Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
File: RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft (raw, json)
Hash identifier: XjIjgh2WKlGItkYSgIHSh/U1WlNVGK5GLOme2LJClHk=
Subject key identifier: C2:1B:F2:93:74:E6:4E:F4:A8:02:FB:CA:FC:C1:9E:D7:27:5D:8F:F8
Authority key identifier: 44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40
Certificate issuer: /CN=44d64dac03f1a57c1931667118048d82c43c5540
Certificate serial: 0197B77CB8D0239D2C902D2068E79C4BE534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
Manifest number: 0C30
Signing time: Sat 28 Jun 2025 17:01:33 +0000
Manifest this update: Sat 28 Jun 2025 17:01:33 +0000
Manifest next update: Sun 29 Jun 2025 17:01:33 +0000
Files and hashes: 1: RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl (hash: IEayeY69vDIw7AYDx6YWv9u9eG2MmdW4AremdR49ZZU=)
2: vPwQH1RvTV4M1J-vAZbjIjKDG4c.roa (hash: bhhfgUa9IkevuU6kgmPNLfOfpmJN6kMgsbrrhzr6WCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:b8:d0:23:9d:2c:90:2d:20:68:e7:9c:4b:e5:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d64dac03f1a57c1931667118048d82c43c5540
Validity
Not Before: Jun 28 17:01:33 2025 GMT
Not After : Jun 29 17:01:33 2025 GMT
Subject: CN=c21bf29374e64ef4a802fbcafcc19ed7275d8ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5d:b8:71:1a:75:eb:68:bb:38:6d:3c:f2:c3:
06:67:5a:82:e2:a7:f3:82:43:31:e4:98:71:44:84:
87:78:ad:0a:1b:db:fc:d1:42:fb:8e:d0:b1:c8:0d:
68:ad:86:9e:e7:f5:0a:90:ba:17:3e:d0:e7:7c:f5:
d2:83:cc:fb:cf:70:af:43:a3:ff:e6:ca:3c:5b:bf:
7a:34:4c:10:99:cc:05:55:30:81:03:42:92:42:14:
5b:df:15:c4:b9:74:e6:cc:f9:ce:7c:ec:3d:09:44:
a9:d8:75:e9:d5:63:03:ac:0e:b4:dc:99:b0:ed:ec:
be:e4:c4:19:7b:37:28:f0:01:30:59:4d:75:ac:ea:
fe:12:58:9f:ec:f9:52:64:8a:35:d1:d3:64:17:ed:
d7:6b:f8:84:a4:d5:c2:62:98:b9:86:b8:4f:d3:5a:
ba:fa:45:d2:ce:de:14:3d:1b:2e:d3:39:2d:3c:dd:
a0:c2:e5:c1:16:60:b7:b0:dc:a4:07:56:05:d9:0a:
50:f7:d4:4e:10:19:e1:76:de:34:47:89:23:71:04:
13:c7:24:60:fd:a5:3f:c6:fd:8b:d6:f5:39:51:65:
f2:61:3b:4e:c5:db:5a:1b:4e:88:95:b6:37:7f:ad:
c5:a6:f3:85:40:a2:12:73:69:23:12:59:6f:46:2c:
73:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1B:F2:93:74:E6:4E:F4:A8:02:FB:CA:FC:C1:9E:D7:27:5D:8F:F8
X509v3 Authority Key Identifier:
keyid:44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:8b:33:b9:65:3e:fd:67:f4:2e:8b:df:ef:f5:91:16:d8:96:
c8:c5:0d:9d:c0:9f:a4:86:35:41:18:68:7b:f9:5d:c4:2b:a6:
58:03:ef:e0:5e:f2:9f:5a:50:5b:5b:9b:8e:df:b9:ec:ff:0d:
f7:f5:41:96:51:ee:c7:97:57:c5:b8:8e:b4:55:71:82:5c:36:
1d:17:3e:55:fd:56:a5:18:e7:93:9a:e2:b1:08:09:0a:33:c9:
a1:eb:09:6e:bb:fb:4b:ef:93:76:4d:bf:1e:e8:78:15:11:1c:
e9:6b:bc:e5:ba:33:0d:dd:f8:db:f4:cd:3a:78:61:54:92:23:
6e:cb:40:17:f6:1b:43:9f:dc:b6:4a:3a:30:99:81:11:0c:1b:
e3:38:5f:5d:3a:b3:71:27:87:e8:72:7f:ff:55:a8:59:ae:ba:
1f:94:75:d4:a4:a3:c0:26:5b:e8:df:1a:81:72:57:c7:9d:4d:
11:0a:99:07:c6:a9:1c:a0:43:83:60:45:98:1b:09:fd:cc:b1:
d6:da:4f:2c:51:ad:f1:c0:d3:77:84:14:b4:ec:04:94:2f:1d:
09:91:15:5e:f2:48:12:c2:16:59:c4:99:ae:34:3d:c7:69:2e:
58:07:82:4c:0d:2c:6c:e8:db:f5:a1:03:bc:34:74:09:2c:5b:
51:ec:52:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:20:16 2025 by rpki-client