Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
File: Nz2PVXyuGOI12Ti608-uF8kbneY.mft (raw, json)
Hash identifier: gRU7T+wawYvcsTdaXh8mEWvE5RgfLYRQzEinsSbD+sA=
Subject key identifier: 7D:3A:1C:F7:05:54:49:63:AC:EB:84:04:94:C4:DE:7E:A6:BE:B9:4D
Authority key identifier: 37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6
Certificate issuer: /CN=373d8f557cae18e235d938bad3cfae17c91b9de6
Certificate serial: 0198D698370B5CCD305A8AF91E99F23AC5B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
Manifest number: 0D0B
Signing time: Sat 23 Aug 2025 11:02:36 +0000
Manifest this update: Sat 23 Aug 2025 11:02:36 +0000
Manifest next update: Sun 24 Aug 2025 11:02:36 +0000
Files and hashes: 1: Nz2PVXyuGOI12Ti608-uF8kbneY.crl (hash: lmJaYSn+HZnaDzUiZ6m54jGVag4scF0DzDhm9RaC11s=)
2: ozI4hI8kFkEQxCSmEwvkBXoCapM.roa (hash: nsuE7KYFnBTkOwSYDCdNStBanVXhSb5SsJb22tB9rcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:37:0b:5c:cd:30:5a:8a:f9:1e:99:f2:3a:c5:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=373d8f557cae18e235d938bad3cfae17c91b9de6
Validity
Not Before: Aug 23 11:02:36 2025 GMT
Not After : Aug 24 11:02:36 2025 GMT
Subject: CN=7d3a1cf705544963aceb840494c4de7ea6beb94d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:49:ac:7f:47:0f:01:f6:21:26:fb:bd:82:47:
a6:45:94:28:c9:2f:35:45:e9:91:5a:94:70:f4:30:
71:fd:ea:4b:47:b5:f1:95:e8:8f:1f:a5:de:9c:4f:
3c:81:cb:a3:55:a8:21:04:8d:47:78:30:45:d5:6f:
5b:61:d9:3f:63:64:5d:a1:9f:cb:8c:69:49:b9:0d:
cd:12:1e:cb:b7:64:0c:4a:85:3e:64:69:9f:35:c7:
ab:4a:6c:d7:95:f3:b1:9f:d3:cb:af:f9:62:15:6f:
b2:02:80:16:21:25:ac:75:cd:de:5a:91:eb:de:29:
e5:1c:18:9e:b3:6d:dd:cf:63:a9:4e:bf:95:2f:ac:
ef:1d:bd:04:1c:a1:ed:44:09:b5:18:08:3b:45:4b:
b7:1d:85:1a:d9:5b:31:ca:01:71:97:14:42:2e:e0:
ea:df:d2:cf:4f:52:8d:6e:8a:b0:c4:ea:ca:d7:cc:
fc:21:57:1d:86:41:1c:31:35:d1:c3:85:67:27:11:
c2:da:29:ca:a2:24:fb:be:7c:b8:aa:34:66:7b:79:
2f:e4:28:ae:66:f0:01:e0:a9:0c:73:e2:4c:7b:d5:
d7:5f:68:7e:bb:86:4c:95:b0:0d:55:21:10:b8:8c:
4b:8e:59:85:95:b8:11:7c:c5:8e:a0:53:05:91:c5:
06:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3A:1C:F7:05:54:49:63:AC:EB:84:04:94:C4:DE:7E:A6:BE:B9:4D
X509v3 Authority Key Identifier:
keyid:37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:cf:ab:ff:46:7d:a3:b9:c4:bb:7e:cc:1f:45:fc:c2:51:24:
eb:71:8c:46:9d:22:1a:89:59:44:80:df:fe:db:38:89:66:91:
ad:20:67:59:4d:2e:08:f0:33:94:74:b4:c8:e0:f1:69:24:29:
0a:39:98:1d:15:5f:a7:bb:30:47:ac:c5:d0:39:71:3b:a5:26:
30:f9:bd:8e:6a:87:c6:81:2c:23:f3:95:9f:d2:4d:da:1c:e1:
cd:5d:32:2f:65:f1:97:a0:b0:b5:9a:60:e2:ea:cf:8c:c0:99:
e8:2d:ee:06:2a:8d:47:8b:da:50:d2:c3:a2:7e:e0:00:18:3a:
0f:36:91:71:47:1e:1b:8e:71:96:f4:05:11:23:a3:59:c4:30:
70:b5:88:8c:3a:51:d5:07:e9:c9:37:97:8b:51:8e:6e:f3:83:
7d:ad:3d:6d:52:18:98:2d:00:80:2a:a7:9d:66:bb:22:ce:aa:
f7:39:e0:6d:55:20:da:c5:00:3d:8f:01:d9:26:c3:c3:e4:01:
ca:97:36:4e:ff:d6:b8:c6:d7:f0:e0:a4:29:0e:1c:6f:1e:f4:
90:06:f3:47:30:f9:52:cb:b6:13:8f:ef:77:f1:bd:67:20:71:
21:36:14:d0:86:ad:7b:7f:b5:41:ac:c2:0b:e2:ca:ac:20:71:
87:23:a7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:09 2025 by rpki-client