Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
File: RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft (raw, json)
Hash identifier: 5N5sIFDGKS9nJkpI0n5tu8+Fx2VIge7taQ6xLJyF+fk=
Subject key identifier: 23:ED:27:FA:03:D0:48:48:82:47:DB:87:0C:A0:13:B4:2F:8B:E6:51
Authority key identifier: 44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40
Certificate issuer: /CN=44d64dac03f1a57c1931667118048d82c43c5540
Certificate serial: 019838DF71C9EE5F7BB1C62909F0758E03AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
Manifest number: 0C73
Signing time: Wed 23 Jul 2025 20:00:24 +0000
Manifest this update: Wed 23 Jul 2025 20:00:24 +0000
Manifest next update: Thu 24 Jul 2025 20:00:24 +0000
Files and hashes: 1: RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl (hash: qnwkm628nUpnPk2A2qdiu41rfcHhvxIYGW3G1IzbFWo=)
2: vPwQH1RvTV4M1J-vAZbjIjKDG4c.roa (hash: bhhfgUa9IkevuU6kgmPNLfOfpmJN6kMgsbrrhzr6WCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:df:71:c9:ee:5f:7b:b1:c6:29:09:f0:75:8e:03:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d64dac03f1a57c1931667118048d82c43c5540
Validity
Not Before: Jul 23 20:00:24 2025 GMT
Not After : Jul 24 20:00:24 2025 GMT
Subject: CN=23ed27fa03d048488247db870ca013b42f8be651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0a:b9:82:7d:4c:62:4c:df:a0:10:45:d1:50:
7d:6f:c7:b6:db:e1:83:3f:0e:a4:f6:8f:2f:fa:ad:
5d:c5:9c:54:a1:53:88:df:2e:d4:0e:ba:b5:1c:d2:
cb:ee:1b:a5:03:c2:91:51:bf:23:e4:de:b4:9f:e9:
d3:46:f4:4e:eb:9e:0c:56:9d:12:73:63:c0:61:97:
e8:01:d5:65:f2:14:f7:85:a3:73:ba:67:f3:33:0b:
9d:af:0c:94:59:10:25:6f:e6:28:57:96:9b:31:2a:
56:c3:2d:34:ff:86:e5:e7:7e:cd:78:e4:c6:47:6a:
15:1e:86:ab:dd:79:06:32:f4:86:e5:f8:e7:2c:b3:
23:1f:ec:37:9e:71:55:c3:6e:b3:74:0b:1e:4f:cc:
c2:51:76:7c:5d:64:41:2e:b3:13:5f:79:3f:90:0e:
f8:42:ff:5f:6d:34:97:ea:f0:e7:42:c4:39:22:d9:
9c:e7:a8:87:8e:3a:3c:5a:3b:c8:1b:18:7d:d7:e2:
f4:8c:5b:d2:61:b1:c3:22:ad:b7:39:17:7f:2d:0a:
65:6d:6e:39:f0:53:97:8e:1e:5c:e7:03:4c:dd:1b:
ba:eb:a6:4f:d3:ec:a9:4d:b1:71:bf:e3:ac:53:34:
a5:29:13:3f:b6:5d:2b:eb:07:55:bf:5e:4f:17:96:
d5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:ED:27:FA:03:D0:48:48:82:47:DB:87:0C:A0:13:B4:2F:8B:E6:51
X509v3 Authority Key Identifier:
keyid:44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:4d:a4:8c:f4:b1:cf:af:60:10:57:f4:7d:d8:c0:17:f3:4f:
56:7f:0f:c9:c6:da:e3:41:88:42:d0:4d:fe:63:45:49:44:01:
4a:24:99:df:f2:46:96:d6:19:ec:73:e0:8a:8f:6d:89:3d:e5:
68:45:75:ce:fc:4a:cf:00:ca:b6:a0:e1:dd:79:82:e2:32:0d:
77:e8:08:ec:de:43:00:b8:5d:07:72:4a:c9:db:00:4b:54:cc:
bb:19:68:36:85:5b:82:8f:40:05:e4:fb:4f:00:cc:9e:e4:44:
50:3f:8e:7f:a5:a6:2c:31:97:f6:26:c2:42:4c:2b:81:5d:98:
92:9f:0d:f7:4b:70:0d:3e:36:53:58:37:9e:25:bc:b5:8b:3c:
69:7f:e6:80:66:d3:e8:2b:5f:a0:40:f3:fc:5a:2c:26:2e:d7:
a0:3b:1c:20:99:09:52:2e:f1:26:54:b5:b5:70:e2:dd:c9:83:
00:79:d7:0f:4a:87:0c:eb:f0:88:67:d6:72:e2:c2:21:b2:ec:
e3:44:d4:51:c2:00:d2:50:0d:7e:3c:45:85:50:d9:77:7c:73:
70:8b:11:75:11:1b:0a:d9:1c:fb:75:42:dc:e2:3e:82:f0:e0:
ac:dd:fc:3c:78:4e:d4:48:48:2a:48:ec:5b:7e:87:94:13:29:
ff:82:18:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 03:39:13 2025 by rpki-client