Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
File: 1NZco0qWiw2FYauHdtuwLdt8eDM.mft (raw, json)
Hash identifier: 0Z1NQT06Dp6nkIf1BkxJ7/X+uLtX8XqYka2LzRKvm9E=
Subject key identifier: DE:C0:D3:B3:0B:EB:6B:EC:FD:E3:FA:4A:2E:88:9B:49:D2:C4:A1:1B
Authority key identifier: D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33
Certificate issuer: /CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833
Certificate serial: 0197B7B334237E768BF9A8FB3FECFB72975D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
Manifest number: 0596
Signing time: Sat 28 Jun 2025 18:01:04 +0000
Manifest this update: Sat 28 Jun 2025 18:01:04 +0000
Manifest next update: Sun 29 Jun 2025 18:01:04 +0000
Files and hashes: 1: 1NZco0qWiw2FYauHdtuwLdt8eDM.crl (hash: zX7Ragup9NFdpSsE+8c/KQeQe36nlkVIM5a4n75FW4w=)
2: 7jIS7Kg3pQ0rAdPTN8-mhFQ9NMI.roa (hash: X1BBv86nq4mpZk7vS1wx5rzfijmXxCD6/5jYb3vftEE=)
3: JBZwLHOeun9xUsFliq37fa6QYAo.roa (hash: 8ByuZxbvTl/x0Sjxc//zO5GFMR7JeQh92bNKijR57Vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:34:23:7e:76:8b:f9:a8:fb:3f:ec:fb:72:97:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833
Validity
Not Before: Jun 28 18:01:04 2025 GMT
Not After : Jun 29 18:01:04 2025 GMT
Subject: CN=dec0d3b30beb6becfde3fa4a2e889b49d2c4a11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:37:e7:be:44:c2:a0:6a:11:bf:45:ac:0b:9d:
6d:96:51:e1:c0:8f:8e:8a:d1:46:60:7c:70:31:3d:
3d:52:9e:f6:d4:17:79:ff:8f:e3:9d:7f:79:76:50:
ee:e8:43:16:20:07:3d:05:11:72:8e:1e:17:19:9f:
dc:58:e4:cc:50:fa:a0:8c:7b:29:0d:03:93:d9:0c:
74:be:5f:7b:09:a0:ce:f8:f9:79:ea:36:aa:de:cc:
c7:8e:b8:e1:09:14:04:e8:d6:20:0e:3b:74:f3:e5:
35:2b:f7:56:68:32:ef:31:ab:c8:ca:41:bb:da:43:
f8:dd:ac:ce:bb:88:73:e4:31:ac:73:6a:40:30:f5:
03:3b:d4:cb:e2:cb:e2:cb:43:61:25:5e:3c:a0:29:
e6:08:96:fa:d0:65:a8:e2:5e:0a:d4:cb:4b:ee:91:
5e:02:89:90:40:fe:35:a4:3d:3c:d5:dd:52:2b:ff:
60:e3:af:3f:77:11:c8:f6:01:36:cd:7d:d3:2c:76:
10:57:99:69:76:f8:04:f6:68:be:27:ae:a4:ab:15:
8f:ea:64:4d:3e:fd:a1:b7:07:a6:22:47:93:bc:37:
f1:00:00:4f:71:be:52:7d:30:51:c0:26:86:26:29:
e6:e4:93:3b:2d:08:dc:c3:fb:af:2c:ed:60:dc:e6:
0a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C0:D3:B3:0B:EB:6B:EC:FD:E3:FA:4A:2E:88:9B:49:D2:C4:A1:1B
X509v3 Authority Key Identifier:
keyid:D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:c8:0b:99:6f:90:f4:13:0c:ba:65:bf:56:48:66:af:07:e4:
4d:dd:f6:72:71:40:50:8e:17:b7:49:1b:07:0d:c3:25:e6:80:
55:3d:c4:e2:65:82:20:aa:13:23:bd:a2:65:66:02:6f:23:a8:
ce:d6:e6:8f:57:7d:10:0d:3f:8e:a7:bf:b4:77:f2:d9:80:af:
24:2f:4b:02:e7:07:71:86:af:f4:ed:c5:d3:2f:f8:71:90:bf:
46:e9:09:ea:c5:26:66:10:01:7c:cc:b6:1f:5d:de:94:e8:24:
fb:89:67:71:de:2a:70:c9:04:5b:31:23:01:1a:98:4a:7a:5d:
08:b8:4a:ac:a0:06:5b:74:82:ac:5b:fc:27:ad:ca:4a:d1:13:
2b:04:36:3d:57:e7:6f:fa:b8:c9:81:83:64:f8:9b:19:98:1d:
dd:76:5b:33:ce:5a:c0:f5:a5:50:6b:76:e7:f3:5e:06:e4:20:
27:88:c1:e1:61:31:c8:f6:f7:1c:31:bb:66:bd:f2:e3:c2:df:
15:8c:ca:1e:eb:29:c1:21:8e:13:0f:0f:17:72:28:b0:1c:7c:
4d:f7:7a:09:5a:33:cb:66:d1:7e:25:e3:64:2a:aa:50:88:2d:
d2:1f:d4:ba:a5:d7:c7:3e:0c:bd:66:b2:9d:a5:d5:30:4f:66:
cc:36:c7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:39:31 2025 by rpki-client