Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
File: Nz2PVXyuGOI12Ti608-uF8kbneY.mft (raw, json)
Hash identifier: D2HYHzh2WQ4W0mYN7hs9wVrA0/LEkRi1BKNclmlYu2I=
Subject key identifier: 9D:4E:9E:A1:BD:72:22:A3:62:34:E6:04:B4:34:DA:2F:C0:3E:D8:D5
Authority key identifier: 37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6
Certificate issuer: /CN=373d8f557cae18e235d938bad3cfae17c91b9de6
Certificate serial: 019923D607FD5E36A459FD14EF98B2F8F912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
Manifest number: 0D33
Signing time: Sun 07 Sep 2025 11:00:53 +0000
Manifest this update: Sun 07 Sep 2025 11:00:53 +0000
Manifest next update: Mon 08 Sep 2025 11:00:53 +0000
Files and hashes: 1: Nz2PVXyuGOI12Ti608-uF8kbneY.crl (hash: +MhaAG/1rXR2hHPvXZgasN5GrCfGMikVSTyvVWDy/fo=)
2: ozI4hI8kFkEQxCSmEwvkBXoCapM.roa (hash: nsuE7KYFnBTkOwSYDCdNStBanVXhSb5SsJb22tB9rcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:07:fd:5e:36:a4:59:fd:14:ef:98:b2:f8:f9:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=373d8f557cae18e235d938bad3cfae17c91b9de6
Validity
Not Before: Sep 7 11:00:53 2025 GMT
Not After : Sep 8 11:00:53 2025 GMT
Subject: CN=9d4e9ea1bd7222a36234e604b434da2fc03ed8d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:94:51:c2:ee:ec:21:7f:f3:44:76:d0:40:1c:
e8:4c:5d:29:83:3c:44:c4:70:d4:1d:be:62:60:f4:
ea:71:9a:ab:52:ba:21:64:1f:40:67:64:1a:b0:00:
a5:4b:a8:1f:3a:cc:82:44:0b:cf:48:77:59:3e:95:
b5:77:f3:1b:95:89:48:88:78:3f:b6:bb:67:e6:28:
6b:c2:ba:42:aa:71:10:41:ba:75:b4:80:51:a4:e8:
1a:3d:26:47:fc:02:2c:ee:32:08:0f:8c:0f:a2:7e:
94:14:0f:90:f3:7d:7a:de:05:64:03:94:5c:be:18:
c0:de:ec:85:22:66:e2:79:ca:6a:a8:e8:02:32:12:
4c:12:c0:b6:1f:ff:93:b2:91:89:a4:fc:7d:86:6e:
62:9b:1f:f6:3a:55:9c:72:22:49:3e:44:75:e7:35:
e3:e1:98:6b:69:9b:a6:dd:b9:e7:0d:b4:13:c7:43:
ea:c0:15:2d:87:0c:51:11:bc:a4:d7:7e:cd:f9:a2:
7c:30:43:18:53:a3:10:bb:f9:1e:64:5d:20:40:e9:
e6:a6:5b:1c:c9:5d:87:9b:ce:a5:09:70:da:b2:4c:
44:00:30:1c:fd:48:fc:94:24:be:c0:75:e7:92:be:
cc:27:82:03:29:f3:37:b7:28:70:c2:c6:ac:13:ce:
c7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4E:9E:A1:BD:72:22:A3:62:34:E6:04:B4:34:DA:2F:C0:3E:D8:D5
X509v3 Authority Key Identifier:
keyid:37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:29:c1:54:df:b6:40:70:b6:f3:90:ab:97:8b:89:67:38:fc:
f8:f3:ff:c7:4f:52:92:f0:5d:14:9d:23:08:1f:ef:25:57:6b:
71:4c:e4:8a:3c:3d:36:57:9d:4c:86:25:bd:3b:e4:72:23:72:
7e:77:3d:b3:88:96:fe:b8:7f:2f:05:b9:00:83:54:01:a4:70:
40:2a:f6:54:cd:72:b9:0d:e5:ab:5a:aa:84:ed:7f:7f:4f:68:
6d:48:b6:31:39:42:0b:00:d6:53:32:24:dd:21:f9:f9:21:72:
be:49:0c:57:6a:b7:99:a4:3a:a8:6e:88:29:a4:ff:52:1a:54:
27:8c:7e:a6:a0:cb:62:b5:61:c5:96:c8:48:9c:22:e9:35:af:
80:19:41:bf:e1:df:af:a6:fa:8c:b9:c1:2c:54:0d:75:c4:18:
1c:38:55:72:07:c2:5a:2d:ee:43:56:d3:a2:29:60:d2:38:88:
40:f3:e0:c7:47:c6:1d:06:be:34:a3:f3:4d:de:6c:5c:cc:5f:
e6:0f:da:44:38:cc:52:27:4d:2a:6d:50:69:62:1e:1e:00:82:
63:ff:45:13:a9:ba:eb:33:0d:5c:99:88:2d:83:39:c1:38:e7:
0a:82:76:62:d7:4a:1c:ed:82:c6:cd:a9:dd:c5:40:44:47:5f:
52:3f:b0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:05 2025 by rpki-client