Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
File: nz7CHhDzZG5NwOI_X37ERQFWDeM.mft (raw, json)
Hash identifier: t2KlOD38RNQYHjwd/K7texWwgVpYh+HV7lf9csWtwU8=
Subject key identifier: BE:8D:F3:C5:25:43:C6:18:EF:36:21:7A:42:59:7C:5B:26:0E:78:AC
Authority key identifier: 9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3
Certificate issuer: /CN=9f3ec21e10f3646e4dc0e23f5f7ec44501560de3
Certificate serial: 0198C94A27E1318D28CC0E1FCF60530C7CFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
Manifest number: 0612
Signing time: Wed 20 Aug 2025 21:02:16 +0000
Manifest this update: Wed 20 Aug 2025 21:02:16 +0000
Manifest next update: Thu 21 Aug 2025 21:02:16 +0000
Files and hashes: 1: nz7CHhDzZG5NwOI_X37ERQFWDeM.crl (hash: sBnIa0Jhxp3w9Io0Q4CLDJ1yFSVTrQugCxNHzaNooGE=)
2: rj7cMvisc5sEsNUl1EQ8tKzz6C8.roa (hash: 6mpsbNewWQwOLcJiFmFyeCARGSCjU8+BOm6oNSA/kho=)
3: ymi9yVyZH-4QjFqx4TNJYTh4zAw.roa (hash: BjRl81ZbEIDdTp592nI0/wEPMbPN+bb2781H4ezqZJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 21:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c9:4a:27:e1:31:8d:28:cc:0e:1f:cf:60:53:0c:7c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3ec21e10f3646e4dc0e23f5f7ec44501560de3
Validity
Not Before: Aug 20 21:02:16 2025 GMT
Not After : Aug 21 21:02:16 2025 GMT
Subject: CN=be8df3c52543c618ef36217a42597c5b260e78ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c4:23:7f:12:86:fd:d9:31:a6:96:3f:17:82:
14:48:9a:67:d3:66:cb:a6:42:26:c2:41:22:0c:64:
8d:c9:b9:f4:2f:48:c5:35:93:c2:9d:5e:6f:4a:ab:
c0:a4:92:d9:11:64:ce:51:62:dd:6e:0a:2c:8c:61:
00:d7:4e:45:30:0a:7a:de:a6:ac:b1:f5:68:31:34:
a2:b6:03:f3:e3:a0:7c:1e:0c:25:52:d2:9e:9b:71:
92:32:cc:77:96:ca:25:f7:65:4c:e6:23:d7:03:2c:
8c:11:e6:14:de:ad:7e:66:95:2b:e5:ca:d2:74:0d:
08:8e:ff:d8:29:94:e5:49:17:f0:96:13:34:d4:26:
f4:49:b7:3a:78:79:35:61:0a:68:14:d4:f9:6f:f7:
af:9a:ad:f9:50:72:7c:39:f6:03:2f:df:10:73:f7:
76:7d:fe:f6:f3:c4:82:e5:a4:c0:04:cd:19:f4:c2:
be:45:a5:9f:26:0d:e4:ce:20:2c:cc:a1:08:db:fc:
57:b9:97:84:4f:58:9d:53:47:f8:f3:8f:1b:d1:d3:
67:db:e1:b4:4b:f4:ef:99:74:6e:d3:05:85:70:2f:
ef:95:93:8a:80:87:3d:49:20:76:22:ab:f3:8e:73:
bf:df:7b:d6:0c:f9:cf:6e:ca:bb:5a:90:50:57:2d:
5d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8D:F3:C5:25:43:C6:18:EF:36:21:7A:42:59:7C:5B:26:0E:78:AC
X509v3 Authority Key Identifier:
keyid:9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:eb:44:7e:4b:82:0c:0d:35:59:bb:5d:8e:90:d3:a7:20:cf:
5c:77:33:3f:63:a9:78:8b:93:60:cf:88:78:ba:92:c4:58:b0:
8e:9d:06:62:37:b3:d5:7b:ef:6c:06:22:51:2b:4e:aa:9f:7e:
bd:db:72:30:31:c4:b8:69:ab:7b:82:ff:0f:8e:41:0a:73:57:
36:f9:8f:80:63:d5:93:b6:95:35:5f:00:a1:e8:89:10:47:19:
41:35:85:e7:c3:bb:f1:79:cf:4a:d9:e1:25:6b:73:bf:da:31:
2d:b3:59:df:c3:fb:e3:ad:8f:9b:c4:6a:e6:a5:af:a2:59:d4:
4e:f5:4c:f7:91:6a:8d:80:75:e5:72:8e:55:5f:05:8c:cb:9b:
5e:eb:59:33:da:ac:9e:91:0e:d2:f4:13:cf:57:fb:03:c8:2b:
7e:4f:ca:45:e1:88:6b:b1:e5:fa:d4:d5:85:89:56:89:78:8a:
94:39:aa:76:cb:f0:1c:f8:11:a9:9a:91:d1:a1:78:15:68:12:
4b:7b:e7:31:b8:25:68:59:63:60:f2:73:9b:3f:d2:cc:d1:6a:
61:e0:90:ca:30:ea:eb:36:c2:db:7a:09:77:f6:ed:44:cf:b0:
ea:12:07:13:b0:3c:75:e8:28:c5:03:c2:93:df:53:fc:95:00:
e2:f3:e1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 05:48:08 2025 by rpki-client