Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
File: RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft (raw, json)
Hash identifier: hIO7mIQU8z0dTFI9xiWuEMSEOjeGgWxDqZHbNwF70mM=
Subject key identifier: B1:64:B7:C3:F2:8F:B2:54:07:31:97:0C:0F:2A:E0:60:8E:D8:48:AB
Authority key identifier: 44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40
Certificate issuer: /CN=44d64dac03f1a57c1931667118048d82c43c5540
Certificate serial: 01974B56836343A6BB57F0C9C57178943C2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
Manifest number: 0BF8
Signing time: Sat 07 Jun 2025 17:00:50 +0000
Manifest this update: Sat 07 Jun 2025 17:00:50 +0000
Manifest next update: Sun 08 Jun 2025 17:00:50 +0000
Files and hashes: 1: RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl (hash: thBMUjVYicwrHx0qjpnCoiXgUjsL81Whk1ctzeej9+A=)
2: vPwQH1RvTV4M1J-vAZbjIjKDG4c.roa (hash: bhhfgUa9IkevuU6kgmPNLfOfpmJN6kMgsbrrhzr6WCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:83:63:43:a6:bb:57:f0:c9:c5:71:78:94:3c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d64dac03f1a57c1931667118048d82c43c5540
Validity
Not Before: Jun 7 17:00:50 2025 GMT
Not After : Jun 8 17:00:50 2025 GMT
Subject: CN=b164b7c3f28fb2540731970c0f2ae0608ed848ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:cd:c1:31:d5:19:b2:3d:7e:c0:f3:0b:b3:c4:
6a:e4:ad:89:59:b0:1f:31:e1:74:6a:33:7d:5b:c4:
36:a1:53:3d:e0:ff:1b:65:a9:20:cd:93:29:97:93:
e2:be:02:4e:25:28:34:e2:09:9a:04:da:cf:48:cf:
84:29:63:49:8f:8d:2a:c1:4e:b0:aa:a2:d9:56:5a:
b8:f3:30:94:96:f7:81:ad:5c:21:c2:0a:7c:34:32:
f9:9b:67:ba:24:eb:73:0d:3b:06:f9:ad:08:90:26:
71:c3:88:b3:23:75:67:70:28:c0:93:53:5e:e0:db:
a4:26:2d:45:57:80:48:e4:f8:b7:3a:10:29:7d:64:
fa:e0:43:a9:21:da:7e:61:db:ab:d1:bf:3b:84:49:
7a:b2:bc:1f:4d:db:1d:07:4b:fb:e1:9b:be:ee:4f:
69:50:66:8f:3a:ac:66:b7:c8:b0:c9:a2:24:55:55:
e2:31:9b:62:b7:97:8b:93:f2:b3:d5:ec:61:c8:2f:
2e:fa:ec:7c:c4:84:50:ce:4a:a1:b6:94:ab:24:d1:
e9:89:02:9a:41:6f:8b:d5:23:66:f3:5e:67:c3:ba:
bb:dc:65:c9:aa:21:9d:35:21:e6:02:4f:7a:06:ac:
ce:e5:36:07:0a:9f:80:26:2c:4f:fd:4e:4f:c6:8d:
ea:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:64:B7:C3:F2:8F:B2:54:07:31:97:0C:0F:2A:E0:60:8E:D8:48:AB
X509v3 Authority Key Identifier:
keyid:44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:3c:41:a4:7a:65:eb:6b:21:a4:9b:a1:94:10:00:5f:f4:27:
ac:23:58:91:c4:ae:4c:27:95:03:0c:64:16:7f:a7:cc:1c:24:
9b:5d:f0:6d:97:86:54:7d:6a:95:bc:bb:33:5a:c4:68:be:f7:
6a:13:1c:36:e2:af:eb:42:c0:c1:26:df:46:0b:db:cf:0a:e5:
38:b4:eb:c2:08:56:70:8b:d8:e6:a1:89:8d:10:23:2e:98:97:
1b:3b:5a:b7:6a:1c:94:fd:30:72:01:5f:24:2a:b0:ea:5d:08:
b2:53:9d:68:28:22:72:c6:74:e7:0d:81:43:32:6b:6c:b5:65:
08:06:6d:39:82:4f:a6:cb:4d:60:4d:56:60:61:36:af:c8:ba:
e3:25:68:92:ba:b1:03:ea:61:42:3e:f5:2c:a4:dc:2b:5d:5e:
62:6d:71:4a:bd:70:d0:ef:d8:26:77:9f:e9:80:05:89:1a:55:
02:1b:c0:13:d8:82:f8:8d:14:07:e8:ee:74:d7:5d:9f:63:60:
c7:c8:15:fe:35:88:74:a9:54:14:3d:9d:f0:68:13:01:dc:96:
81:f3:cc:d2:d2:d4:c0:9b:e6:a3:50:4f:23:0d:4a:73:97:b8:
4e:af:86:b5:34:39:90:96:ab:48:0a:0b:f4:f3:18:cf:d9:9d:
6e:31:37:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:50:14 2025 by rpki-client