Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
File: NZTKzdk15Fz3HGFngKGx1Kpox7U.mft (raw, json)
Hash identifier: ewEscRRV5R4wiC2lfS9/y7R3Q3WKkitPlPwVioElSyY=
Subject key identifier: C3:11:31:D0:78:8D:57:BA:A3:E9:C0:71:3E:50:B0:7A:F7:69:EC:94
Authority key identifier: 35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
Certificate issuer: /CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Certificate serial: 0199C645C6DA5ECB3DABE6BAC18AFF5477F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
Manifest number: 16C7
Signing time: Thu 09 Oct 2025 00:01:25 +0000
Manifest this update: Thu 09 Oct 2025 00:01:25 +0000
Manifest next update: Fri 10 Oct 2025 00:01:25 +0000
Files and hashes: 1: NZTKzdk15Fz3HGFngKGx1Kpox7U.crl (hash: UPcgONIQR819vtxKdwfHSTyNwoI6bmW6+bdkKoA5yLY=)
2: ofsbRp2fd5LCZL5t0IaGNjdbGV0.roa (hash: bLNeuXUfAO52F/EGBeoEWZNzHoJs12X+xc+mr+Ggzjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Oct 2025 00:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c6:45:c6:da:5e:cb:3d:ab:e6:ba:c1:8a:ff:54:77:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Validity
Not Before: Oct 9 00:01:25 2025 GMT
Not After : Oct 10 00:01:25 2025 GMT
Subject: CN=c31131d0788d57baa3e9c0713e50b07af769ec94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:da:01:72:ba:45:61:41:b5:4f:16:26:4a:b8:
74:f7:2a:5e:38:a9:7b:c9:cf:0c:d5:cf:d3:ac:fb:
72:b8:7b:b3:14:48:81:9c:19:31:73:24:a8:46:6c:
f4:70:af:83:8e:ff:17:1d:e0:0d:5e:19:00:31:af:
94:16:e6:ef:42:3c:7f:34:9e:a0:03:6b:85:48:51:
e8:63:6e:29:49:83:30:a4:3e:4d:a2:b6:8a:3d:83:
b0:4a:fa:96:85:81:9e:43:fb:46:79:fa:5a:36:50:
d5:a2:cb:b6:6f:da:e7:31:e0:2a:12:a2:7c:05:af:
4a:dc:23:1c:6c:03:66:f3:f0:aa:cd:32:f0:f7:80:
a3:ba:66:86:f9:58:cf:3d:fa:cd:b1:ea:bc:68:d2:
ce:73:bd:58:78:0d:db:c4:4e:e6:7b:17:45:d7:72:
d4:50:15:f0:98:d4:1c:98:6b:68:ac:c8:60:42:a2:
04:58:6a:a3:21:c0:f8:7a:1d:b9:f6:98:10:78:e6:
97:7b:a8:9e:34:10:d7:5f:b7:d6:5e:cf:1b:7e:eb:
7a:2e:25:31:79:95:f0:fc:43:56:39:84:bf:d7:22:
f8:da:24:e9:31:22:54:23:64:9f:fa:0f:74:33:32:
2e:a5:bc:b0:57:c4:81:9f:27:ff:dc:d5:76:ab:1e:
8c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:11:31:D0:78:8D:57:BA:A3:E9:C0:71:3E:50:B0:7A:F7:69:EC:94
X509v3 Authority Key Identifier:
keyid:35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:29:ad:b3:fc:11:f3:d6:91:cc:38:bf:af:59:a8:43:ae:e8:
9e:a7:f4:2a:a7:1f:d0:14:a4:ee:fd:5f:4b:89:fb:a7:64:36:
