Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
File: Nz2PVXyuGOI12Ti608-uF8kbneY.mft (raw, json)
Hash identifier: EijFiPnFPXCAFJe0NT/xEMZwniMpXW83KCTTCCInrz8=
Subject key identifier: 1E:43:BF:48:9F:50:06:7A:F4:D4:7E:91:85:A6:9B:C6:08:AB:CE:BD
Authority key identifier: 37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6
Certificate issuer: /CN=373d8f557cae18e235d938bad3cfae17c91b9de6
Certificate serial: 01974C9FCC4571BC05474A34A4E95EC5220A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
Manifest number: 0C3F
Signing time: Sat 07 Jun 2025 23:00:29 +0000
Manifest this update: Sat 07 Jun 2025 23:00:29 +0000
Manifest next update: Sun 08 Jun 2025 23:00:29 +0000
Files and hashes: 1: Nz2PVXyuGOI12Ti608-uF8kbneY.crl (hash: 95+mniZz/J2XOtZ3gG9r37NNNGzydcdE3tzSs486k5Y=)
2: ozI4hI8kFkEQxCSmEwvkBXoCapM.roa (hash: nsuE7KYFnBTkOwSYDCdNStBanVXhSb5SsJb22tB9rcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:9f:cc:45:71:bc:05:47:4a:34:a4:e9:5e:c5:22:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=373d8f557cae18e235d938bad3cfae17c91b9de6
Validity
Not Before: Jun 7 23:00:29 2025 GMT
Not After : Jun 8 23:00:29 2025 GMT
Subject: CN=1e43bf489f50067af4d47e9185a69bc608abcebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7b:fa:20:84:5a:11:a9:72:95:ce:30:a7:2a:
d1:d8:54:81:b9:db:e5:fc:41:1b:7c:86:e7:9e:09:
2a:d7:3e:f3:10:d6:3e:0d:d4:6a:bb:3f:79:d8:ab:
40:fe:c7:5a:ea:ac:2d:04:d1:9d:74:92:53:90:a2:
25:6d:19:f9:64:5b:f3:e5:0b:6a:f2:11:8b:e0:6e:
cb:8e:4c:f3:a5:c6:21:02:12:1b:4a:58:c3:4c:5a:
be:8b:cc:f4:f8:56:6d:9e:85:98:94:39:45:47:bb:
4f:41:69:76:aa:e5:df:b0:ef:6f:7c:07:bf:90:96:
57:98:09:cd:12:97:6f:c0:43:d0:ed:f4:d9:d0:78:
4f:89:f8:44:48:f4:c2:ea:f3:bf:69:37:4e:67:0b:
1e:a8:b1:f0:39:a9:6b:d1:e7:fa:b8:7a:aa:ce:3a:
b4:3f:6c:67:eb:60:e3:c3:65:7e:ad:51:60:ac:9b:
be:3f:c7:6e:a7:29:d6:df:73:2d:83:63:1f:39:df:
10:46:76:a1:16:fd:59:86:2d:be:da:a1:a3:29:44:
39:64:74:70:3b:cf:3d:cd:8d:23:9c:93:81:31:fb:
41:f2:20:a1:5f:36:31:d6:9d:bf:24:4a:47:8a:d1:
48:d8:a2:12:1b:1a:0e:04:4a:f4:e0:da:46:00:ec:
dc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:43:BF:48:9F:50:06:7A:F4:D4:7E:91:85:A6:9B:C6:08:AB:CE:BD
X509v3 Authority Key Identifier:
keyid:37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c9:ad:dd:ae:55:0c:9a:e7:6c:e2:61:af:08:43:05:ab:e5:
de:2b:27:71:65:0f:e3:7d:29:e1:af:33:55:86:fb:3e:9f:e6:
bc:ae:f8:a2:e5:4c:2f:7d:4e:f5:82:9a:b1:ea:71:8b:47:99:
28:70:d0:89:0e:65:8b:fb:8e:89:a8:01:c3:1d:b4:ca:29:15:
a7:1c:d1:61:bf:2f:d0:14:07:df:9b:b2:ea:b0:be:bc:0a:c4:
b2:78:ff:53:77:d8:3c:27:0b:c8:2c:e9:d7:77:d7:05:02:16:
05:0c:10:f3:87:1d:80:97:6e:6e:ef:6d:4e:e3:aa:9f:ff:ac:
d8:8c:36:85:08:a8:93:53:fa:38:c3:7e:4f:ba:66:0e:c1:a0:
8b:07:72:9b:66:29:02:0a:32:33:3f:5d:5a:15:19:37:ff:3a:
dc:3d:4b:d2:d3:df:5b:2d:37:b7:66:dc:00:2d:56:a4:d6:2c:
70:71:b8:e9:d1:c4:1d:57:84:be:94:54:bb:b3:ca:63:86:af:
f5:d1:2b:88:d7:a1:f8:a2:ab:3d:8d:4e:48:ec:da:f5:b8:e0:
22:34:ff:d9:dd:56:09:f7:4f:0a:42:a4:cc:e7:f7:18:da:a6:
83:7a:62:32:40:04:10:99:59:e3:cb:cd:e7:79:d0:8c:67:a6:
23:ae:ae:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:19:21 2025 by rpki-client