Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft
File: nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft (raw, json)
Hash identifier: 9n/UNPrkZWW6JhihpH0N827+CqMkf+cxEwrybRwrnws=
Subject key identifier: 6C:46:06:F9:42:EB:D5:66:04:F3:D9:A3:C6:3D:4B:C3:1E:2E:B5:8F
Authority key identifier: 9F:36:40:DA:7F:1B:C2:3E:D4:59:9F:84:A0:85:3C:83:99:F3:5D:72
Certificate issuer: /CN=9f3640da7f1bc23ed4599f84a0853c8399f35d72
Certificate serial: 019921B24594486FFDD73151BF81F42F1449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft
Manifest number: 07B8
Signing time: Sun 07 Sep 2025 01:02:35 +0000
Manifest this update: Sun 07 Sep 2025 01:02:35 +0000
Manifest next update: Mon 08 Sep 2025 01:02:35 +0000
Files and hashes: 1: BlYqXPvciPfdyJ-GQUZOsP4jpLI.roa (hash: LmatIhZjxo/kiezrlbpjhiTczB9qo8t5QvMaWwqWJt0=)
2: nzZA2n8bwj7UWZ-EoIU8g5nzXXI.crl (hash: crNL1RIX/4RxEGz39O6Q6CsPlyy4qZLxJxOF5BpMf9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:45:94:48:6f:fd:d7:31:51:bf:81:f4:2f:14:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3640da7f1bc23ed4599f84a0853c8399f35d72
Validity
Not Before: Sep 7 01:02:35 2025 GMT
Not After : Sep 8 01:02:35 2025 GMT
Subject: CN=6c4606f942ebd56604f3d9a3c63d4bc31e2eb58f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e6:f0:6c:08:f6:4a:a8:93:31:6a:e9:77:4c:
9c:49:cc:bc:e0:f0:63:bb:dc:34:7d:72:ca:bb:1b:
17:89:a7:86:e7:d2:79:2f:f0:ce:2c:8a:7b:51:4b:
02:98:17:8b:7a:de:3f:23:40:b4:87:71:ac:4c:9e:
36:dd:4e:7e:73:06:e1:d7:13:dc:25:36:94:4a:85:
a5:a3:c9:6a:cc:22:73:2f:fd:8f:37:58:db:36:0b:
38:af:cc:a9:3d:f6:7a:e4:3f:a7:d4:7b:ab:2a:c2:
06:dc:d2:4c:e1:07:d1:27:3a:4d:6f:ce:e8:79:49:
4b:7b:f6:a6:01:37:ce:db:fb:a3:16:b1:c7:4c:5f:
e5:e8:fe:b5:99:05:54:c4:1d:23:84:68:10:ac:87:
29:74:8f:6c:88:97:cd:62:fe:1b:75:09:79:f1:1e:
a3:83:6d:2f:de:b4:07:cd:4a:2b:cf:a7:0e:c0:53:
29:54:f8:5b:e3:33:44:a3:6a:f8:5c:0c:5c:e6:1d:
1c:38:30:ac:5e:c3:e1:e6:14:12:62:c2:f9:42:43:
6b:87:d7:61:73:49:93:0c:49:14:0f:9a:cc:38:5d:
98:73:6b:3d:33:54:2c:59:ba:6b:fd:52:92:9f:5f:
42:14:e4:d3:6a:0d:e3:08:9f:8e:a0:8b:30:ce:b8:
0d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:46:06:F9:42:EB:D5:66:04:F3:D9:A3:C6:3D:4B:C3:1E:2E:B5:8F
X509v3 Authority Key Identifier:
keyid:9F:36:40:DA:7F:1B:C2:3E:D4:59:9F:84:A0:85:3C:83:99:F3:5D:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:b5:94:7e:fe:92:c9:89:25:3a:91:12:f0:0d:fa:19:bc:83:
85:2e:93:3c:5e:b5:c4:17:42:62:85:e5:d4:17:f5:74:2c:2e:
ce:58:9d:81:ab:70:40:f8:11:3d:07:fe:db:01:60:4c:a6:b3:
56:6f:24:c3:72:08:0c:1e:66:ef:c3:3e:e6:16:91:71:31:73:
2c:a1:49:a3:07:22:49:97:de:81:b2:82:12:de:2a:0a:ee:0d:
38:00:6e:4a:2b:2e:84:15:40:92:4f:48:74:f3:bf:6a:a0:12:
db:43:15:db:01:ae:e9:e3:e1:a5:71:8a:99:ee:ff:24:e1:46:
f4:bf:38:79:08:44:74:fb:7e:a2:a8:7d:d8:d9:2b:15:e2:f7:
bd:e4:fc:cf:51:05:c4:db:14:90:54:5b:f1:0d:e9:4f:2e:7f:
0f:e8:30:ca:0d:ec:a2:3c:5a:25:8f:e0:2c:5c:e8:4a:53:78:
1c:16:95:23:56:be:d9:a6:9e:86:5b:79:b9:39:1b:6c:c2:35:
8c:01:71:43:95:b6:07:20:37:e9:50:dc:f9:bc:89:26:58:ca:
b7:fa:bf:43:79:c4:d5:6f:4e:fd:a7:2f:76:ed:85:e9:0c:98:
29:42:8d:34:21:7e:90:e9:fd:4c:5c:80:7c:a5:af:cd:84:50:
93:cf:6b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:47:23 2025 by rpki-client