Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
File: RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft (raw, json)
Hash identifier: 7HwFJrfWie4cYlmV2o6FjoujdcQ9ZbD3ZuioIcoYy3o=
Subject key identifier: 1D:70:96:97:D4:5A:D9:F2:D7:AE:74:21:F7:A2:6B:E5:B3:BB:CD:06
Authority key identifier: 44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40
Certificate issuer: /CN=44d64dac03f1a57c1931667118048d82c43c5540
Certificate serial: 0198D54E1750F7C992AFE24907442701DAF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
Manifest number: 0CC4
Signing time: Sat 23 Aug 2025 05:02:01 +0000
Manifest this update: Sat 23 Aug 2025 05:02:01 +0000
Manifest next update: Sun 24 Aug 2025 05:02:01 +0000
Files and hashes: 1: RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl (hash: eFRppeeyd9iMBPLBgfeBJCQxPsE3RYUXz5xxe7yAthI=)
2: vPwQH1RvTV4M1J-vAZbjIjKDG4c.roa (hash: bhhfgUa9IkevuU6kgmPNLfOfpmJN6kMgsbrrhzr6WCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:17:50:f7:c9:92:af:e2:49:07:44:27:01:da:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d64dac03f1a57c1931667118048d82c43c5540
Validity
Not Before: Aug 23 05:02:01 2025 GMT
Not After : Aug 24 05:02:01 2025 GMT
Subject: CN=1d709697d45ad9f2d7ae7421f7a26be5b3bbcd06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6c:1a:e8:ae:5f:f7:e9:c6:79:42:01:43:56:
a0:79:a0:19:89:27:8e:8a:27:12:13:41:30:56:48:
6e:ab:5b:81:c7:b9:c0:d7:d2:16:38:15:50:3f:6a:
11:35:a9:c5:e0:73:7d:f9:ed:38:dc:21:f9:35:0d:
26:f6:8f:3e:8e:fd:9c:41:43:aa:ba:d4:8e:52:dc:
da:47:aa:75:07:e8:aa:7c:cc:c9:fd:1d:10:c2:3c:
c6:46:6f:3d:b9:77:7a:dd:bf:d4:47:55:1b:7c:68:
99:ef:6e:4b:3d:2e:c0:77:c0:66:2c:5b:4e:9a:dd:
72:b1:d3:9d:30:df:52:d3:43:73:e0:c8:76:88:7c:
b6:12:fa:fd:44:09:a1:ec:02:fb:88:d7:13:a0:f1:
af:df:9e:39:f8:ad:51:86:63:12:8f:ee:01:4a:ed:
1a:c9:7d:cd:7e:5d:16:57:c2:1b:03:23:4a:1b:c8:
5c:ac:26:37:17:d9:cb:ab:e9:e2:28:43:b2:f8:96:
36:34:c3:98:63:b1:c2:6d:6c:a4:46:90:9d:e1:b2:
02:ff:db:36:bc:2d:a3:88:31:46:0e:b1:80:75:62:
e1:2d:50:c8:32:ca:b8:82:d4:b0:26:15:4c:ec:8f:
44:df:99:cc:bc:ea:8d:31:20:1c:3f:73:ac:5f:eb:
bd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:70:96:97:D4:5A:D9:F2:D7:AE:74:21:F7:A2:6B:E5:B3:BB:CD:06
X509v3 Authority Key Identifier:
keyid:44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ba:e1:6a:00:a1:e6:4a:60:ac:12:7f:9c:00:43:3e:34:1b:
