Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
File: RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft (raw, json)
Hash identifier: OzN9j4DzIBAVqYxSVvhHAlYUtnfLBaP9hqlkqRWT840=
Subject key identifier: 25:81:DE:4D:76:FF:49:0D:F2:2F:55:98:24:7B:E4:8C:93:6B:D8:7A
Authority key identifier: 44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40
Certificate issuer: /CN=44d64dac03f1a57c1931667118048d82c43c5540
Certificate serial: 0196165980127AF85345C1695C2F3AF567B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
Manifest number: 0B58
Signing time: Tue 08 Apr 2025 17:01:26 +0000
Manifest this update: Tue 08 Apr 2025 17:01:26 +0000
Manifest next update: Wed 09 Apr 2025 17:01:26 +0000
Files and hashes: 1: RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl (hash: w4EbtTR+sQ/S9XFgpjCq0414WvTkhzUeJsUg5WqwLHk=)
2: vPwQH1RvTV4M1J-vAZbjIjKDG4c.roa (hash: bhhfgUa9IkevuU6kgmPNLfOfpmJN6kMgsbrrhzr6WCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 17:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:16:59:80:12:7a:f8:53:45:c1:69:5c:2f:3a:f5:67:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d64dac03f1a57c1931667118048d82c43c5540
Validity
Not Before: Apr 8 17:01:26 2025 GMT
Not After : Apr 9 17:01:26 2025 GMT
Subject: CN=2581de4d76ff490df22f5598247be48c936bd87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d7:0b:dd:5e:61:fa:f0:b8:49:e4:09:31:f3:
94:10:13:df:3e:09:10:e4:48:84:a1:3c:91:4d:43:
84:f0:26:a7:76:03:d4:49:0a:c5:fa:6f:e5:56:14:
82:3a:9d:67:ca:f0:94:10:32:44:20:5f:a9:f3:c0:
c5:a0:37:f5:39:8d:ec:cc:e3:80:28:a2:3a:75:be:
c9:28:9e:ab:ca:42:0c:01:ca:a0:e4:2a:68:e4:6b:
67:4e:97:de:0d:b4:56:90:0d:fe:be:62:bc:be:70:
bf:dd:44:6a:61:52:56:cc:52:90:8c:2b:0d:1c:57:
60:cb:c7:0f:bd:0a:d6:88:e5:3c:91:cd:e2:d8:9f:
9e:44:96:ca:80:75:f6:54:31:36:b7:1b:4b:c0:71:
2b:b7:65:e2:22:d8:6d:68:8f:65:a0:b8:95:bf:95:
3d:f0:3b:31:88:4c:3b:36:33:92:a1:e0:5c:53:5e:
88:d0:4c:2d:6d:70:61:b5:56:06:e8:02:77:98:1d:
48:4b:1b:e8:ec:c2:56:86:bd:ca:61:4f:2e:bd:c1:
ae:9b:29:b6:d4:89:c7:c0:e8:6f:ad:97:ba:8b:5f:
81:5d:b9:6f:45:42:af:bd:15:dd:79:0f:ed:cf:e2:
53:20:8d:9b:8f:ce:65:bb:a7:53:f4:9c:26:69:d8:
81:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:81:DE:4D:76:FF:49:0D:F2:2F:55:98:24:7B:E4:8C:93:6B:D8:7A
X509v3 Authority Key Identifier:
keyid:44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:df:23:5c:12:ed:3a:16:da:8e:5c:de:80:c7:1f:8f:60:fe:
