u9NReJM1uM.crl (hash: QK3zPEZE6ZR0xencgDfG1QA7X9sw38fC3LYCRCtvrJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:78:8b:16:1f:38:07:53:31:e9:e2:27:fb:d7:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d46542726668436fa93e757feef4d45e24cd6e3
Validity
Not Before: Sep 7 03:00:46 2025 GMT
Not After : Sep 8 03:00:46 2025 GMT
Subject: CN=cd1c354e291b71bc8326f2f63e809b6716c5f2d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:69:0a:1b:e9:48:5f:01:57:66:a8:ce:31:b1:
d7:15:84:23:c8:41:c3:5a:02:39:07:0f:a7:c6:a7:
d5:ab:f3:94:7e:81:da:22:8a:12:5a:af:00:08:06:
44:bb:c2:94:84:c6:43:1e:60:89:0f:44:83:87:bb:
4d:08:0c:e8:64:4d:8c:0f:ec:03:c9:4b:dd:e8:52:
95:7b:1e:27:55:1c:48:5b:77:1f:23:4f:23:0d:1d:
b9:6d:9c:7b:15:bc:88:4c:08:13:9f:86:6c:ca:ec:
05:d6:d8:d7:c6:37:1e:69:7b:6b:2d:68:7c:99:01:
da:87:f8:e3:85:f1:77:fa:22:cb:4f:81:f5:f8:a0:
53:20:10:6c:a4:c4:a5:59:ce:65:ac:53:1d:4e:9c:
38:3e:17:a3:18:82:19:12:ce:c4:5f:26:b2:36:39:
be:38:c0:12:14:10:02:9f:2f:5b:99:72:ea:cd:38:
4f:1b:e9:51:0f:e3:bb:d0:c2:9a:f0:6b:30:01:13:
6b:e2:8a:62:e4:63:aa:ca:8a:d7:5e:2b:b9:b2:2c:
9c:4e:7b:6b:87:1f:77:08:cd:c8:60:40:68:36:50:
38:8a:5d:f9:6d:92:b7:83:0d:d0:31:6b:d4:84:91:
53:33:e6:ec:d6:44:be:b2:66:e0:b8:91:6d:04:33:
c8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1C:35:4E:29:1B:71:BC:83:26:F2:F6:3E:80:9B:67:16:C5:F2:D9
X509v3 Authority Key Identifier:
keyid:9D:46:54:27:26:66:84:36:FA:93:E7:57:FE:EF:4D:45:E2:4C:D6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ff:57:3a:b4:37:de:81:92:2d:94:85:cf:33:5a:23:35:09:
59:77:7e:3e:fb:0d:4b:d6:44:82:26:e0:f5:45:85:80:af:ff:
d7:5d:a9:2d:ee:59:6c:0a:a6:d0:58:9f:31:7b:28:ae:ff:0c:
1b:6f:91:c2:e7:ee:d3:79:39:67:b2:f3:f7:19:bc:d6:b1:5e:
49:e7:fa:f4:35:43:0d:af:75:33:1e:cb:f7:dd:a4:2a:ae:9b:
36:9b:a6:e3:54:35:de:34:ea:ad:9a:cd:40:5a:c3:48:cc:eb:
34:1b:ca:a3:03:61:a1:23:2a:77:e5:aa:93:b2:ec:a2:3e:dc:
09:61:f8:95:87:51:9c:35:b7:97:d9:6e:5e:fa:2e:8a:6d:29:
5d:69:6b:41:c0:3f:84:21:c3:d6:b1:91:60:dd:d9:01:0f:32:
9d:5d:66:7e:de:59:fe:8c:cc:0e:bf:34:c5:90:42:26:19:71:
62:2f:ca:55:28:41:92:4d:98:56:42:43:1c:39:f6:cf:ca:f2:
c6:17:ac:4f:b6:6a:20:68:22:bb:c7:e3:33:90:2e:f5:2f:97:
9b:a4:b4:be:fd:51:39:e7:9a:ad:a3:77:88:b2:b7:01:d8:64:
0e:fe:97:d0:4c:1f:fb:22:a7:b7:19:7d:c0:61:20:71:c2:cb:
50:4f:dd:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHniLFh84B1Mx6eIn+9cuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkNDY1NDI3MjY2Njg0MzZmYTkzZTc1N2ZlZWY0ZDQ1ZTI0
Y2Q2ZTMwHhcNMjUwOTA3MDMwMDQ2WhcNMjUwOTA4MDMwMDQ2WjAzMTEwLwYDVQQD
EyhjZDFjMzU0ZTI5MWI3MWJjODMyNmYyZjYzZTgwOWI2NzE2YzVmMmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmkKG+lIXwFXZqjOMbHXFYQjyEHD
WgI5Bw+nxqfVq/OUfoHaIooSWq8ACAZEu8KUhMZDHmCJD0SDh7tNCAzoZE2MD+wD
yUvd6FKVex4nVRxIW3cfI08jDR25bZx7FbyITAgTn4ZsyuwF1tjXxjceaXtrLWh8
mQHah/jjhfF3+iLLT4H1+KBTIBBspMSlWc5lrFMdTpw4PhejGIIZEs7EXyayNjm+
OMASFBACny9bmXLqzThPG+lRD+O70MKa8GswARNr4opi5GOqyorXXiu5siycTntr
hx93CM3IYEBoNlA4il35bZK3gw3QMWvUhJFTM+bs1kS+smbguJFtBDPI8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0cNU4pG3G8gyby9j6Am2cWxfLZMB8GA1UdIwQY
MBaAFJ1GVCcmZoQ2+pPnV/7vTUXiTNbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblVaVUp5Wm1oRGI2ay1kWF91OU5SZUpNMXVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81ODAwNWEtNTIzMy00ODQ0LWIwMjQt
MjllMzVhZTkxMmRhLzEvblVaVUp5Wm1oRGI2ay1kWF91OU5SZUpNMXVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS81ODAwNWEtNTIzMy00ODQ0LWIwMjQtMjllMzVhZTkxMmRh
LzEvblVaVUp5Wm1oRGI2ay1kWF91OU5SZUpNMXVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQf9XOrQ3
3oGSLZSFzzNaIzUJWXd+PvsNS9ZEgibg9UWFgK//112pLe5ZbAqm0FifMXsorv8M
G2+Rwufu03k5Z7Lz9xm81rFeSef69DVDDa91Mx7L992kKq6bNpum41Q13jTqrZrN
QFrDSMzrNBvKowNhoSMqd+Wqk7Lsoj7cCWH4lYdRnDW3l9luXvouim0pXWlrQcA/
hCHD1rGRYN3ZAQ8ynV1mft5Z/ozMDr80xZBCJhlxYi/KVShBkk2YVkJDHDn2z8ry
xhesT7ZqIGgiu8fjM5Au9S+Xm6S0vv1ROeearaN3iLK3AdhkDv6X0Ewf+yKntxl9
wGEgccLLUE/dPw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:48:44 2025 by rpki-client