97:b5:87:2f:e1:e5:43:20:d0:00:6a:2f:d4:8a:c6:62:ac:8a:
7e:5f:d9:11:b6:09:70:82:72:ef:91:7a:6a:ed:ba:d3:d4:16:
3b:45:a0:5f:9c:fd:15:2d:7e:e2:c7:cd:1a:e5:f6:ed:e6:cd:
35:c8:b5:4b:98:54:7d:37:9b:ce:e5:a8:3d:da:ca:4b:2d:1d:
12:ff:34:78:68:36:2c:90:9e:7b:9f:56:07:10:a9:6e:6c:cb:
e4:80:9b:31:00:3b:c4:1d:f7:15:f6:4b:c5:44:14:f1:bd:5f:
42:91:dc:1c:55:44:c5:65:6f:a0:18:02:03:ae:b5:27:fc:1a:
c7:d0:8c:a4:63:6d:94:cc:e9:8f:93:45:84:32:a8:3c:a3:0a:
99:d0:4a:f7:37:6f:67:e4:37:b0:e2:de:6b:c7:14:fa:70:b6:
3a:95:2c:c3:30:cb:e4:db:ac:0f:32:8f:f2:10:f7:99:b0:10:
39:42:d6:03:fe:0d:1e:2d:b2:cd:65:a0:0d:82:90:76:1d:9f:
1f:7a:38:c0:56:4c:f7:4a:da:74:da:2b:79:d6:56:ef:89:fa:
2c:d9:c9:cb:45:97:7c:68:30:81:8a:31:f1:88:97:d0:18:0f:
19:c0:fc:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVThdQ98mSr+JJB0QnAdr4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZDY0ZGFjMDNmMWE1N2MxOTMxNjY3MTE4MDQ4ZDgyYzQz
YzU1NDAwHhcNMjUwODIzMDUwMjAxWhcNMjUwODI0MDUwMjAxWjAzMTEwLwYDVQQD
EygxZDcwOTY5N2Q0NWFkOWYyZDdhZTc0MjFmN2EyNmJlNWIzYmJjZDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWwa6K5f9+nGeUIBQ1ageaAZiSeO
iicSE0EwVkhuq1uBx7nA19IWOBVQP2oRNanF4HN9+e043CH5NQ0m9o8+jv2cQUOq
utSOUtzaR6p1B+iqfMzJ/R0QwjzGRm89uXd63b/UR1UbfGiZ725LPS7Ad8BmLFtO
mt1ysdOdMN9S00Nz4Mh2iHy2Evr9RAmh7AL7iNcToPGv3545+K1RhmMSj+4BSu0a
yX3Nfl0WV8IbAyNKG8hcrCY3F9nLq+niKEOy+JY2NMOYY7HCbWykRpCd4bIC/9s2
vC2jiDFGDrGAdWLhLVDIMsq4gtSwJhVM7I9E35nMvOqNMSAcP3OsX+u9aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB1wlpfUWtny1650Ifeia+Wzu80GMB8GA1UdIwQY
MBaAFETWTawD8aV8GTFmcRgEjYLEPFVAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk5aTnJBUHhwWHdaTVdaeEdBU05nc1E4VlVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xMDJiZWYtNjQ1OS00NGJjLTg0MGUt
ZTlkMmIzYTc4NzJjLzEvUk5aTnJBUHhwWHdaTVdaeEdBU05nc1E4VlVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8xMDJiZWYtNjQ1OS00NGJjLTg0MGUtZTlkMmIzYTc4NzJj
LzEvUk5aTnJBUHhwWHdaTVdaeEdBU05nc1E4VlVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALbrhagCh
5kpgrBJ/nABDPjQbl7WHL+HlQyDQAGov1IrGYqyKfl/ZEbYJcIJy75F6au2609QW
O0WgX5z9FS1+4sfNGuX27ebNNci1S5hUfTebzuWoPdrKSy0dEv80eGg2LJCee59W
BxCpbmzL5ICbMQA7xB33FfZLxUQU8b1fQpHcHFVExWVvoBgCA661J/wax9CMpGNt
lMzpj5NFhDKoPKMKmdBK9zdvZ+Q3sOLea8cU+nC2OpUswzDL5NusDzKP8hD3mbAQ
OULWA/4NHi2yzWWgDYKQdh2fH3o4wFZM90radNoredZW74n6LNnJy0WXfGgwgYox
8YiX0BgPGcD8+w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:31:51 2025 by rpki-client