16:de:43:5a:db:27:87:56:b0:56:3f:a0:81:cf:b4:7e:14:df:
5a:10:8a:5b:a4:89:e7:15:7a:fa:c7:9f:d1:d9:9f:b1:c4:d3:
93:4c:ea:00:a1:4a:01:c9:76:6a:70:c9:5a:fc:76:f0:d8:93:
97:67:e3:eb:5a:64:f7:19:ed:bf:f8:b5:db:df:c3:88:99:b1:
ab:4b:7c:d0:56:95:85:c6:d9:aa:5d:e0:d4:31:72:4a:03:68:
0f:27:63:cb:6c:13:58:37:ae:e2:c8:59:c9:7a:54:44:e2:a1:
cc:0e:05:bd:8e:21:ca:51:69:1d:31:f4:7a:6c:6c:10:01:53:
d1:19:61:ad:a5:d0:03:7d:15:07:76:c4:3f:23:b6:41:dc:d2:
3c:33:4a:48:1e:6e:df:5d:6c:eb:f3:aa:ec:04:09:8c:d1:84:
11:28:29:72:b3:2a:f3:25:5d:d5:40:5d:69:52:5a:23:2d:4f:
60:6a:84:c4:25:14:2a:f9:16:db:2e:bb:1c:63:5b:de:21:29:
93:6c:9e:61:9c:6b:f4:95:5b:20:64:e2:dc:25:d6:92:3c:da:
9d:73:c9:bb:4a:c7:04:c5:1f:e3:c4:7d:fa:17:0a:ea:fb:a4:
f0:d3:b3:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYWWYASevhTRcFpXC869WexMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZDY0ZGFjMDNmMWE1N2MxOTMxNjY3MTE4MDQ4ZDgyYzQz
YzU1NDAwHhcNMjUwNDA4MTcwMTI2WhcNMjUwNDA5MTcwMTI2WjAzMTEwLwYDVQQD
EygyNTgxZGU0ZDc2ZmY0OTBkZjIyZjU1OTgyNDdiZTQ4YzkzNmJkODdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNcL3V5h+vC4SeQJMfOUEBPfPgkQ
5EiEoTyRTUOE8CandgPUSQrF+m/lVhSCOp1nyvCUEDJEIF+p88DFoDf1OY3szOOA
KKI6db7JKJ6rykIMAcqg5Cpo5GtnTpfeDbRWkA3+vmK8vnC/3URqYVJWzFKQjCsN
HFdgy8cPvQrWiOU8kc3i2J+eRJbKgHX2VDE2txtLwHErt2XiIthtaI9loLiVv5U9
8DsxiEw7NjOSoeBcU16I0EwtbXBhtVYG6AJ3mB1ISxvo7MJWhr3KYU8uvcGumym2
1InHwOhvrZe6i1+BXblvRUKvvRXdeQ/tz+JTII2bj85lu6dT9JwmadiBLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCWB3k12/0kN8i9VmCR75IyTa9h6MB8GA1UdIwQY
MBaAFETWTawD8aV8GTFmcRgEjYLEPFVAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk5aTnJBUHhwWHdaTVdaeEdBU05nc1E4VlVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xMDJiZWYtNjQ1OS00NGJjLTg0MGUt
ZTlkMmIzYTc4NzJjLzEvUk5aTnJBUHhwWHdaTVdaeEdBU05nc1E4VlVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8xMDJiZWYtNjQ1OS00NGJjLTg0MGUtZTlkMmIzYTc4NzJj
LzEvUk5aTnJBUHhwWHdaTVdaeEdBU05nc1E4VlVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVd8jXBLt
OhbajlzegMcfj2D+Ft5DWtsnh1awVj+ggc+0fhTfWhCKW6SJ5xV6+sef0dmfscTT
k0zqAKFKAcl2anDJWvx28NiTl2fj61pk9xntv/i129/DiJmxq0t80FaVhcbZql3g
1DFySgNoDydjy2wTWDeu4shZyXpUROKhzA4FvY4hylFpHTH0emxsEAFT0RlhraXQ
A30VB3bEPyO2QdzSPDNKSB5u311s6/Oq7AQJjNGEESgpcrMq8yVd1UBdaVJaIy1P
YGqExCUUKvkW2y67HGNb3iEpk2yeYZxr9JVbIGTi3CXWkjzanXPJu0rHBMUf48R9
+hcK6vuk8NOzUA==
-----END CERTIFICATE-----
Generated at Wed Apr 9 02:03:04 2025 by rpki-client