Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.mft
File: NrzwGgmAWLhROxb9nksbI4_Nb1g.mft (raw, json)
Hash identifier: gZfppuKQVx0mglJt0CKY1ZI20DddJfBOqbhi2aQpXvQ=
Subject key identifier: BC:34:1B:1E:87:FE:40:0E:39:32:E5:DE:CC:85:CE:95:AB:C1:C9:62
Authority key identifier: 36:BC:F0:1A:09:80:58:B8:51:3B:16:FD:9E:4B:1B:23:8F:CD:6F:58
Certificate issuer: /CN=36bcf01a098058b8513b16fd9e4b1b238fcd6f58
Certificate serial: 0199221EDEE81ADED6C57C0A7F53009C2AE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrzwGgmAWLhROxb9nksbI4_Nb1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.mft
Manifest number: 021E
Signing time: Sun 07 Sep 2025 03:01:12 +0000
Manifest this update: Sun 07 Sep 2025 03:01:12 +0000
Manifest next update: Mon 08 Sep 2025 03:01:12 +0000
Files and hashes: 1: AfyofESsKziO9R3ILuO1YYWUdu8.roa (hash: nUxsrIBKiuHD8xm10VmDY98apv5y2MdixCNIXLJz49Q=)
2: NrzwGgmAWLhROxb9nksbI4_Nb1g.crl (hash: 4AwJfVFOnvR8cVZbSA4kwK5vrNjEaSueOn1zzZCcVYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NrzwGgmAWLhROxb9nksbI4_Nb1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:de:e8:1a:de:d6:c5:7c:0a:7f:53:00:9c:2a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36bcf01a098058b8513b16fd9e4b1b238fcd6f58
Validity
Not Before: Sep 7 03:01:12 2025 GMT
Not After : Sep 8 03:01:12 2025 GMT
Subject: CN=bc341b1e87fe400e3932e5decc85ce95abc1c962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c9:a7:a3:b3:1b:36:a2:0f:9e:f7:3b:33:f2:
68:39:10:1b:0a:16:ef:63:d9:09:7d:b5:f6:36:f3:
ad:9b:c4:ac:3e:fe:a9:b9:db:a4:8b:4a:b6:6b:85:
e3:a1:03:f0:b9:d9:0c:b5:cb:ef:1f:c8:ee:1a:b0:
0c:9e:70:dd:2b:98:aa:de:e9:a9:6f:ee:2a:d3:98:
fb:cd:d3:3a:54:3a:6d:9a:4a:dd:b3:ab:6f:0f:e5:
d4:ee:70:09:ff:61:63:e6:d1:b4:6c:62:c8:8c:31:
47:43:13:bc:fc:3a:ed:1d:52:ce:c1:ec:81:f1:cb:
95:45:7e:28:b0:de:33:f1:a6:14:39:7c:bc:13:63:
8d:c5:36:de:ae:2f:2b:16:9a:d5:f7:e3:4c:64:62:
75:df:09:9d:ab:2f:3d:86:ae:88:70:c4:d0:f1:c8:
80:24:bb:4a:9c:5d:12:3b:77:5c:08:8a:88:6d:72:
d0:67:65:28:51:e3:16:f9:ef:2b:2b:7a:e7:e4:fb:
e4:c4:dc:ff:f4:df:19:46:35:a4:5b:e0:63:d2:6e:
8d:3a:21:8f:6d:a9:a0:7d:c6:93:93:52:df:4c:2b:
6f:9e:e7:aa:30:dc:93:90:9d:19:f2:81:fc:51:ee:
3e:38:df:d1:fa:a1:96:3e:28:1d:31:d8:09:60:e2:
de:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:34:1B:1E:87:FE:40:0E:39:32:E5:DE:CC:85:CE:95:AB:C1:C9:62
X509v3 Authority Key Identifier:
keyid:36:BC:F0:1A:09:80:58:B8:51:3B:16:FD:9E:4B:1B:23:8F:CD:6F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrzwGgmAWLhROxb9nksbI4_Nb1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:f2:27:0b:1d:07:29:1d:b6:d1:98:ea:35:a3:24:e5:cc:a5:
4e:30:14:9c:de:b2:6b:6e:d0:32:b2:f3:3f:5a:1e:cf:da:5a:
02:31:bc:4d:bb:c9:03:32:ad:b2:2b:85:29:92:8e:a7:e7:c4:
f0:18:4f:f5:29:ab:25:08:0a:b0:ad:ea:86:5b:05:b4:78:fe:
60:af:a0:ea:f6:29:12:4e:86:3e:62:17:b9:2b:d8:e6:70:b9:
0c:47:15:4e:1a:2b:cd:1a:94:58:44:50:d0:93:f1:3d:4c:74:
00:2d:e1:74:bd:bf:f9:d9:91:23:93:e9:3f:78:c3:26:19:80:
b9:bd:dd:ed:53:26:4a:55:18:fc:dd:ae:79:54:20:f4:78:b0:
bc:7b:83:e6:64:e8:90:f1:51:4b:93:4e:a4:fa:65:a0:02:dc:
f9:d4:65:06:ab:6f:f1:93:c0:e0:98:42:7e:85:d6:25:69:e2:
5f:d1:fe:1d:53:5c:72:07:3b:0c:86:fe:52:e3:d6:df:b0:26:
03:88:6e:97:9a:86:68:22:36:41:b7:4f:0c:bd:3e:60:6b:f4:
92:67:95:2c:12:75:ee:97:40:d1:b3:fc:9f:3a:82:da:9c:79:
fc:d7:bf:de:c5:ea:65:b2:ee:73:10:ad:a1:f1:4d:28:f5:b2:
8f:b1:4e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:31 2025 by rpki-client