Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.mft
File: nzeBglGggdHMfzAVMg62NSZwm5E.mft (raw, json)
Hash identifier: x2fJQSJ+jURVjKGwJSjajQeQM4uqoU3YLrXCG4NJ8nI=
Subject key identifier: 73:B1:8C:85:30:0C:33:39:F1:38:FC:A6:61:FD:DC:10:22:62:FD:C6
Authority key identifier: 9F:37:81:82:51:A0:81:D1:CC:7F:30:15:32:0E:B6:35:26:70:9B:91
Certificate issuer: /CN=9f37818251a081d1cc7f3015320eb63526709b91
Certificate serial: 0198530E2E1B33F2C90D88FEE0E44971D302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzeBglGggdHMfzAVMg62NSZwm5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.mft
Manifest number: 066F
Signing time: Mon 28 Jul 2025 22:01:34 +0000
Manifest this update: Mon 28 Jul 2025 22:01:34 +0000
Manifest next update: Tue 29 Jul 2025 22:01:34 +0000
Files and hashes: 1: nzeBglGggdHMfzAVMg62NSZwm5E.crl (hash: PzNU0abwa1E9TAJFaLSx02TxZ8NVoO7InSbHUBmD/vA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzeBglGggdHMfzAVMg62NSZwm5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:2e:1b:33:f2:c9:0d:88:fe:e0:e4:49:71:d3:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f37818251a081d1cc7f3015320eb63526709b91
Validity
Not Before: Jul 28 22:01:34 2025 GMT
Not After : Jul 29 22:01:34 2025 GMT
Subject: CN=73b18c85300c3339f138fca661fddc102262fdc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4e:a1:1b:2f:77:d6:21:6c:d0:95:26:94:25:
b3:4f:11:84:78:fd:dc:ff:7a:fa:11:b2:66:28:a2:
e0:92:91:e0:0d:70:30:84:5c:8d:2b:2b:a6:46:97:
35:21:1e:0d:f1:27:df:9d:86:1f:8a:5d:a2:0d:b2:
18:62:68:39:ad:f5:e2:1d:22:42:c5:3a:cd:07:7b:
e6:09:17:94:28:5c:b6:5e:b3:c8:38:08:ad:13:e2:
50:31:0f:ab:5b:60:23:e7:fd:67:ab:9e:a9:6a:7a:
0e:2f:47:df:1c:09:fd:ad:be:21:6a:95:f0:13:ac:
5d:f0:a7:f5:6b:25:39:41:c4:bc:b7:64:d4:c2:1e:
02:3c:e2:48:4b:8f:04:68:e3:66:67:36:5d:4a:70:
aa:d1:b9:19:75:3f:54:9e:64:d8:a8:bc:cf:11:f6:
c8:60:bb:6f:36:cc:c9:25:bd:4e:4b:ce:9d:ab:37:
f3:25:ce:8e:12:8c:9e:22:37:08:dd:5f:e6:d9:c0:
f7:6c:8c:31:be:3f:94:37:c2:1f:43:bd:4b:d4:ca:
bd:92:d7:27:63:f0:9c:cc:85:3a:32:e1:d0:d8:46:
14:25:a0:f4:b9:5b:c9:92:f5:ce:dc:be:78:67:8b:
19:5b:ed:57:93:b5:2d:5c:b9:44:51:6a:28:11:b9:
c3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B1:8C:85:30:0C:33:39:F1:38:FC:A6:61:FD:DC:10:22:62:FD:C6
X509v3 Authority Key Identifier:
keyid:9F:37:81:82:51:A0:81:D1:CC:7F:30:15:32:0E:B6:35:26:70:9B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzeBglGggdHMfzAVMg62NSZwm5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:41:42:12:53:09:9d:77:c9:cf:3c:12:73:3e:84:9b:ed:e4:
d0:3b:f6:04:49:f8:57:97:e8:55:56:62:2e:66:4d:bf:dc:62:
a4:1e:b7:c4:00:5c:96:56:71:a9:b6:66:18:91:dc:5d:5f:94:
77:24:9a:85:d6:67:ee:4f:47:dc:b2:c6:b9:95:a8:1b:23:32:
55:d7:2c:aa:15:4e:9e:e1:60:26:d7:f6:6d:12:14:d1:2b:1c:
15:9f:be:76:a7:81:48:f4:d1:b8:11:a0:a6:27:a9:a3:0d:e1:
3b:7c:bf:3a:a6:7f:1c:71:07:50:9b:ed:41:2d:d5:f1:71:82:
7f:65:22:41:fb:61:15:8d:c3:f5:99:08:ad:51:9f:31:ae:5a:
ce:e7:16:ca:76:67:68:61:f0:f3:cf:32:8b:ad:cb:db:d6:e9:
d3:34:03:97:92:33:17:a1:0f:c5:c6:b1:1e:c0:62:15:43:f5:
c1:ef:38:66:a5:88:f8:78:40:60:48:17:d4:d6:2f:92:53:12:
cc:3d:5d:30:f5:79:48:8b:99:31:e3:c3:eb:0a:5d:55:1e:df:
a1:fb:1b:61:5e:f5:3e:64:65:dd:34:93:2a:3a:1e:c2:07:7d:
87:f7:8e:e6:e0:65:fb:ee:f0:22:9c:20:1a:90:c5:00:d3:f6:
e8:46:b8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:47:14 2025 by rpki-client