Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
File: nz7CHhDzZG5NwOI_X37ERQFWDeM.mft (raw, json)
Hash identifier: F3cz2ojBmf9OmEH1UNanL1CN1yhyg1m8CW0GdSdJ1R0=
Subject key identifier: 39:D2:69:A0:60:44:F4:16:46:44:A2:5F:B9:3B:5B:DE:A2:AD:12:36
Authority key identifier: 9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3
Certificate issuer: /CN=9f3ec21e10f3646e4dc0e23f5f7ec44501560de3
Certificate serial: 0199C26951BCDBA76A0CC09CF2005442A65A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
Manifest number: 0693
Signing time: Wed 08 Oct 2025 06:01:45 +0000
Manifest this update: Wed 08 Oct 2025 06:01:45 +0000
Manifest next update: Thu 09 Oct 2025 06:01:45 +0000
Files and hashes: 1: nz7CHhDzZG5NwOI_X37ERQFWDeM.crl (hash: hIkmA0oTeKJ92tC/ko6v7DjhASXfqX0wAw5ZASATRLE=)
2: rj7cMvisc5sEsNUl1EQ8tKzz6C8.roa (hash: 6mpsbNewWQwOLcJiFmFyeCARGSCjU8+BOm6oNSA/kho=)
3: ymi9yVyZH-4QjFqx4TNJYTh4zAw.roa (hash: BjRl81ZbEIDdTp592nI0/wEPMbPN+bb2781H4ezqZJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 06:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c2:69:51:bc:db:a7:6a:0c:c0:9c:f2:00:54:42:a6:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3ec21e10f3646e4dc0e23f5f7ec44501560de3
Validity
Not Before: Oct 8 06:01:45 2025 GMT
Not After : Oct 9 06:01:45 2025 GMT
Subject: CN=39d269a06044f4164644a25fb93b5bdea2ad1236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:01:ae:04:92:5c:3b:f4:7e:32:61:22:33:9f:
97:41:f5:c4:c0:08:49:e1:4f:97:ce:83:56:1b:ad:
09:f5:58:14:7d:98:c1:47:98:73:6a:a5:ae:ee:be:
48:48:53:12:69:cb:fe:4d:52:d9:d9:52:3d:5b:c5:
9e:00:25:14:ef:4e:23:8e:c4:7a:d1:e8:2a:46:13:
43:ec:66:16:8c:8b:df:dc:8f:d6:e3:a5:54:17:2e:
d2:41:92:2b:db:12:58:14:34:f3:52:57:c4:ab:89:
93:f2:ae:51:3d:8c:08:06:e0:05:d9:d6:f7:cc:4c:
98:b0:23:d1:7c:46:67:3b:9a:c9:3d:ff:ac:90:c0:
35:34:e3:ce:e2:70:c0:83:d8:e1:1c:cd:5a:f2:8a:
7f:59:d2:7c:64:43:6a:db:9b:f9:6d:e2:77:9a:d0:
7c:4e:72:c2:c1:a3:3c:da:12:16:3a:6c:af:c1:70:
84:a5:55:7a:27:29:d6:c5:fb:eb:5b:e8:25:b2:95:
80:39:e8:b9:9c:f4:e2:d5:48:4e:c2:62:d8:23:2f:
db:80:b3:b1:2f:23:ac:b4:0f:35:b3:ae:4b:a2:73:
6f:b8:5a:6f:da:2f:fc:28:4e:7a:71:c8:a8:7f:f4:
45:ae:f6:2b:58:e7:8a:30:98:85:76:21:99:46:12:
8f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D2:69:A0:60:44:F4:16:46:44:A2:5F:B9:3B:5B:DE:A2:AD:12:36
X509v3 Authority Key Identifier:
keyid:9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a1:c7:47:40:d5:8e:00:fa:46:62:d7:f7:c8:9e:5e:8b:82:
d5:be:cd:18:34:43:a1:62:19:1a:57:bd:34:16:79:7b:46:57:
61:25:85:4d:45:27:be:28:4b:54:1c:b0:aa:a9:fd:b5:29:64:
8f:4f:0d:73:ec:15:6c:dd:9b:29:ae:63:22:3d:02:da:c2:8e:
89:07:ff:c6:5f:7a:91:cf:fc:d2:93:fa:de:c6:37:41:18:31:
5b:09:46:1e:15:e6:00:30:49:0f:5f:40:2c:d8:87:ca:06:77:
ad:a5:1a:ea:6f:70:40:1c:ee:53:ff:da:b9:c0:99:b0:fc:bf:
0a:0b:cb:8d:78:c4:64:63:a3:b4:2f:f2:d4:a2:a2:d9:06:c2:
d8:99:63:06:bd:bf:28:4b:a8:9f:40:73:cd:bf:2e:87:7f:18:
c8:16:76:79:97:2e:46:67:f6:ae:61:0c:8f:74:36:69:c3:18:
5b:40:03:cd:b9:dd:8d:e1:04:f3:25:44:5a:f0:64:a8:f5:18:
06:3a:3a:d8:aa:6c:b3:97:d3:a7:fa:e9:ad:05:df:c3:45:ad:
ea:90:91:1a:5e:2c:74:e4:b8:15:e7:59:31:4e:cb:8a:81:61:
f2:5e:aa:a6:9a:6b:fa:bc:a5:aa:89:c1:5e:80:f5:26:3e:53:
f1:27:b1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 15:48:57 2025 by rpki-client