Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
File: RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft (raw, json)
Hash identifier: kyKmDUnbx0AzsPFEhSn0AioyCtu4txk9/dOBsWiN2Sg=
Subject key identifier: 4A:6A:B6:7F:7C:12:49:BD:B0:5A:C8:5F:B6:3E:06:2F:A0:B4:7D:10
Authority key identifier: 44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40
Certificate issuer: /CN=44d64dac03f1a57c1931667118048d82c43c5540
Certificate serial: 0199FAA161A122813C2B6DD619E421981761
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
Manifest number: 0D5C
Signing time: Sun 19 Oct 2025 04:01:44 +0000
Manifest this update: Sun 19 Oct 2025 04:01:44 +0000
Manifest next update: Mon 20 Oct 2025 04:01:44 +0000
Files and hashes: 1: RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl (hash: 0EoFiBuG3V1BcANksX1dnoeKvtFI3WiJY+bxYeH64Mk=)
2: vPwQH1RvTV4M1J-vAZbjIjKDG4c.roa (hash: bhhfgUa9IkevuU6kgmPNLfOfpmJN6kMgsbrrhzr6WCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:61:a1:22:81:3c:2b:6d:d6:19:e4:21:98:17:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d64dac03f1a57c1931667118048d82c43c5540
Validity
Not Before: Oct 19 04:01:44 2025 GMT
Not After : Oct 20 04:01:44 2025 GMT
Subject: CN=4a6ab67f7c1249bdb05ac85fb63e062fa0b47d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:46:67:44:76:b5:fb:b2:b4:c3:c5:ef:e5:5c:
1e:92:62:f2:75:82:48:82:00:ea:a2:6d:a5:fc:83:
38:fc:c3:a1:21:17:60:a5:e4:94:71:2c:59:e8:e4:
ec:40:bd:55:a1:e2:84:07:e2:95:6a:c8:62:37:fe:
34:9d:2b:93:e9:29:67:9e:25:f2:00:05:92:18:8a:
8f:04:c4:74:20:53:c2:e5:83:c5:aa:93:03:9c:dc:
e2:2c:47:ce:2b:af:ce:65:59:aa:3a:d5:db:c8:bd:
44:d1:31:cc:17:68:52:71:37:92:eb:a2:ef:09:59:
92:be:91:4f:a6:19:2e:d8:2d:77:17:7e:8c:c3:a5:
0b:68:cb:d3:77:bb:33:43:3a:d6:34:4d:73:35:ad:
ec:1e:b3:72:33:7b:31:01:19:f1:bb:fb:63:99:41:
89:ac:be:54:90:cc:a6:9f:ca:0d:fa:fe:b5:50:88:
af:7d:d9:69:e8:65:a0:67:4f:d1:b2:3f:f9:e9:03:
12:5b:1b:8d:52:ab:f5:17:67:4e:1a:2d:0b:b3:2b:
4a:32:1f:99:48:cc:e5:ad:a8:29:57:f2:4c:a9:d6:
1a:5b:9a:ae:01:ca:d1:b2:66:4f:cb:1d:b5:42:3a:
46:53:9f:56:05:a8:2c:b9:36:1c:cf:bb:c4:24:16:
a3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6A:B6:7F:7C:12:49:BD:B0:5A:C8:5F:B6:3E:06:2F:A0:B4:7D:10
X509v3 Authority Key Identifier:
keyid:44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:85:97:1e:23:d1:6d:43:b2:55:c6:18:a5:15:d6:e0:fe:3b:
87:50:4d:50:b3:b6:64:c8:fb:c7:0f:56:4a:2d:57:72:f1:d7:
25:6f:d7:cc:c8:5a:bf:9e:75:84:52:7b:aa:06:3c:19:49:ce:
82:28:b0:c6:ec:67:a4:a4:db:b6:9c:73:ba:5f:33:46:c0:b1:
ed:31:d5:d9:a5:90:5f:3a:f2:95:93:0e:9d:86:a4:30:f7:d2:
bf:70:a2:56:14:06:8a:80:fb:30:af:5e:cb:cd:e0:39:75:c9:
ac:bf:bb:2e:c8:a4:b4:9a:f4:9e:70:c2:18:0b:80:95:80:3b:
8b:5f:9d:cf:1b:35:14:2c:db:0a:9d:54:74:c8:51:0a:5e:e6:
e1:f2:61:80:e9:72:0a:71:58:19:96:ff:3b:4b:69:e7:e5:ba:
a4:2b:6b:0a:6a:28:a4:89:e5:c1:47:3b:99:7f:b8:08:ea:0c:
28:b6:86:0a:eb:2a:a1:e9:83:4e:58:37:4f:f3:28:70:18:0d:
48:6a:0d:02:7a:cd:7f:63:11:d2:fc:07:8f:89:1f:c3:54:af:
3e:cd:21:59:01:6a:8b:3f:fe:72:89:52:f4:3c:e9:88:77:5b:
b3:87:f5:e2:66:e6:7a:36:00:06:44:27:af:13:b3:50:aa:6a:
1e:15:07:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:38 2025 by rpki-client