Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
File: r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft (raw, json)
Hash identifier: kR44JMSWqlCW0TOuAMQ625ZJKbojKTs6yc4O+0oYHpw=
Subject key identifier: 8F:0D:24:E1:43:BE:28:64:C3:F5:64:64:B0:12:8B:6D:5F:B8:4C:36
Authority key identifier: AF:F3:59:65:46:D4:62:0B:02:A9:64:2F:08:B7:7C:FE:65:02:AE:99
Certificate issuer: /CN=aff3596546d4620b02a9642f08b77cfe6502ae99
Certificate serial: 01984A413C6C41DF26C3F303D68CE25C005F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
Manifest number: 15FF
Signing time: Sun 27 Jul 2025 05:00:45 +0000
Manifest this update: Sun 27 Jul 2025 05:00:45 +0000
Manifest next update: Mon 28 Jul 2025 05:00:45 +0000
Files and hashes: 1: r_NZZUbUYgsCqWQvCLd8_mUCrpk.crl (hash: XTxnppK2rOWlfHQ++Oho882jk+4oyRx8bflKsVnGNNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:3c:6c:41:df:26:c3:f3:03:d6:8c:e2:5c:00:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff3596546d4620b02a9642f08b77cfe6502ae99
Validity
Not Before: Jul 27 05:00:45 2025 GMT
Not After : Jul 28 05:00:45 2025 GMT
Subject: CN=8f0d24e143be2864c3f56464b0128b6d5fb84c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7e:b6:d9:dd:95:94:c6:96:98:76:02:50:da:
f2:39:91:4e:c3:4c:62:7d:d1:a2:cb:1b:69:00:be:
5f:ec:ff:aa:23:8c:0f:e1:12:1f:8c:98:ed:e7:db:
c9:99:36:2b:22:3e:1d:fa:f1:17:9d:8c:b4:5a:ba:
af:fd:5c:17:e5:d3:0a:2b:9b:98:eb:4f:d6:21:47:
46:98:d1:9f:e0:fa:69:43:26:b0:50:7d:b4:5b:59:
32:d0:9d:cc:46:2d:3a:a3:91:fd:3a:67:05:6b:88:
15:38:89:f0:8e:ab:dc:47:c9:b0:73:09:b6:b3:a6:
20:e4:f6:08:8d:97:7f:17:53:5d:1c:c2:0d:4b:14:
2a:b1:6c:fa:82:0e:00:51:37:a3:ea:fa:68:9f:4e:
7b:a3:a4:b3:2d:46:21:39:5b:55:b5:53:ac:8d:e2:
15:9f:15:17:cb:d6:93:39:8b:23:ec:7e:91:33:25:
39:a5:a0:06:d4:85:91:79:83:29:17:51:a6:d7:14:
ab:e9:f6:40:2e:7e:1e:df:cd:18:da:1c:e7:58:36:
70:69:6e:d6:e0:bd:b5:34:fb:9e:70:06:d8:05:2e:
cd:ac:06:be:06:24:f9:a8:34:54:cd:5a:8c:2e:db:
a6:8f:57:06:0d:0d:7a:3a:f8:cb:32:78:ed:88:8b:
33:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:0D:24:E1:43:BE:28:64:C3:F5:64:64:B0:12:8B:6D:5F:B8:4C:36
X509v3 Authority Key Identifier:
keyid:AF:F3:59:65:46:D4:62:0B:02:A9:64:2F:08:B7:7C:FE:65:02:AE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e9:9a:3d:d9:f1:65:1c:1a:81:03:c4:37:f4:f6:a2:57:9a:
92:6b:48:2a:ea:6d:13:bf:e3:1e:40:50:9d:99:80:a3:ae:5d:
d6:7c:c5:70:05:f0:f4:8d:6c:f2:19:0d:3b:a3:2b:37:a5:6d:
11:73:6d:6c:73:74:78:61:df:8a:9e:95:42:65:e8:28:05:1d:
3f:6e:b0:6b:b9:28:58:3b:64:61:32:1b:b9:af:ba:28:61:2f:
3c:e8:90:71:55:54:57:d3:b3:e1:4b:39:53:ce:15:de:bc:b7:
b2:91:bf:bc:c8:7d:86:96:ca:71:4c:56:d3:ab:d8:08:39:1c:
22:49:10:ce:15:63:d6:95:34:4f:62:3f:f1:b1:f3:6b:91:fe:
17:2a:69:00:24:3f:3f:41:a5:27:85:5e:45:7f:b7:03:60:3d:
50:fe:d4:9b:b0:80:45:9c:9f:26:0f:1a:c1:73:00:17:c7:a4:
b2:11:9d:40:01:24:bd:ea:19:91:b4:a1:60:9e:aa:8a:dc:53:
ef:fc:b4:68:6d:20:c3:46:67:5c:b0:ec:dd:cc:6f:0e:aa:3c:
f5:fe:91:be:50:1b:57:db:e0:cb:14:1a:1f:a3:b1:ca:37:e0:
df:df:e4:41:00:2c:f1:12:97:de:89:5a:fb:bf:f8:86:3a:c6:
f0:8a:75:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:56:53 2025 by rpki-client