Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
File: RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft (raw, json)
Hash identifier: KUPNG3fc+lxchkvZwvS6G3QHrd8echHZ8dndzY3NBfU=
Subject key identifier: 53:94:2B:8A:A2:7C:A2:9C:1F:FF:80:0E:2D:D9:71:96:85:8C:2B:57
Authority key identifier: 44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40
Certificate issuer: /CN=44d64dac03f1a57c1931667118048d82c43c5540
Certificate serial: 0196BE5C2F30DDEC74EE990366787F97946E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
Manifest number: 0BAF
Signing time: Sun 11 May 2025 08:00:34 +0000
Manifest this update: Sun 11 May 2025 08:00:34 +0000
Manifest next update: Mon 12 May 2025 08:00:34 +0000
Files and hashes: 1: RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl (hash: O1mfET/YkusMobFaIN5vOVmoPiBuM3IlGoKwy6vkUt8=)
2: vPwQH1RvTV4M1J-vAZbjIjKDG4c.roa (hash: bhhfgUa9IkevuU6kgmPNLfOfpmJN6kMgsbrrhzr6WCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:2f:30:dd:ec:74:ee:99:03:66:78:7f:97:94:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d64dac03f1a57c1931667118048d82c43c5540
Validity
Not Before: May 11 08:00:34 2025 GMT
Not After : May 12 08:00:34 2025 GMT
Subject: CN=53942b8aa27ca29c1fff800e2dd97196858c2b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:71:bd:51:ae:da:d3:94:00:45:87:4b:b9:cf:
ae:70:dc:8e:b1:0c:da:b1:1e:1e:cf:b2:49:95:87:
a5:ce:44:2d:4f:27:a9:93:62:80:a1:92:2f:14:7c:
fb:30:20:6c:9c:28:06:d4:06:13:df:92:73:f8:b3:
04:92:1b:c5:aa:20:e6:6d:e3:09:74:e7:20:2b:8b:
79:37:20:6e:d2:ff:b9:65:e4:a9:91:da:fc:b5:13:
be:bf:ab:46:31:67:82:4b:f6:78:a5:be:30:7e:6a:
5f:08:e4:f7:b0:36:b7:84:27:51:18:fd:b5:c2:c2:
9a:81:71:48:2f:e1:d3:46:5d:49:2f:4f:ab:5c:bb:
26:9c:fa:d7:c2:ff:ee:4f:68:7c:98:e2:c5:00:13:
dc:bd:d6:af:5a:08:a1:81:5f:0e:e5:34:41:b0:bc:
1d:cc:35:70:b1:56:c4:20:4f:d4:42:3b:1f:58:10:
aa:0d:54:48:2b:bc:a7:f6:ab:06:f0:5c:0f:2c:19:
91:d5:09:33:26:34:7c:d0:6b:b3:4d:1b:79:22:1a:
f4:a8:ea:61:f1:06:fd:03:1a:10:ea:7a:80:75:cc:
c7:83:17:36:f6:33:78:b0:04:02:0f:f5:bb:98:eb:
a8:c2:96:d0:8f:61:48:e3:ca:ca:a3:59:a8:87:9c:
de:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:94:2B:8A:A2:7C:A2:9C:1F:FF:80:0E:2D:D9:71:96:85:8C:2B:57
X509v3 Authority Key Identifier:
keyid:44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:7d:8e:7e:6c:1c:ee:89:7c:59:6c:7f:d3:dd:5a:2f:2e:e5:
42:4d:26:b7:a2:e9:49:af:02:03:8d:33:b5:9b:b3:f3:24:f3:
d6:b1:b8:53:76:3d:3d:11:f9:09:0e:60:97:c8:5d:c7:d1:c6:
07:0a:29:48:91:05:e0:c4:e0:c7:40:d8:1d:0e:df:fa:0a:7f:
ff:be:43:b8:1b:3e:b0:c5:5f:76:52:37:d6:82:19:84:c2:0f:
c2:43:62:17:48:15:63:16:53:ce:8c:9d:30:ca:c5:b2:79:4c:
d9:f7:77:f2:64:c0:80:ed:5e:5d:78:3a:79:9e:16:d4:6e:d7:
09:54:46:4a:2a:b1:28:0f:97:23:24:81:b5:ec:ea:15:43:6d:
0f:d4:00:fe:19:14:cc:c4:ce:23:0b:4a:47:f7:dd:ca:c8:32:
19:60:59:4e:e6:55:b9:1a:a6:0a:bc:7b:48:37:a4:8b:f5:9f:
ba:b8:db:c5:fd:59:85:c0:81:16:32:f1:0d:6b:4e:74:2e:c2:
38:2b:0b:13:2f:e1:43:0e:c9:48:ce:66:5e:b1:8f:12:a5:af:
a8:41:fa:85:ed:d6:82:ef:81:7f:6b:0e:6d:93:6c:27:00:ba:
3a:65:51:b9:be:51:b8:c3:b7:a5:0c:2a:93:40:a1:6f:32:b1:
b9:9f:43:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:22:35 2025 by rpki-client