Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
File: Nz2PVXyuGOI12Ti608-uF8kbneY.mft (raw, json)
Hash identifier: +OAvnxjvjFwNbA3lVl9q03qsLUiyT1GR5TP2h9+teXg=
Subject key identifier: 08:9E:A0:05:0C:22:3C:44:D4:1F:43:3F:B8:D6:D0:2A:51:0F:23:D7
Authority key identifier: 37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6
Certificate issuer: /CN=373d8f557cae18e235d938bad3cfae17c91b9de6
Certificate serial: 019A71EE8EC65CDC2A15A3AB06209A675641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
Manifest number: 0DE0
Signing time: Tue 11 Nov 2025 08:00:50 +0000
Manifest this update: Tue 11 Nov 2025 08:00:50 +0000
Manifest next update: Wed 12 Nov 2025 08:00:50 +0000
Files and hashes: 1: Nz2PVXyuGOI12Ti608-uF8kbneY.crl (hash: gcNqcdPHdBOX7wJwLylln3gzcbdzHgvAnaqzW0kbTOw=)
2: ozI4hI8kFkEQxCSmEwvkBXoCapM.roa (hash: nsuE7KYFnBTkOwSYDCdNStBanVXhSb5SsJb22tB9rcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:8e:c6:5c:dc:2a:15:a3:ab:06:20:9a:67:56:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=373d8f557cae18e235d938bad3cfae17c91b9de6
Validity
Not Before: Nov 11 08:00:50 2025 GMT
Not After : Nov 12 08:00:50 2025 GMT
Subject: CN=089ea0050c223c44d41f433fb8d6d02a510f23d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5b:33:22:f4:0c:82:51:79:9f:7e:f1:a0:d4:
f3:3c:72:fb:0b:bd:dd:ff:54:b0:dd:7b:1a:a8:7d:
d7:5c:67:52:6a:b5:ec:3c:f1:ed:6a:d8:d1:21:84:
df:cc:d7:9c:7f:93:a2:67:89:54:0f:58:9a:7c:f9:
9a:e8:99:37:22:ce:fd:25:b4:47:17:55:83:fc:34:
6a:ff:de:41:bc:7c:b5:e6:5d:9e:ca:f0:1b:a4:ac:
43:39:c3:2d:8f:45:17:ca:2c:d4:86:a8:8e:7f:2f:
46:98:16:72:8f:40:2f:b3:66:f1:88:b1:37:0e:1f:
a0:8e:a1:ce:90:54:c1:49:8b:ba:77:42:57:f1:da:
35:88:fe:16:52:8c:32:c9:4e:d3:b0:08:04:77:16:
12:ae:94:d4:a4:27:b9:12:e2:ab:50:a8:dc:70:77:
4a:06:c8:de:09:3a:a6:68:bc:ab:64:d6:3e:15:eb:
cc:72:76:4d:22:1d:77:af:58:fa:ff:1e:4a:23:27:
ee:60:4b:64:2d:37:a4:5f:ff:94:0b:c6:8d:b0:df:
50:63:65:e0:bb:e2:70:f3:39:a5:9e:8e:ef:86:44:
9c:d9:33:1c:f9:09:96:3e:b6:5b:ef:41:b4:15:da:
a0:4b:9e:f3:5a:7c:06:7f:aa:11:62:6b:87:14:54:
09:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9E:A0:05:0C:22:3C:44:D4:1F:43:3F:B8:D6:D0:2A:51:0F:23:D7
X509v3 Authority Key Identifier:
keyid:37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:72:70:8b:ce:24:67:aa:0a:b1:33:be:1b:21:75:3d:d8:fc:
4d:96:11:a7:82:24:dd:95:89:1e:e2:6f:37:45:9f:2c:55:64:
34:fa:39:3f:ba:6e:ce:86:b7:be:62:02:26:27:28:b0:cf:2f:
11:f9:fe:4c:72:4c:dd:87:06:b0:42:16:e6:29:03:21:dd:98:
9a:2c:3f:25:81:58:0d:f8:8b:50:8b:a7:c1:2b:ad:76:8f:69:
9f:a6:6d:b0:4c:b6:b7:bf:2e:a5:11:7c:f9:e8:96:0c:bf:bd:
93:ec:1d:00:4f:c4:2e:53:1f:20:c8:28:12:57:ed:ac:ef:6e:
7c:78:fa:7b:b7:02:03:92:8d:f2:b9:67:60:2e:28:e6:62:86:
6e:09:81:27:97:e2:1a:88:19:55:4f:82:7f:e8:94:4d:ad:ce:
62:9f:98:73:4a:97:b8:fc:84:c9:c2:36:a5:fe:c0:63:b5:05:
10:1c:56:a3:6f:84:36:94:8d:fa:72:49:d1:1a:42:66:7c:43:
8c:49:65:c8:f0:63:24:d6:4f:64:3e:51:18:df:05:9d:93:62:
8c:95:6f:c6:29:cb:ed:37:e2:fb:d9:49:82:ec:41:e6:08:a4:
11:09:13:2e:d3:3f:f5:36:83:fe:22:9d:49:b5:59:e3:f9:cc:
48:ba:52:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:15 2025 by rpki-client