Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.mft
File: nzeBglGggdHMfzAVMg62NSZwm5E.mft (raw, json)
Hash identifier: x0uBcsIMuC3BEi26M+WRyU61cIZW2RhKhppOwToOWfg=
Subject key identifier: 1F:35:93:7F:E5:65:F0:3D:6C:2A:47:08:51:2D:4F:AE:45:2E:50:84
Authority key identifier: 9F:37:81:82:51:A0:81:D1:CC:7F:30:15:32:0E:B6:35:26:70:9B:91
Certificate issuer: /CN=9f37818251a081d1cc7f3015320eb63526709b91
Certificate serial: 0198D473F04922A780D5A0497CD896EDBAE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzeBglGggdHMfzAVMg62NSZwm5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.mft
Manifest number: 06B2
Signing time: Sat 23 Aug 2025 01:03:44 +0000
Manifest this update: Sat 23 Aug 2025 01:03:44 +0000
Manifest next update: Sun 24 Aug 2025 01:03:44 +0000
Files and hashes: 1: nzeBglGggdHMfzAVMg62NSZwm5E.crl (hash: a6FaGFlddxq1cqsgq6aGay1P9RvNq+ZXVewoAn/Y4iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzeBglGggdHMfzAVMg62NSZwm5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:f0:49:22:a7:80:d5:a0:49:7c:d8:96:ed:ba:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f37818251a081d1cc7f3015320eb63526709b91
Validity
Not Before: Aug 23 01:03:44 2025 GMT
Not After : Aug 24 01:03:44 2025 GMT
Subject: CN=1f35937fe565f03d6c2a4708512d4fae452e5084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5e:58:59:b4:74:96:5d:28:e5:f4:d6:a2:ca:
b7:17:37:f6:eb:f3:75:de:58:4a:b6:23:07:9a:88:
bc:e1:19:6b:b1:36:9e:29:a5:fd:1f:8d:91:be:fd:
5f:5f:36:7d:5b:76:50:82:55:0a:df:2a:1f:36:ef:
c3:01:87:f0:d9:d7:b3:d5:0c:15:ea:9d:2a:b0:05:
dc:6e:4d:75:72:f7:19:af:93:80:2b:03:7b:41:01:
2a:53:90:9d:de:a5:15:59:1a:21:79:da:c0:2b:a0:
10:06:23:fd:ec:bb:bf:18:63:c4:71:fa:ab:38:72:
5f:e5:78:06:e5:dc:02:3f:18:e0:3f:59:5b:7b:38:
2e:ea:e9:1f:aa:11:3d:b2:27:a1:db:4c:d2:b6:b0:
e3:75:ba:86:57:74:84:f5:cf:d6:3d:c7:10:54:82:
7a:f1:05:95:11:01:9a:d6:55:4a:50:c3:dd:7f:f0:
7e:6a:35:e9:cf:09:e0:dd:15:e6:9b:ba:1a:c4:2a:
ec:3d:f2:35:29:b5:86:37:2f:3e:dc:6a:95:49:d1:
0c:fd:db:52:1b:02:1d:fc:de:19:68:a4:0d:48:0c:
2c:76:f4:fd:c4:ad:74:1b:92:4a:b4:c0:bf:d3:ea:
7e:fb:06:f1:b9:29:71:9b:5e:58:db:6e:36:72:96:
dc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:35:93:7F:E5:65:F0:3D:6C:2A:47:08:51:2D:4F:AE:45:2E:50:84
X509v3 Authority Key Identifier:
keyid:9F:37:81:82:51:A0:81:D1:CC:7F:30:15:32:0E:B6:35:26:70:9B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzeBglGggdHMfzAVMg62NSZwm5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:39:ea:3c:56:09:eb:b2:c4:b4:85:83:ac:c2:f1:3a:ce:80:
1b:c3:5c:88:68:82:6a:aa:1a:30:ca:5b:f1:57:62:ad:6f:bc:
ce:e7:96:2f:e9:8c:e0:f1:40:21:d0:5f:b2:f5:0c:66:a0:d1:
bb:e3:0f:51:e7:eb:5f:48:c5:3f:54:46:b3:ab:5a:00:ec:43:
26:c0:0e:10:d1:0c:cd:a6:a8:b6:a0:3b:03:a8:2b:c7:2e:fc:
ca:be:d3:90:74:df:c7:b2:f9:a5:e8:0d:10:3a:b4:0c:36:33:
aa:24:85:23:8a:6f:ff:b5:be:3b:be:41:44:e5:f0:e1:33:d4:
21:44:67:f4:4c:d8:9f:10:c5:74:2d:48:2f:99:7c:b0:8d:17:
0e:fd:3d:56:aa:2a:07:4f:7d:95:07:2c:e7:9d:2a:74:87:3a:
01:3b:c5:51:18:fe:71:17:3a:13:29:11:09:aa:0a:b0:fc:a6:
3d:d3:30:01:ba:14:3d:ff:6c:31:38:98:fa:e0:87:69:c4:ff:
33:51:da:83:9e:af:09:48:c5:f1:f7:e9:3c:68:ca:cd:11:46:
0e:32:bf:7a:24:88:3c:68:45:10:05:cb:a1:71:0e:4e:7d:90:
0c:98:2d:ae:07:da:e6:35:70:8d:1a:d1:13:ad:0b:d0:80:35:
8b:33:f7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:55 2025 by rpki-client