Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
File: nz7CHhDzZG5NwOI_X37ERQFWDeM.mft (raw, json)
Hash identifier: 5ZWsSCId2MwgWUghp783MoWwC9+qssxi7MseUg7RMpI=
Subject key identifier: B2:0B:05:A5:4F:89:FD:C1:3E:64:3C:6E:C0:8B:28:FE:B5:F3:AA:76
Authority key identifier: 9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3
Certificate issuer: /CN=9f3ec21e10f3646e4dc0e23f5f7ec44501560de3
Certificate serial: 0197CC4CE410648F5F30BD246732DF008451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
Manifest number: 058F
Signing time: Wed 02 Jul 2025 18:01:20 +0000
Manifest this update: Wed 02 Jul 2025 18:01:20 +0000
Manifest next update: Thu 03 Jul 2025 18:01:20 +0000
Files and hashes: 1: nz7CHhDzZG5NwOI_X37ERQFWDeM.crl (hash: 4pBL13drqvGs5ojiaoP3RdCBBvjsn163N47pyPpowNM=)
2: rj7cMvisc5sEsNUl1EQ8tKzz6C8.roa (hash: 6mpsbNewWQwOLcJiFmFyeCARGSCjU8+BOm6oNSA/kho=)
3: ymi9yVyZH-4QjFqx4TNJYTh4zAw.roa (hash: BjRl81ZbEIDdTp592nI0/wEPMbPN+bb2781H4ezqZJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 18:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:4c:e4:10:64:8f:5f:30:bd:24:67:32:df:00:84:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3ec21e10f3646e4dc0e23f5f7ec44501560de3
Validity
Not Before: Jul 2 18:01:20 2025 GMT
Not After : Jul 3 18:01:20 2025 GMT
Subject: CN=b20b05a54f89fdc13e643c6ec08b28feb5f3aa76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:75:5f:1e:b4:0c:d7:42:25:47:97:51:71:1f:
6c:85:2d:84:01:9a:ae:68:3c:37:b2:55:3f:6c:c4:
81:2c:ab:8c:c2:3a:28:d9:86:d6:f5:27:bc:f6:5a:
e7:36:57:6c:b0:f3:f0:b3:1a:0f:f8:31:7f:e5:c7:
59:d5:12:de:3e:d4:96:5a:36:f9:48:26:eb:72:9d:
da:91:0c:0a:4f:6b:27:3a:59:e3:58:7d:97:7e:e4:
74:83:29:72:86:1b:36:a4:97:31:2c:c5:f3:49:3a:
1e:b2:6b:fa:a7:d9:39:dd:ec:bd:21:75:55:99:13:
7c:35:8f:0e:5f:a6:ea:c4:10:da:d7:ef:a8:9a:07:
64:aa:5a:9c:3c:e3:e0:d7:ca:b6:67:8c:87:92:ff:
0e:c0:98:88:5f:f6:78:8c:47:93:2d:b4:59:12:94:
9a:60:c1:f1:79:e2:52:8d:85:6e:ab:97:77:67:2e:
c0:ca:b7:c3:3d:f4:7e:f8:b4:1b:a2:f3:32:4a:b5:
6c:1a:5f:39:fe:52:35:79:b7:80:71:c1:5d:31:80:
82:1d:76:d2:96:46:7e:37:08:19:b8:bb:76:f2:78:
7c:e5:b5:48:9e:f9:45:f3:e3:56:83:70:4d:2e:8b:
3b:67:55:b4:2e:c6:79:c2:6c:04:6f:a3:f1:1c:b2:
71:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0B:05:A5:4F:89:FD:C1:3E:64:3C:6E:C0:8B:28:FE:B5:F3:AA:76
X509v3 Authority Key Identifier:
keyid:9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:79:78:6a:68:46:72:14:f7:44:af:44:0e:2c:48:8a:ef:3c:
5f:0c:89:9c:48:a0:6b:37:f7:23:0c:a8:03:c5:60:06:31:cc:
33:73:14:c2:1e:27:d3:d7:91:27:43:1a:36:40:b2:44:53:1b:
16:28:7e:12:f4:d0:36:ed:c3:c2:6a:bb:6f:e3:65:51:e5:bc:
99:b4:ab:ee:2e:93:77:66:22:8f:87:33:bc:30:89:80:a3:36:
2c:49:3e:2a:8c:4b:e9:d8:62:a4:de:fa:e3:fe:7c:b9:9c:ee:
2d:00:42:03:a4:a8:3c:cf:dc:e7:07:c6:3c:fa:0f:c5:e2:6d:
bc:dc:92:44:ac:fd:07:ab:f4:08:e8:75:2e:e2:4f:13:9a:a1:
9e:8e:bb:a5:24:4a:7e:23:57:4a:e9:f1:7f:db:4b:af:2e:3e:
47:7e:e6:cc:21:37:6e:f9:c5:3c:0a:f9:f6:d3:e3:13:b8:dd:
c9:51:14:b5:d7:6d:59:3d:7a:4e:60:18:89:44:83:aa:09:e5:
0d:d5:37:e9:50:18:bc:cc:f7:83:66:8f:38:50:ed:11:08:92:
f7:55:67:bb:b7:15:6f:e7:ac:9d:a8:b5:4c:32:db:0f:1b:69:
53:18:ec:a4:6f:16:fc:28:9a:9b:e8:be:5f:cc:f7:cd:15:36:
fe:95:63:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 02:00:43 2025 by rpki-client