Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
File: Nz2PVXyuGOI12Ti608-uF8kbneY.mft (raw, json)
Hash identifier: MplBZ103cEoA95TFtojEPIhoznGSEXQJzq6fkp3Kffc=
Subject key identifier: A8:E2:04:1F:E1:30:A6:68:8C:F6:E1:39:75:98:ED:C7:FF:3A:DD:A9
Authority key identifier: 37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6
Certificate issuer: /CN=373d8f557cae18e235d938bad3cfae17c91b9de6
Certificate serial: 0199FC21C5AE375DC6F0CBF3CD81B41E9E3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
Manifest number: 0DA3
Signing time: Sun 19 Oct 2025 11:01:35 +0000
Manifest this update: Sun 19 Oct 2025 11:01:35 +0000
Manifest next update: Mon 20 Oct 2025 11:01:35 +0000
Files and hashes: 1: Nz2PVXyuGOI12Ti608-uF8kbneY.crl (hash: vGRdlMBLX5VDJ81lp8FPbnm+hGJ6uxV6QT9uQyo/anU=)
2: ozI4hI8kFkEQxCSmEwvkBXoCapM.roa (hash: nsuE7KYFnBTkOwSYDCdNStBanVXhSb5SsJb22tB9rcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:c5:ae:37:5d:c6:f0:cb:f3:cd:81:b4:1e:9e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=373d8f557cae18e235d938bad3cfae17c91b9de6
Validity
Not Before: Oct 19 11:01:35 2025 GMT
Not After : Oct 20 11:01:35 2025 GMT
Subject: CN=a8e2041fe130a6688cf6e1397598edc7ff3adda9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:32:42:e4:f2:13:22:d1:3e:03:14:5a:63:97:
b9:e7:8c:df:18:1e:e6:55:78:d9:cd:2a:71:1c:93:
c1:56:c0:52:44:09:07:d1:26:6f:7b:1b:c7:bf:03:
3f:87:61:a1:9e:ff:50:95:07:bc:66:39:c9:2e:9f:
b8:42:a7:fb:73:b0:56:d7:68:78:05:f2:2f:c2:2b:
e4:dc:af:cc:cf:64:20:67:82:b6:a6:c4:3c:47:f5:
2a:7b:73:a6:9d:87:91:21:c8:98:de:16:e8:13:ad:
92:6e:86:c2:c9:31:5e:b3:54:5b:a6:07:2e:3f:d9:
ef:c3:56:07:be:57:54:cb:da:33:63:9c:fc:77:ee:
b4:05:6d:58:74:a0:40:86:9c:bc:de:20:f6:0b:c3:
a6:6f:74:53:d6:b2:f3:f1:f7:2a:32:48:8a:e5:d0:
67:4f:4e:60:04:a5:89:73:a6:f7:37:75:d3:df:b5:
d0:71:bd:4f:1a:2a:62:49:2c:54:64:51:24:75:64:
09:9a:d2:a4:ce:ca:0b:24:2f:6c:36:e3:8c:4d:39:
d7:be:27:8f:38:f9:ce:f3:8a:42:12:c5:3c:a4:25:
7b:07:f6:27:a0:72:50:94:4c:4f:16:30:5b:82:5b:
96:55:24:b5:11:dd:d0:9a:64:cc:8b:f1:1b:23:18:
ee:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E2:04:1F:E1:30:A6:68:8C:F6:E1:39:75:98:ED:C7:FF:3A:DD:A9
X509v3 Authority Key Identifier:
keyid:37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e6:ea:a0:9e:a6:9f:a2:79:83:a5:48:55:ef:1f:7e:41:cb:
17:3d:11:8c:b9:03:9d:9a:68:fe:6d:7e:46:22:8d:55:11:bf:
16:35:f7:87:21:10:80:47:de:2b:8a:55:ab:d7:38:33:59:0f:
a2:f8:99:72:c3:8d:d8:5c:25:12:00:3e:fe:a2:10:6f:8d:43:
0c:66:64:03:38:ee:da:c0:f4:51:ba:cb:17:3e:69:62:5a:7e:
5e:d0:01:c2:be:ad:bc:90:78:e4:44:bc:67:74:2c:27:84:fc:
7e:d8:90:74:f9:27:d6:6c:57:27:18:6c:25:ed:6a:38:34:4e:
b9:06:34:10:19:e1:b0:68:5f:35:38:7d:03:9b:9e:c9:0f:20:
07:91:9a:82:23:19:bd:44:79:30:58:a0:c7:c0:c6:cd:9a:21:
a4:42:aa:88:7f:f1:70:14:bf:08:8a:5e:a0:69:3f:11:54:7f:
0d:d5:f4:5c:42:66:11:ff:25:41:7a:51:ab:93:f5:9c:94:d5:
81:cc:df:ff:e9:82:ce:e4:28:27:a5:26:b4:21:75:23:f2:45:
4f:09:e4:25:e8:1a:8b:4a:d1:c9:1f:a7:80:eb:f0:0f:8f:2a:
10:d3:f4:e2:01:11:fe:d8:b7:d1:4f:d2:98:b9:63:28:e9:fc:
71:2d:66:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:52 2025 by rpki-client