Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.mft
File: nzeBglGggdHMfzAVMg62NSZwm5E.mft (raw, json)
Hash identifier: PpxfuLgE5TKiCiKmguvbs5cLNCS6YPhQUJ/i7CISKKM=
Subject key identifier: 21:BA:CD:2F:15:02:D9:1D:DD:AD:AC:AD:77:F4:30:C6:B1:CD:41:F1
Authority key identifier: 9F:37:81:82:51:A0:81:D1:CC:7F:30:15:32:0E:B6:35:26:70:9B:91
Certificate issuer: /CN=9f37818251a081d1cc7f3015320eb63526709b91
Certificate serial: 0199FBEAE2AEFFE5396874E8EDB1F1F381C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzeBglGggdHMfzAVMg62NSZwm5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.mft
Manifest number: 074B
Signing time: Sun 19 Oct 2025 10:01:38 +0000
Manifest this update: Sun 19 Oct 2025 10:01:38 +0000
Manifest next update: Mon 20 Oct 2025 10:01:38 +0000
Files and hashes: 1: nzeBglGggdHMfzAVMg62NSZwm5E.crl (hash: bfhWAIvUhfQ7TcvH9RXK6vXdtzRkwYXR7M/StG8PZkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzeBglGggdHMfzAVMg62NSZwm5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:e2:ae:ff:e5:39:68:74:e8:ed:b1:f1:f3:81:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f37818251a081d1cc7f3015320eb63526709b91
Validity
Not Before: Oct 19 10:01:38 2025 GMT
Not After : Oct 20 10:01:38 2025 GMT
Subject: CN=21bacd2f1502d91dddadacad77f430c6b1cd41f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e4:f2:6a:71:53:d5:96:e4:92:24:8d:82:f3:
25:4e:92:b7:54:3d:11:55:58:c8:cc:ab:9c:19:19:
c2:9e:69:22:df:0b:ec:eb:40:b7:2f:82:e9:73:3e:
4d:6c:2c:cd:db:b5:25:ac:6a:8c:9e:42:ac:0d:51:
51:f2:38:f5:d5:b4:8a:08:b3:61:46:91:68:29:0b:
9b:95:a7:d1:0b:47:c0:db:7c:59:46:32:b4:26:56:
e7:77:5d:7b:b5:99:d7:c8:22:85:4a:cf:3b:76:cd:
ff:40:1f:62:a8:0f:2b:b5:f7:de:ce:28:d0:53:60:
2d:da:91:ea:3e:d8:a8:0b:9e:2a:d1:54:a0:f6:95:
83:e7:a6:81:21:0d:07:28:3a:75:f5:2c:18:95:e2:
a6:ab:0f:e2:b7:5b:c0:b3:89:84:48:f1:d1:8d:2b:
30:d7:b1:f1:ca:bf:c2:4b:bf:b7:26:8c:31:fd:87:
8e:8f:7b:40:34:66:34:08:f1:e9:cf:46:f2:a8:0a:
48:95:36:13:ff:0d:24:b2:2e:2a:73:77:b9:7d:31:
12:85:30:4e:5f:14:a2:49:e8:8e:df:77:1c:b0:6a:
87:8b:09:3e:d6:c6:ea:30:2b:04:55:b4:dd:a9:ed:
14:77:ab:2c:bc:35:91:76:8b:38:e1:c2:92:af:94:
34:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BA:CD:2F:15:02:D9:1D:DD:AD:AC:AD:77:F4:30:C6:B1:CD:41:F1
X509v3 Authority Key Identifier:
keyid:9F:37:81:82:51:A0:81:D1:CC:7F:30:15:32:0E:B6:35:26:70:9B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzeBglGggdHMfzAVMg62NSZwm5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c7:3e:c6:43:06:0e:19:b6:f4:55:ba:f7:bf:8e:9f:ec:38:
41:bd:4f:7e:b4:43:14:eb:f9:33:ac:0a:0f:c6:b9:26:1c:4c:
32:84:c4:9a:1a:28:73:fb:1c:f5:35:98:ee:26:ff:44:8d:4d:
ad:35:e2:e0:13:5c:c5:f4:18:7b:67:48:87:64:b4:70:64:28:
f2:e9:38:31:9d:df:af:24:40:c4:77:25:44:39:b2:8e:6a:3a:
2c:e9:d7:92:a5:c3:f1:a7:c4:24:cd:e7:96:ad:2b:78:0e:89:
e2:f9:7e:c7:20:99:ea:88:3a:07:50:50:33:57:81:1d:a2:06:
92:30:25:1b:01:ac:be:c9:e2:6a:61:30:84:c8:16:6c:a9:93:
f4:9c:97:1c:d8:03:33:4c:0b:b3:0a:4b:cb:be:07:b4:c4:9f:
a2:2d:ed:28:05:dd:99:57:43:6a:00:3c:94:f4:ba:5f:ae:7d:
d8:cd:e9:7f:f6:5f:84:7d:6d:b6:56:dd:1f:29:c0:22:70:99:
40:67:e7:8f:ec:c3:84:94:0a:9a:cd:b8:43:1c:5a:9d:74:d3:
50:ed:56:43:9d:2d:6e:15:75:8d:95:1b:0d:be:50:16:9b:fa:
e9:3d:d3:29:15:d1:60:23:29:06:ab:cd:c5:bb:55:af:37:17:
d0:82:57:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:48:59 2025 by rpki-client