e5:2f:9c:95:62:55:c8:6a:61:95:62:b6:ab:17:ec:2d:a7:60:
11:73:eb:c1:25:dc:f0:27:8d:c3:c4:bc:b0:d0:0c:a6:6a:f0:
da:79:99:12:47:e8:cf:aa:35:11:81:39:62:75:ba:07:0e:f0:
f7:9f:37:24:11:0f:99:b4:95:f9:95:44:a0:2b:53:22:60:03:
cb:d4:1b:f9:48:38:12:2e:61:5c:26:c6:c7:d2:f0:51:14:38:
67:62:4d:65:d7:f5:66:a3:9f:a5:33:34:e5:21:56:cc:bf:16:
29:34:1a:2d:86:51:6c:01:95:da:65:0c:6c:c1:41:2e:6f:ea:
28:27:af:a7:f2:b0:d3:e7:df:b1:0b:da:e4:ac:fb:cd:86:2b:
76:ae:1b:29:84:ec:23:7e:c0:d5:13:14:9e:03:4b:0f:98:d1:
1f:28:c1:15:7c:9e:69:6b:ae:cd:12:f0:a6:02:ea:1b:3c:4f:
1f:fe:f9:e9:04:50:0b:9e:24:da:74:0f:7d:f1:b3:84:88:17:
15:f1:6c:b7:eb:b4:7f:9c:b3:86:a4:fc:dc:89:12:1a:49:47:
62:d4:14:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnGRcbaXss9q+a6wYr/VHf1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1OTRjYWNkZDkzNWU0NWNmNzFjNjE2NzgwYTFiMWQ0YWE2
OGM3YjUwHhcNMjUxMDA5MDAwMTI1WhcNMjUxMDEwMDAwMTI1WjAzMTEwLwYDVQQD
EyhjMzExMzFkMDc4OGQ1N2JhYTNlOWMwNzEzZTUwYjA3YWY3NjllYzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9oBcrpFYUG1TxYmSrh09ypeOKl7
yc8M1c/TrPtyuHuzFEiBnBkxcySoRmz0cK+Djv8XHeANXhkAMa+UFubvQjx/NJ6g
A2uFSFHoY24pSYMwpD5NoraKPYOwSvqWhYGeQ/tGefpaNlDVosu2b9rnMeAqEqJ8
Ba9K3CMcbANm8/CqzTLw94CjumaG+VjPPfrNseq8aNLOc71YeA3bxE7mexdF13LU
UBXwmNQcmGtorMhgQqIEWGqjIcD4eh259pgQeOaXe6ieNBDXX7fWXs8bfut6LiUx
eZXw/ENWOYS/1yL42iTpMSJUI2Sf+g90MzIupbywV8SBnyf/3NV2qx6MgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMMRMdB4jVe6o+nAcT5QsHr3aeyUMB8GA1UdIwQY
MBaAFDWUys3ZNeRc9xxhZ4ChsdSqaMe1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlpUS3pkazE1RnozSEdGbmdLR3gxS3BveDdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS81Y2IyNDUtNDJhMi00OThmLWI3YjIt
NGFiZGMyYmI5ZmEzLzEvTlpUS3pkazE1RnozSEdGbmdLR3gxS3BveDdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS81Y2IyNDUtNDJhMi00OThmLWI3YjItNGFiZGMyYmI5ZmEz
LzEvTlpUS3pkazE1RnozSEdGbmdLR3gxS3BveDdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWSmts/wR
89aRzDi/r1moQ67onqf0Kqcf0BSk7v1fS4n7p2Q25S+clWJVyGphlWK2qxfsLadg
EXPrwSXc8CeNw8S8sNAMpmrw2nmZEkfoz6o1EYE5YnW6Bw7w9583JBEPmbSV+ZVE
oCtTImADy9Qb+Ug4Ei5hXCbGx9LwURQ4Z2JNZdf1ZqOfpTM05SFWzL8WKTQaLYZR
bAGV2mUMbMFBLm/qKCevp/Kw0+ffsQva5Kz7zYYrdq4bKYTsI37A1RMUngNLD5jR
HyjBFXyeaWuuzRLwpgLqGzxPH/756QRQC54k2nQPffGzhIgXFfFst+u0f5yzhqT8
3IkSGklHYtQUGQ==
-----END CERTIFICATE-----
Generated at Thu Oct 9 08:37:07 2025 by rpki-client