Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
File: NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft (raw, json)
Hash identifier: dITF1rz7P21Py2Q7WMQLmvJ9xve294f1MJ2A4H8jra4=
Subject key identifier: 7D:DA:A4:36:1F:73:81:F2:80:00:AC:15:C6:5F:4A:A4:4A:58:A4:13
Authority key identifier: 35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
Certificate issuer: /CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Certificate serial: 0197CB70F5A5658F2909B4EB8AA4938F40A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
Manifest number: 0AA4
Signing time: Wed 02 Jul 2025 14:01:06 +0000
Manifest this update: Wed 02 Jul 2025 14:01:06 +0000
Manifest next update: Thu 03 Jul 2025 14:01:06 +0000
Files and hashes: 1: NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl (hash: LNPfAerSpNgEWJINyjM2kuEMVP7aXZMlpV+hEmqm8hs=)
2: Zk0y4tHHB8Yu3r49IrGLEovlzps.roa (hash: Z8BlFARu3PiIVKgAzCmvXp/n3Elo4eu1cJ/tXUB0sZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:70:f5:a5:65:8f:29:09:b4:eb:8a:a4:93:8f:40:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Validity
Not Before: Jul 2 14:01:06 2025 GMT
Not After : Jul 3 14:01:06 2025 GMT
Subject: CN=7ddaa4361f7381f28000ac15c65f4aa44a58a413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ba:3d:e0:cf:b9:77:e9:cb:c7:52:c7:a6:4a:
f1:6f:6f:35:03:19:ed:08:45:cc:9b:01:9d:f9:3c:
7f:ed:b9:8b:1b:94:07:b6:ae:76:08:cb:c9:50:22:
c0:50:32:65:d1:80:4e:65:89:a1:99:95:bb:62:cb:
66:64:09:83:58:d1:83:ea:d9:44:00:b5:cd:f2:60:
c4:f2:17:31:b5:4e:1d:af:06:cf:24:69:d3:98:95:
7a:0c:21:0a:b6:d7:fd:1e:e9:a8:df:46:03:7c:e3:
ce:bd:98:5f:ba:c6:d4:84:d7:79:1d:15:c8:91:17:
62:c8:ca:8a:1a:1c:21:88:ce:5a:69:89:07:03:ee:
09:5b:08:c2:99:07:81:82:fc:f1:a5:1b:bc:b1:b2:
8a:f7:e3:aa:41:b8:a8:e8:1d:19:67:8f:d7:83:2d:
15:30:71:60:4e:6d:fa:04:73:7b:9e:66:bb:89:f9:
73:8a:82:64:14:2f:a3:76:33:81:38:fd:d8:a0:78:
59:6d:5e:45:90:ed:70:52:64:fd:1f:69:a2:0c:d3:
85:31:58:93:be:a7:5e:f5:91:32:7e:83:7a:bb:75:
3b:d0:76:b9:89:f2:34:73:58:de:69:0a:29:b1:71:
64:dc:a8:2c:52:13:1e:88:6b:2d:8b:60:0f:98:45:
29:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DA:A4:36:1F:73:81:F2:80:00:AC:15:C6:5F:4A:A4:4A:58:A4:13
X509v3 Authority Key Identifier:
keyid:35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:4c:22:14:25:40:35:85:f8:e5:a9:e7:ab:cc:73:02:29:17:
3f:ab:1f:14:8b:a2:16:99:2f:92:d3:0b:ce:9e:ab:21:10:79:
a4:68:da:e6:d2:e3:cd:ee:a6:cd:56:7a:f9:0f:b7:55:0e:0b:
86:ae:4f:80:16:18:94:ed:0d:67:bb:0f:e2:5a:da:6b:aa:0d:
78:3a:fd:f1:3d:5f:41:f2:eb:94:2d:b7:fc:e8:2a:28:ad:75:
da:b1:70:af:75:17:e7:f9:22:3d:4f:0d:4c:84:c0:e6:c1:04:
d5:fe:db:48:ba:13:95:1f:90:1a:95:ba:9f:78:6d:f0:69:d5:
65:1e:11:40:f5:36:cb:06:d6:f0:85:f0:9b:8b:ac:4c:40:4e:
96:4f:b6:f3:55:2f:6f:95:d9:d4:46:ae:aa:f3:72:5f:7b:8e:
b2:46:fe:65:d9:1b:e1:b1:32:16:5b:f4:7d:a6:1a:69:e6:6c:
77:86:ff:ae:40:a2:9d:61:d0:a9:ba:d7:d7:60:10:43:0f:95:
94:99:6c:30:c5:c8:f7:d0:0f:fc:07:8a:e5:53:f0:f6:97:64:
e0:e0:ec:54:ea:fc:3f:c7:55:1d:9b:54:85:92:d2:42:fa:40:
37:bf:09:70:2b:e8:2e:f2:65:17:f2:6d:95:43:26:60:8a:1f:
07:6d:25:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:13:08 2025 by rpki-client