Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.mft
File: Nz3Mauaq2IhZH7d75OqWDzU1__Q.mft (raw, json)
Hash identifier: 8hzwrjB8DFjox5B0TC14DSKOhzRsvVCeJXQPPuaT/gw=
Subject key identifier: D5:BC:5C:92:12:6B:94:9F:0E:23:0B:7A:10:81:29:68:FE:38:95:B5
Authority key identifier: 37:3D:CC:6A:E6:AA:D8:88:59:1F:B7:7B:E4:EA:96:0F:35:35:FF:F4
Certificate issuer: /CN=373dcc6ae6aad888591fb77be4ea960f3535fff4
Certificate serial: 019845884CF602F3B65D631E95DC6761E201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nz3Mauaq2IhZH7d75OqWDzU1__Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.mft
Manifest number: 0C63
Signing time: Sat 26 Jul 2025 07:00:16 +0000
Manifest this update: Sat 26 Jul 2025 07:00:16 +0000
Manifest next update: Sun 27 Jul 2025 07:00:16 +0000
Files and hashes: 1: Nz3Mauaq2IhZH7d75OqWDzU1__Q.crl (hash: wgd36VhnW4M/zffZybcadapWrUWunYbq18tOjIgjmW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nz3Mauaq2IhZH7d75OqWDzU1__Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:4c:f6:02:f3:b6:5d:63:1e:95:dc:67:61:e2:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=373dcc6ae6aad888591fb77be4ea960f3535fff4
Validity
Not Before: Jul 26 07:00:16 2025 GMT
Not After : Jul 27 07:00:16 2025 GMT
Subject: CN=d5bc5c92126b949f0e230b7a10812968fe3895b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9d:a5:a5:e3:34:2e:4d:6c:95:ba:85:e0:6e:
ca:ac:44:82:29:13:07:99:f2:54:7a:e2:a2:8d:a9:
bf:1d:13:12:fa:66:be:4b:f6:e2:92:3c:06:28:d0:
a7:ab:dc:2b:a0:30:4d:c3:da:e2:68:b9:6f:31:71:
13:7c:c8:c9:27:5b:e9:21:95:c4:11:e8:15:fc:7f:
04:c6:d2:b2:fb:2a:bb:ad:f3:ff:9f:a4:e3:69:df:
ff:1f:6b:52:f7:d3:ca:1b:3f:4c:6c:29:f4:02:bb:
40:c1:b1:8f:28:65:9b:f0:9a:4c:50:c6:60:92:f4:
0a:06:53:67:8d:91:d8:d7:54:0a:3a:a2:f3:af:8a:
8b:41:5e:b0:ea:d7:9b:2a:5e:f6:4c:18:d9:21:10:
9b:e2:7c:b7:af:cb:92:53:d1:37:8e:a0:42:60:10:
bd:dc:f0:f3:3c:42:28:1b:6d:5c:3f:af:c6:e1:6e:
93:76:2b:51:90:4f:68:ab:35:44:a5:b2:79:9f:a3:
21:05:a4:7e:ce:53:df:0a:a7:ca:67:32:ae:8e:7e:
b0:f0:ab:db:0b:6b:12:bc:2d:46:09:11:bf:f6:f6:
32:a7:f0:f0:0c:f5:0d:65:f4:91:54:5a:2f:c5:5a:
04:a1:21:fa:10:0b:35:6d:3e:ff:f6:f7:75:3a:f0:
dd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BC:5C:92:12:6B:94:9F:0E:23:0B:7A:10:81:29:68:FE:38:95:B5
X509v3 Authority Key Identifier:
keyid:37:3D:CC:6A:E6:AA:D8:88:59:1F:B7:7B:E4:EA:96:0F:35:35:FF:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nz3Mauaq2IhZH7d75OqWDzU1__Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:2b:23:af:c7:49:5a:af:ac:40:cb:25:79:c3:34:09:3e:25:
e2:ac:ef:26:c2:6e:ef:88:4e:cf:95:6c:76:4c:31:dd:43:76:
74:b9:92:98:0e:06:05:20:5a:17:f8:0e:46:7e:e2:7c:66:67:
2d:c8:b6:47:24:17:b4:c5:8a:d5:81:51:b8:a0:0e:00:1e:ee:
07:e6:13:7d:2e:83:ad:5d:e7:3d:f1:6a:9b:5e:ed:1f:57:67:
f7:0b:71:90:1c:e0:9f:4b:ac:9f:73:6c:67:f1:ff:aa:35:78:
6d:b5:10:68:3c:ba:b0:e4:8a:5c:9d:67:11:47:98:de:03:23:
3b:f2:22:fa:14:99:f7:c1:f5:ed:74:8d:de:6d:4a:cb:55:c0:
dd:90:a4:33:34:62:88:12:06:6e:f4:ea:e3:ea:7d:59:a7:b2:
76:ba:3a:fc:0f:ec:80:8f:77:8a:13:c1:d4:c4:0c:de:9b:44:
71:c5:e9:80:67:52:fe:0b:f2:04:50:48:dc:b2:43:e7:12:f9:
0a:9f:18:a5:b1:cf:e4:d8:d8:7b:31:b9:d5:25:10:3d:28:ac:
de:f2:78:62:f8:29:a6:80:08:8f:3e:4d:f4:5c:36:9f:eb:3d:
13:f9:2b:b1:30:9a:79:4f:fd:42:0f:23:b6:74:4d:3e:04:ba:
c2:92:f6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:32:29 2025 by rpki-client