Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
File: nz7CHhDzZG5NwOI_X37ERQFWDeM.mft (raw, json)
Hash identifier: qdkpOrRqcm5WKnuV5ZiQgG4+SYc4Drn26sii55eizts=
Subject key identifier: F9:79:CF:A3:33:C1:A9:29:15:70:D4:89:9D:49:AF:D9:2D:E9:0D:34
Authority key identifier: 9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3
Certificate issuer: /CN=9f3ec21e10f3646e4dc0e23f5f7ec44501560de3
Certificate serial: 0199FC582F1945AE1DC239D4F1AE1831C036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
Manifest number: 06B1
Signing time: Sun 19 Oct 2025 12:01:01 +0000
Manifest this update: Sun 19 Oct 2025 12:01:01 +0000
Manifest next update: Mon 20 Oct 2025 12:01:01 +0000
Files and hashes: 1: nz7CHhDzZG5NwOI_X37ERQFWDeM.crl (hash: Axcf1THCbua2L+3/uMVUjeOn4T/6/lQH84vJaaqwU68=)
2: rj7cMvisc5sEsNUl1EQ8tKzz6C8.roa (hash: 6mpsbNewWQwOLcJiFmFyeCARGSCjU8+BOm6oNSA/kho=)
3: ymi9yVyZH-4QjFqx4TNJYTh4zAw.roa (hash: BjRl81ZbEIDdTp592nI0/wEPMbPN+bb2781H4ezqZJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:2f:19:45:ae:1d:c2:39:d4:f1:ae:18:31:c0:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3ec21e10f3646e4dc0e23f5f7ec44501560de3
Validity
Not Before: Oct 19 12:01:01 2025 GMT
Not After : Oct 20 12:01:01 2025 GMT
Subject: CN=f979cfa333c1a9291570d4899d49afd92de90d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9a:41:f0:d0:ca:b0:30:9d:21:0d:36:79:35:
bf:d4:14:6f:9a:a9:2b:cf:1e:10:74:c1:b4:22:15:
e0:90:8d:77:20:4e:1e:ef:c2:a5:b7:32:37:2a:6b:
12:8a:c4:23:5b:50:bb:2b:d4:b7:e1:af:c4:3f:c5:
bf:fa:20:bc:0f:e5:06:9b:94:72:07:9e:f2:30:59:
71:36:de:89:36:79:bc:bf:54:5b:69:d8:57:20:d4:
c4:d1:f9:a7:13:29:bc:48:c1:2d:c0:3a:99:bd:d5:
ab:ac:5b:69:e1:22:73:04:a3:09:81:76:04:a8:47:
6f:e7:0f:72:4a:99:52:75:8e:71:78:91:2d:8b:dd:
cc:3c:73:9f:c7:ee:4e:9e:d5:a6:f8:98:b4:5e:27:
32:73:24:1f:08:09:61:2e:c3:21:4e:f3:1e:5e:5d:
07:27:7c:57:27:84:f3:f9:d8:05:0e:31:25:d0:aa:
65:98:f8:de:79:1e:5a:e0:0e:7a:05:e3:48:0b:c9:
b4:2c:7e:80:de:2e:e1:14:b6:17:6f:86:de:1e:ea:
59:cd:c3:d9:82:55:21:b0:0c:a6:24:fb:bb:55:0f:
8f:3d:8c:d8:6c:b9:0d:55:eb:6c:c8:97:62:7e:6b:
a8:3e:77:cb:fb:ee:9c:2e:de:38:1b:a1:8e:38:e0:
89:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:79:CF:A3:33:C1:A9:29:15:70:D4:89:9D:49:AF:D9:2D:E9:0D:34
X509v3 Authority Key Identifier:
keyid:9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a1:46:98:4b:0d:b8:b8:23:a8:ef:0c:55:7e:05:ca:f9:b5:
03:d0:36:cf:92:4c:6e:f9:8c:91:8a:b6:56:ae:69:fe:be:07:
90:2b:ae:5b:30:66:e5:c6:f7:6e:7b:2b:63:d1:75:43:7f:e5:
25:0f:97:3e:ff:73:0a:ba:43:df:73:18:9a:eb:ec:d2:e2:a7:
ae:d7:9a:8a:2f:01:31:bf:b9:b4:38:64:b3:55:6a:b5:c1:eb:
42:cb:62:69:17:6e:6f:a3:58:1a:45:ce:54:69:6a:1b:bb:6a:
4d:25:ed:2b:3f:2a:e6:84:45:e4:33:1d:27:27:c5:40:90:c5:
51:6d:a2:86:68:be:80:f4:d7:74:26:f0:2e:b8:ab:ea:86:63:
ed:35:b4:dc:72:4a:22:2b:48:52:58:34:51:c7:06:b1:b2:75:
e3:23:e4:09:c5:7e:17:60:27:d1:28:76:d1:12:56:19:be:e1:
12:f6:b4:93:17:72:1d:87:f1:d4:94:86:e6:64:f1:56:d9:01:
11:b0:ac:29:09:26:e0:ee:9b:08:d0:b9:37:a2:85:2a:b6:7e:
38:55:5f:cf:dd:c9:86:8b:01:3c:6e:7a:fb:9d:1a:07:55:bd:
f4:fd:79:04:87:e8:b8:95:86:34:d3:50:c0:14:c6:d0:1f:5e:
d9:fc:1f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:56 2025 by rpki-client