Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
File: nz7CHhDzZG5NwOI_X37ERQFWDeM.mft (raw, json)
Hash identifier: p0dWzzLH6vnLOdD9/qygigAXictn7LyxXmaG5FeIHg4=
Subject key identifier: 55:B5:68:B6:0D:B3:56:08:C9:26:C7:A9:43:44:58:12:F0:BD:C2:F3
Authority key identifier: 9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3
Certificate issuer: /CN=9f3ec21e10f3646e4dc0e23f5f7ec44501560de3
Certificate serial: 01975BDC4E164FD9CD37F64F36A828CF2A2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
Manifest number: 0554
Signing time: Tue 10 Jun 2025 22:00:53 +0000
Manifest this update: Tue 10 Jun 2025 22:00:53 +0000
Manifest next update: Wed 11 Jun 2025 22:00:53 +0000
Files and hashes: 1: _ySRDLzQdwiGbOJn6VG0WghGnvs.roa (hash: iftvJSfyvy0E59eeWCgB+fQqIp2vGxrZU/nTeE6jx9c=)
2: nz7CHhDzZG5NwOI_X37ERQFWDeM.crl (hash: IP6bnBiE5R1cP3FhGhMA8SRXg3bvQWFDe8AkKtFHDIE=)
3: rj7cMvisc5sEsNUl1EQ8tKzz6C8.roa (hash: 6mpsbNewWQwOLcJiFmFyeCARGSCjU8+BOm6oNSA/kho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:dc:4e:16:4f:d9:cd:37:f6:4f:36:a8:28:cf:2a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3ec21e10f3646e4dc0e23f5f7ec44501560de3
Validity
Not Before: Jun 10 22:00:53 2025 GMT
Not After : Jun 11 22:00:53 2025 GMT
Subject: CN=55b568b60db35608c926c7a943445812f0bdc2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8d:d6:7a:60:b1:bb:0e:c5:2c:28:ab:7b:54:
38:46:8e:d3:bb:aa:65:02:b8:d4:ad:c4:8c:42:34:
e4:b3:57:7d:92:52:39:fc:b6:27:1a:f8:a2:ae:fb:
84:4b:8c:53:57:ad:85:08:3c:1d:14:20:14:a5:e0:
06:df:0b:55:d4:9c:df:4a:dd:07:11:f8:8d:b3:cb:
50:62:a0:eb:fd:31:98:15:5e:3f:18:c0:f4:89:fa:
14:77:e9:a6:44:7d:0a:99:93:ab:3f:41:9f:bf:7d:
74:d1:48:bf:a6:20:78:e2:bd:d6:98:22:8d:10:bd:
ff:00:98:4a:13:fb:af:1b:e7:87:4a:08:51:e5:54:
88:1f:3b:19:ea:a2:19:d6:e4:1c:9f:f0:d1:2d:0c:
53:51:df:30:ae:bc:41:52:b1:a7:11:ce:9d:49:35:
b3:df:5c:b2:0d:00:b7:ed:2e:c6:a8:f3:06:26:1f:
e6:5a:94:88:ef:ec:38:ca:03:ba:66:e4:10:77:29:
35:ca:25:72:83:95:a5:1e:4a:0e:41:ea:1f:3a:5c:
29:03:2f:f9:81:8a:c3:a6:48:8e:d6:92:71:22:7f:
0c:5c:1e:56:c5:69:8b:60:9e:69:58:df:8a:79:99:
e6:35:f2:a1:f6:57:fb:e4:23:17:49:bc:1a:03:16:
fd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B5:68:B6:0D:B3:56:08:C9:26:C7:A9:43:44:58:12:F0:BD:C2:F3
X509v3 Authority Key Identifier:
keyid:9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c7:c0:3c:c7:b5:af:b1:0e:a1:e5:1d:d2:6b:90:b2:c7:ba:
4b:71:79:de:b3:94:e3:63:1f:5b:ed:e7:d2:62:3a:00:bd:9e:
de:ea:5d:a1:41:a5:e2:56:f3:4e:cb:de:d4:ca:c0:bc:aa:45:
e7:0a:5e:80:82:b8:50:0e:a1:ed:f3:81:08:51:b7:f7:6b:18:
1a:fd:22:d2:9c:e9:80:18:37:6a:65:75:5e:3f:1d:d7:02:48:
ca:51:c8:f1:2d:c9:a3:27:77:37:2a:3d:fa:c9:0a:bf:ff:50:
46:c6:1a:ec:e7:bf:be:6b:9f:ae:f0:5f:96:fb:ce:9f:41:52:
01:ed:ed:5d:1f:9a:a9:4a:41:10:0e:19:30:0e:ad:bd:48:cb:
42:dd:60:cb:8d:8b:cf:19:46:71:5b:80:02:07:15:df:06:5d:
31:0c:69:2d:85:e1:ea:9f:83:c0:6a:ea:5a:08:dd:18:9c:7d:
04:da:de:54:6e:0e:f2:42:0b:22:f3:00:91:df:dc:8a:b5:55:
d1:0d:20:fb:e5:0a:84:16:58:4d:89:2b:bc:01:1e:30:62:6c:
6a:95:3d:54:17:88:d8:3a:09:c0:0c:d7:f4:f6:0a:20:58:3e:
af:45:38:34:a3:92:f1:4a:37:ee:3a:66:e3:86:cd:bc:b6:61:
1c:90:23:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:28:39 2025 by rpki-client