Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
File: 1NZco0qWiw2FYauHdtuwLdt8eDM.mft (raw, json)
Hash identifier: Rxk2b8L7JT0e3MsnwiCQV0uVRKfP5yJuhkwvhrW8i/c=
Subject key identifier: C5:02:B7:C7:1D:BA:8D:B8:EF:44:B8:65:B7:F4:B2:C6:E8:BC:3C:07
Authority key identifier: D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33
Certificate issuer: /CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833
Certificate serial: 0198D773AA1535616906CB53E4D9692C166A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
Manifest number: 062B
Signing time: Sat 23 Aug 2025 15:02:18 +0000
Manifest this update: Sat 23 Aug 2025 15:02:18 +0000
Manifest next update: Sun 24 Aug 2025 15:02:18 +0000
Files and hashes: 1: 1NZco0qWiw2FYauHdtuwLdt8eDM.crl (hash: eBeJpPv4pqhq7MgWp3th/1xeVw/g82HZAzkwHe8dDVQ=)
2: 7jIS7Kg3pQ0rAdPTN8-mhFQ9NMI.roa (hash: X1BBv86nq4mpZk7vS1wx5rzfijmXxCD6/5jYb3vftEE=)
3: JBZwLHOeun9xUsFliq37fa6QYAo.roa (hash: 8ByuZxbvTl/x0Sjxc//zO5GFMR7JeQh92bNKijR57Vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:aa:15:35:61:69:06:cb:53:e4:d9:69:2c:16:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833
Validity
Not Before: Aug 23 15:02:18 2025 GMT
Not After : Aug 24 15:02:18 2025 GMT
Subject: CN=c502b7c71dba8db8ef44b865b7f4b2c6e8bc3c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9f:e6:de:de:ff:09:d2:81:ad:7a:1c:6f:5e:
0a:f8:23:a1:a4:87:89:47:ac:b0:e7:3c:65:87:5c:
b3:83:97:33:8f:3f:c6:cd:d9:b9:1e:d8:8d:98:19:
3c:23:ee:ce:40:1d:f1:a4:b6:d3:7c:a8:86:ce:f0:
f6:62:38:dc:1d:07:87:30:7a:aa:df:c5:25:0f:2b:
ab:7a:75:7d:e4:1d:8c:75:96:98:c3:4d:d6:cb:1b:
2d:57:57:d3:ac:13:37:ac:84:2d:ee:ca:cd:3d:f5:
18:e9:5b:6e:4c:5e:bb:a3:f9:25:f6:e6:92:55:6b:
83:c3:ae:c6:88:15:27:b4:e3:36:b4:0b:32:b5:35:
16:17:bc:95:a6:69:2f:e4:da:2f:f6:e7:cd:c6:6a:
be:85:10:18:32:f3:bb:3e:d5:f5:25:13:97:76:ef:
16:68:eb:47:24:cb:d3:cf:e2:c6:cf:22:c7:8e:05:
7c:0d:c8:41:4c:91:5c:d2:1b:fa:65:50:ca:5a:ad:
54:f0:18:60:c1:cf:56:a4:82:4c:81:de:18:bf:84:
06:4f:96:12:51:37:b2:65:42:9c:48:d5:d6:a5:1d:
e5:d6:86:8d:30:15:21:03:04:89:13:32:3a:c2:5b:
4a:2d:ed:eb:0b:6a:2c:87:db:92:b3:2d:ea:64:1c:
48:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:02:B7:C7:1D:BA:8D:B8:EF:44:B8:65:B7:F4:B2:C6:E8:BC:3C:07
X509v3 Authority Key Identifier:
keyid:D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c2:1a:08:5c:de:99:a2:19:a8:e2:47:19:32:d0:b4:3d:b9:
2d:26:09:af:ba:f0:06:0c:6c:70:df:e3:36:e2:dd:32:f2:6e:
58:b5:cd:ef:92:2d:9a:b6:d4:fa:f3:1b:1a:2f:47:07:90:2f:
0f:0a:7f:cc:c4:87:d4:64:e8:0b:a4:3d:30:6c:3f:d6:cd:11:
f2:43:2d:a8:94:4d:75:ac:51:4d:43:13:e9:91:21:02:81:41:
f3:50:15:7b:54:fc:a5:0c:02:85:88:0e:79:63:59:0e:a1:2d:
08:3b:60:26:cc:df:fc:c0:2d:21:f8:89:1f:77:40:73:0c:00:
0f:95:99:81:c6:45:bb:26:10:64:a3:88:b8:2e:00:3a:e2:ff:
ae:cb:19:26:41:c0:fb:b9:b9:fd:91:66:59:7e:d8:d4:a7:0c:
cf:17:7e:0d:54:e8:43:a9:b8:b5:28:66:cd:48:15:2c:65:72:
a4:86:a0:d6:5b:9c:91:b4:62:ba:0a:e3:49:42:2b:17:c2:98:
47:bb:48:74:bd:47:2e:b7:aa:43:e2:38:b3:dd:eb:2b:b5:01:
04:8b:b9:4d:14:f7:ed:7e:3e:43:0d:a5:fb:7d:09:f1:64:06:
58:51:7b:8e:27:b4:e1:b1:93:09:df:0a:bf:f7:47:8c:1c:66:
e6:ac:9c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:46:12 2025 by rpki-client