Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
File: nz7CHhDzZG5NwOI_X37ERQFWDeM.mft (raw, json)
Hash identifier: M/6bstmtMLeJgMrtVrCA8ILaqVFHt1iEVk8wMBQ84TM=
Subject key identifier: 8D:1C:C6:A0:D5:1C:77:3D:76:39:8E:40:C4:BE:CA:A5:98:C8:7B:D2
Authority key identifier: 9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3
Certificate issuer: /CN=9f3ec21e10f3646e4dc0e23f5f7ec44501560de3
Certificate serial: 0198D4E0A8C4201BAEF003568CEEF80C99FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
Manifest number: 0618
Signing time: Sat 23 Aug 2025 03:02:29 +0000
Manifest this update: Sat 23 Aug 2025 03:02:29 +0000
Manifest next update: Sun 24 Aug 2025 03:02:29 +0000
Files and hashes: 1: nz7CHhDzZG5NwOI_X37ERQFWDeM.crl (hash: Qt+7ziTQ8Fvk2mKs5gcWITlDCaT8/huT1w/IFsLLIsE=)
2: rj7cMvisc5sEsNUl1EQ8tKzz6C8.roa (hash: 6mpsbNewWQwOLcJiFmFyeCARGSCjU8+BOm6oNSA/kho=)
3: ymi9yVyZH-4QjFqx4TNJYTh4zAw.roa (hash: BjRl81ZbEIDdTp592nI0/wEPMbPN+bb2781H4ezqZJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:a8:c4:20:1b:ae:f0:03:56:8c:ee:f8:0c:99:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3ec21e10f3646e4dc0e23f5f7ec44501560de3
Validity
Not Before: Aug 23 03:02:29 2025 GMT
Not After : Aug 24 03:02:29 2025 GMT
Subject: CN=8d1cc6a0d51c773d76398e40c4becaa598c87bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f9:be:41:8f:03:84:1d:7d:3f:59:e8:4d:a6:
61:df:21:b3:33:e5:f1:86:f3:d3:a9:98:5c:34:3a:
22:8b:81:2c:ca:b3:ab:7e:71:2a:5a:eb:a5:9a:21:
d7:12:f3:62:e4:ca:5a:df:38:ff:f8:aa:60:58:db:
18:e9:23:2c:c9:92:44:7e:6e:d9:c3:13:b9:3d:9d:
29:6b:cd:f0:c2:38:a0:3a:4b:81:78:79:db:a5:fb:
f5:ba:cf:ec:cd:19:e1:f9:3a:0e:53:ca:a0:83:c8:
55:3d:e3:0b:f7:8f:84:aa:38:58:8f:e7:2a:02:a7:
5c:be:46:55:29:01:bb:48:db:c6:f1:f3:65:d7:b9:
4c:32:b7:ef:17:fb:aa:24:2b:a9:67:ab:b8:5d:15:
c9:d4:bb:c6:45:01:4a:63:8b:a4:b8:15:a9:ba:98:
80:00:35:8e:65:8f:15:11:22:24:b9:b2:ba:a3:7f:
d5:75:22:44:54:e9:c8:2b:0d:59:a0:75:72:65:ad:
53:55:32:66:b1:f7:6e:ad:38:3d:30:9d:c5:e4:2d:
9d:8d:86:43:7b:34:0f:e4:43:b0:82:11:fc:d7:6c:
a5:b8:06:0e:c0:59:f5:02:25:d3:7a:d5:8f:cf:a4:
d6:1d:9d:c8:3f:2a:93:41:25:21:62:aa:72:5c:b0:
7a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:1C:C6:A0:D5:1C:77:3D:76:39:8E:40:C4:BE:CA:A5:98:C8:7B:D2
X509v3 Authority Key Identifier:
keyid:9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:70:e8:bf:43:4e:da:37:4e:29:7b:8c:ef:76:22:0d:0a:72:
47:45:0d:07:7c:6a:80:c2:1e:d7:87:68:9b:f4:c3:25:10:24:
17:c7:54:c4:de:98:a0:e6:87:2d:0e:7c:08:18:db:87:43:79:
5b:10:8d:4d:29:39:fb:72:74:66:42:52:bc:35:da:8c:22:ee:
36:df:4f:50:61:42:0c:e3:82:d3:d7:2f:fb:70:f6:cf:b5:05:
b0:09:ee:da:16:71:e0:bf:5a:48:3e:eb:4b:c6:b0:77:99:f9:
f7:81:ee:43:be:83:3b:ea:1c:47:13:39:bd:d8:79:80:67:d6:
1e:86:71:e3:f5:85:e3:82:cb:7a:8d:21:b3:d3:23:77:3f:68:
7b:48:68:04:47:b5:ec:5f:91:54:a9:6b:c8:22:b7:f6:8c:e3:
de:49:f0:ae:5c:7d:3a:69:e4:e9:d6:5f:54:7b:cb:b8:76:3e:
73:67:e6:2e:fa:b9:a8:ba:7f:db:06:da:5d:71:a2:05:36:dc:
99:e2:6a:57:b6:8f:af:82:a3:d2:a9:32:0b:33:13:63:ac:ae:
9a:f4:2d:f0:9c:ab:c3:e0:a5:cb:f5:63:86:28:a6:fa:3d:43:
6a:98:8a:b8:ab:bb:df:fc:35:8b:da:9b:9f:cd:a9:de:0f:b7:
1c:6d:dc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:42:37 2025 by rpki-client