Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
File: nzcg6XD6oOB_UKY4nnrlOvpDnas.mft (raw, json)
Hash identifier: OJHsfiGeVEqIjD/eYsK/obi8f5uBtMl7LkmaLJ+x9ic=
Subject key identifier: 0F:AB:03:86:95:1A:F9:A3:64:54:A2:63:C3:EE:83:E2:79:B7:04:96
Authority key identifier: 9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB
Certificate issuer: /CN=9f3720e970faa0e07f50a6389e7ae53afa439dab
Certificate serial: 019849D3059E0748C6ED07461BEB8C5B35D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
Manifest number: 1606
Signing time: Sun 27 Jul 2025 03:00:23 +0000
Manifest this update: Sun 27 Jul 2025 03:00:23 +0000
Manifest next update: Mon 28 Jul 2025 03:00:23 +0000
Files and hashes: 1: Etd-zR5nQJ_3oZWsvX_yh9qZs04.roa (hash: Va9UidVPtYR8CQHobQQrWe+S/Z2ABdjjbhF7ggqh2M0=)
2: nzcg6XD6oOB_UKY4nnrlOvpDnas.crl (hash: wnDjgukILJI4koehttA8Yby8SirsFcfXGwLfFO2pNHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:05:9e:07:48:c6:ed:07:46:1b:eb:8c:5b:35:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3720e970faa0e07f50a6389e7ae53afa439dab
Validity
Not Before: Jul 27 03:00:23 2025 GMT
Not After : Jul 28 03:00:23 2025 GMT
Subject: CN=0fab0386951af9a36454a263c3ee83e279b70496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:db:df:0c:ed:27:13:f9:4a:a7:2c:8a:38:45:
22:67:02:77:db:12:7f:46:d9:54:31:a2:25:1f:7a:
e9:24:87:25:68:5f:f2:43:dc:e0:ad:e0:60:95:88:
2b:da:79:88:91:48:2b:30:fe:14:9a:e3:86:cb:51:
8f:5b:4a:a4:b3:c1:49:19:95:45:af:e1:a1:7e:f9:
74:12:17:e8:d0:a1:eb:4c:16:3a:65:31:1a:1b:b5:
89:69:2a:1d:50:3d:06:f5:b9:80:0c:56:88:08:84:
d3:49:bd:1e:24:45:32:57:0b:7a:d7:c4:0f:a8:20:
7c:e3:32:29:a7:20:48:8d:f5:a5:70:ab:87:c3:f7:
91:26:28:d5:68:21:ee:17:54:61:26:db:21:0a:72:
af:1c:6c:fa:2e:6f:67:ad:63:80:e6:b2:e6:45:a8:
dc:17:c8:22:eb:65:21:e3:ea:69:49:ce:77:92:f2:
f6:00:7c:a6:38:6c:68:c4:ed:c6:3c:9d:ff:d0:7e:
8e:35:3f:bf:67:71:5d:4c:63:ea:cc:d1:5f:6a:07:
f6:2d:c0:bc:29:5d:b9:1b:86:21:ce:b1:e5:41:16:
a2:c1:e0:8c:cd:f1:d3:3e:3b:5c:f1:38:e3:44:bc:
86:e5:89:2f:b0:a9:46:86:49:4a:46:2a:ac:68:3d:
95:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AB:03:86:95:1A:F9:A3:64:54:A2:63:C3:EE:83:E2:79:B7:04:96
X509v3 Authority Key Identifier:
keyid:9F:37:20:E9:70:FA:A0:E0:7F:50:A6:38:9E:7A:E5:3A:FA:43:9D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzcg6XD6oOB_UKY4nnrlOvpDnas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb7c0e-ee68-4bf8-bb34-12e6a0d4318a/1/nzcg6XD6oOB_UKY4nnrlOvpDnas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:5c:1f:89:ee:58:0b:28:a8:2c:bc:3b:c3:21:87:c0:ab:0d:
55:78:e9:c0:a2:d6:e0:b9:c4:28:cb:73:25:f2:dd:6d:35:a0:
78:59:d8:8a:b2:97:07:f6:64:e3:d8:37:29:a8:36:85:24:2c:
17:7a:c9:bb:fa:4b:11:03:a9:2a:1d:f1:fd:46:5f:5d:14:96:
29:98:b1:a5:84:41:51:dd:05:75:61:58:07:be:32:3a:c1:bd:
43:85:7b:86:d3:33:f5:22:a0:8b:84:b9:45:08:a6:33:17:f9:
35:43:9a:61:7c:56:38:f7:e8:3c:13:d2:6b:c3:f5:65:af:f0:
b2:4c:29:18:c1:ae:41:ad:41:17:46:0e:f0:f0:c5:cd:62:2f:
bc:3a:96:af:eb:40:81:10:11:63:2d:29:d8:fe:e5:a1:d3:16:
11:93:b9:bd:18:96:82:2c:11:8c:d1:2f:43:65:d4:2b:b6:5c:
2e:a4:ba:c0:e8:3c:95:49:eb:60:3c:ec:a2:38:eb:0c:be:c9:
ab:84:00:cf:33:61:f8:fc:1d:8a:1a:6f:77:0e:99:49:f8:e2:
d6:81:ba:f2:12:bd:43:e2:61:36:f6:a2:c9:8d:07:39:cd:18:
99:57:f3:5f:fc:2c:aa:20:dd:1b:25:09:5f:c5:0d:53:e2:34:
c5:41:61:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:15:48 2025 by rpki-client