Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.mft
File: Nz3Mauaq2IhZH7d75OqWDzU1__Q.mft (raw, json)
Hash identifier: 7/llLP5YRXIKcQ95vkB4NRlkEzRR62r7ONJLySfo8Mg=
Subject key identifier: B3:0C:11:A0:59:BD:A9:2A:37:E7:D7:14:05:F2:06:5E:8A:52:5C:5E
Authority key identifier: 37:3D:CC:6A:E6:AA:D8:88:59:1F:B7:7B:E4:EA:96:0F:35:35:FF:F4
Certificate issuer: /CN=373dcc6ae6aad888591fb77be4ea960f3535fff4
Certificate serial: 0198D6601F7D8C24878A06D9E26AE04C683D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nz3Mauaq2IhZH7d75OqWDzU1__Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.mft
Manifest number: 0CAE
Signing time: Sat 23 Aug 2025 10:01:20 +0000
Manifest this update: Sat 23 Aug 2025 10:01:20 +0000
Manifest next update: Sun 24 Aug 2025 10:01:20 +0000
Files and hashes: 1: Nz3Mauaq2IhZH7d75OqWDzU1__Q.crl (hash: ZCQWBij5zRWlJpW45wi/CR6QRVOGJyjamBIg+8venx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nz3Mauaq2IhZH7d75OqWDzU1__Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:1f:7d:8c:24:87:8a:06:d9:e2:6a:e0:4c:68:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=373dcc6ae6aad888591fb77be4ea960f3535fff4
Validity
Not Before: Aug 23 10:01:20 2025 GMT
Not After : Aug 24 10:01:20 2025 GMT
Subject: CN=b30c11a059bda92a37e7d71405f2065e8a525c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:42:57:d9:79:07:2b:4a:73:9a:d6:ed:c5:32:
3b:63:4a:da:52:8c:5d:c0:ea:a8:3b:94:c5:c9:6e:
cd:7b:1a:fc:a1:0a:aa:5f:fe:a7:a1:ae:01:85:5e:
ca:ad:0e:b3:e3:e9:72:59:dc:a4:a7:d4:88:63:11:
34:91:84:ef:8a:95:9b:fc:db:0d:6a:ab:cc:1a:99:
15:f8:8f:d3:11:9a:23:97:3b:12:2a:5a:9c:31:20:
28:c6:a5:41:e4:5e:82:c6:05:f8:f7:07:c4:91:ff:
a9:96:79:90:c6:76:f7:71:f5:1b:9a:1b:f7:9e:01:
79:5f:59:f9:fb:a4:35:f4:7b:51:b3:cf:59:81:98:
b9:fc:57:20:c9:a3:9b:30:74:50:cb:d7:94:17:df:
79:35:7d:1f:f9:a0:d8:8d:2a:ab:4b:dc:6d:d5:d0:
bd:0b:dc:e0:6a:38:b5:9b:e4:3e:f1:9f:dd:e0:d7:
d2:d5:8c:c4:5b:5c:73:77:e8:5c:96:de:08:c4:f8:
46:d0:60:1b:37:60:b4:29:48:c2:34:b6:db:fa:f2:
d3:ed:df:24:7d:84:86:78:0e:49:5a:e2:84:fa:c0:
b8:e1:e7:0f:bd:1d:30:8a:66:22:80:24:c3:0f:8f:
2b:62:81:4b:d8:14:e6:c2:3b:fe:5c:82:57:25:ee:
8e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0C:11:A0:59:BD:A9:2A:37:E7:D7:14:05:F2:06:5E:8A:52:5C:5E
X509v3 Authority Key Identifier:
keyid:37:3D:CC:6A:E6:AA:D8:88:59:1F:B7:7B:E4:EA:96:0F:35:35:FF:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nz3Mauaq2IhZH7d75OqWDzU1__Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c2:91:e1:0b:bd:43:6c:26:e9:f8:37:3d:5a:1d:44:7b:a6:
a6:03:b0:40:12:cb:7d:7c:97:71:77:d6:59:f8:9b:f7:0f:32:
55:5f:d8:5d:e5:a3:d8:82:89:08:57:5d:68:f2:0b:e9:65:96:
71:05:eb:3e:8f:48:dd:55:47:29:b9:bf:63:58:09:d5:92:ef:
9d:52:a3:ea:ea:ef:59:ef:30:be:19:29:7e:5b:9e:56:18:a7:
76:22:55:e6:ef:1c:8d:cc:92:ba:ed:14:5c:ef:5b:7e:b8:f4:
08:5a:de:d6:3d:84:68:5c:08:02:ac:45:0f:34:2d:30:bc:c1:
41:39:ba:de:08:e8:3b:08:f0:59:53:9c:87:dd:10:27:46:bd:
d6:7e:a9:34:b9:82:63:df:53:3c:f9:39:d8:46:e8:d9:0c:78:
88:a3:d2:64:0a:59:45:f9:2f:ab:e2:66:3a:ad:1a:c2:b5:40:
98:7c:3b:d0:b9:30:ff:d1:51:3f:c9:58:d2:f1:cd:be:88:fb:
c8:33:c7:ec:9f:cb:b3:dc:fb:f1:cb:ef:a0:bf:19:61:7a:e3:
5e:c2:51:a1:2a:fb:93:9d:33:8f:e7:44:33:e9:30:48:1f:b9:
8f:c8:80:cf:db:1b:7d:62:6c:1f:20:bd:1a:15:ea:f5:8b:dd:
5a:59:08:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:34:37 2025 by rpki-client