Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
File: NZ5FeU8Bkp_awnLCYms-guvJxd8.mft (raw, json)
Hash identifier: 9f5GP9NDu4MtpsLSIQwvRqeiblfUH0w5qRq+Q+/Vaaw=
Subject key identifier: BF:8B:B3:59:75:D5:0D:DC:CB:E6:5B:78:71:1C:B7:32:A2:59:1B:69
Authority key identifier: 35:9E:45:79:4F:01:92:9F:DA:C2:72:C2:62:6B:3E:82:EB:C9:C5:DF
Certificate issuer: /CN=359e45794f01929fdac272c2626b3e82ebc9c5df
Certificate serial: 019849662F5E548E9E64D50C9D8CD056A91C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
Manifest number: 15FD
Signing time: Sun 27 Jul 2025 01:01:30 +0000
Manifest this update: Sun 27 Jul 2025 01:01:30 +0000
Manifest next update: Mon 28 Jul 2025 01:01:30 +0000
Files and hashes: 1: NZ5FeU8Bkp_awnLCYms-guvJxd8.crl (hash: lmB/+Zu0MxGKSo8JvpabBaww5F5ByxDYsmsNVyDGH1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:2f:5e:54:8e:9e:64:d5:0c:9d:8c:d0:56:a9:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359e45794f01929fdac272c2626b3e82ebc9c5df
Validity
Not Before: Jul 27 01:01:30 2025 GMT
Not After : Jul 28 01:01:30 2025 GMT
Subject: CN=bf8bb35975d50ddccbe65b78711cb732a2591b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:eb:b1:46:48:05:95:bf:41:cf:ef:5a:3b:97:
ec:9e:55:0e:12:0e:40:7f:b1:bb:d9:89:2f:76:c4:
b4:bf:62:3d:dd:c6:48:38:b5:59:1b:c3:f0:91:4c:
e9:41:ed:7a:2c:85:4b:1d:da:7c:d2:1d:24:db:99:
40:75:65:36:fb:22:7b:5e:c0:65:df:3f:dd:9a:10:
80:3d:49:04:95:67:b4:94:4a:d0:a5:95:e9:3f:9e:
90:fd:e8:8e:9e:f7:c1:c2:2f:bd:c7:95:6c:4a:68:
cd:2a:e6:1d:b0:39:2e:e1:25:b8:83:18:ad:dc:2a:
da:f2:cf:df:aa:c7:09:8d:f9:35:7e:26:c2:b9:96:
cd:8c:87:b5:26:db:f6:cb:70:8c:d4:47:6e:af:ad:
22:10:8f:5b:b0:6b:d5:9c:3c:a3:da:3b:bb:16:0f:
c1:c7:b3:3a:3a:c6:a3:dd:55:30:99:e0:c5:25:e3:
62:eb:40:0d:53:6b:9c:94:eb:f4:51:55:61:b7:07:
aa:f7:9c:bf:c7:ef:8c:86:a3:e5:03:21:5b:6e:be:
94:ca:66:af:e9:65:a0:b5:63:ea:cb:01:18:ef:1d:
3c:14:80:15:26:47:07:d3:70:b7:4e:54:1a:ca:d9:
d7:25:e3:b2:3e:e8:14:2a:c2:46:71:d5:bc:a9:44:
8b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8B:B3:59:75:D5:0D:DC:CB:E6:5B:78:71:1C:B7:32:A2:59:1B:69
X509v3 Authority Key Identifier:
keyid:35:9E:45:79:4F:01:92:9F:DA:C2:72:C2:62:6B:3E:82:EB:C9:C5:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f9:4a:d1:47:7f:cc:52:f9:e8:ad:29:6e:1d:ae:3b:1c:84:
66:b4:3f:19:23:a7:8f:cc:42:aa:83:0e:ee:91:87:0e:cc:22:
a2:95:a1:cc:65:22:89:e9:17:ad:68:a1:45:f7:22:a9:47:4e:
06:f4:33:69:65:56:ea:99:4d:82:d0:eb:a9:b2:bb:aa:e7:80:
99:7d:48:39:f3:25:84:bf:d4:4e:47:a1:4b:57:fb:85:6c:b0:
2e:9c:d0:95:f4:7e:57:9c:d3:36:c5:db:b7:34:00:2e:23:09:
bf:b2:68:a5:10:5c:d0:8b:83:59:74:e4:83:3e:fc:30:79:3c:
6f:75:a9:86:54:1a:a5:14:b4:8e:58:2a:cb:68:49:22:54:d4:
4f:be:54:23:02:81:6b:10:77:55:38:d1:d3:6b:44:9d:22:88:
0e:24:f9:f4:08:a9:2e:01:bb:a3:82:34:8b:6c:da:f3:14:61:
27:4f:76:3c:32:c2:f6:f4:78:85:a8:4c:fe:9b:06:1b:ba:e5:
45:64:b6:bc:90:63:eb:19:6a:72:85:b6:64:05:bb:9b:68:07:
35:67:db:d6:53:c1:65:19:14:c1:9b:3e:ce:9e:9b:5e:9b:d5:
a1:d8:04:c8:93:7c:2c:34:3b:64:b7:58:33:20:68:88:4d:6c:
24:67:4c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:37:34 2025 by rpki-client