Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
File: Nz2PVXyuGOI12Ti608-uF8kbneY.mft (raw, json)
Hash identifier: id7acOOI4LDukb9DSOl4esFmWpl1kmH0ZHnUiP0W9Ms=
Subject key identifier: 77:36:E8:3F:5B:24:2E:A4:EA:E1:EC:FE:62:47:F2:C0:D6:E0:5E:16
Authority key identifier: 37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6
Certificate issuer: /CN=373d8f557cae18e235d938bad3cfae17c91b9de6
Certificate serial: 0197B6D72F115C49BA769B3A6C04E19D0B6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
Manifest number: 0C76
Signing time: Sat 28 Jun 2025 14:00:44 +0000
Manifest this update: Sat 28 Jun 2025 14:00:44 +0000
Manifest next update: Sun 29 Jun 2025 14:00:44 +0000
Files and hashes: 1: Nz2PVXyuGOI12Ti608-uF8kbneY.crl (hash: g5m64yau1VJs0agBJKeZXsnXcJfHUUEZvClURKjMHag=)
2: ozI4hI8kFkEQxCSmEwvkBXoCapM.roa (hash: nsuE7KYFnBTkOwSYDCdNStBanVXhSb5SsJb22tB9rcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:2f:11:5c:49:ba:76:9b:3a:6c:04:e1:9d:0b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=373d8f557cae18e235d938bad3cfae17c91b9de6
Validity
Not Before: Jun 28 14:00:44 2025 GMT
Not After : Jun 29 14:00:44 2025 GMT
Subject: CN=7736e83f5b242ea4eae1ecfe6247f2c0d6e05e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:43:4c:2a:9a:10:f0:72:59:8e:d9:1c:65:9e:
a3:46:95:e6:bf:f1:83:e9:0b:b2:58:28:89:99:b0:
48:f2:3f:7a:8f:d0:39:3e:6c:a2:40:1d:d2:78:67:
01:6e:1d:57:d2:5e:49:bb:1d:2c:04:bd:2d:a0:26:
67:3b:48:86:a3:62:1c:a8:31:fb:4b:b6:5f:40:44:
01:94:19:03:75:aa:3e:1e:e9:7d:51:dc:af:a8:b3:
4b:38:5e:25:ab:69:97:65:dc:96:1c:2e:03:60:c4:
02:7d:52:19:07:ba:9a:81:aa:3e:d6:0f:a6:35:b8:
98:2e:79:9a:aa:e7:e0:2b:e2:58:12:68:f5:be:6b:
45:e3:4c:52:3a:68:11:20:e2:17:9b:bb:08:7a:40:
81:a1:5a:ba:ab:dd:b3:f1:05:24:1c:98:c7:ce:1d:
ca:b2:9c:2a:47:ec:06:56:63:bd:b2:f8:53:98:c1:
14:a5:aa:45:7d:b5:9b:18:58:1e:7b:61:3a:40:f8:
76:87:72:8b:5c:4a:8a:d8:62:ac:ee:6a:b7:5f:09:
1c:3d:51:84:f8:29:0a:f4:e8:9b:a9:9b:14:c7:76:
12:6d:4d:a9:ce:ce:81:f4:a9:cc:4d:73:55:47:96:
32:87:df:d8:da:bf:2d:50:a9:7c:a5:5b:5e:72:3f:
db:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:36:E8:3F:5B:24:2E:A4:EA:E1:EC:FE:62:47:F2:C0:D6:E0:5E:16
X509v3 Authority Key Identifier:
keyid:37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:71:b5:40:bb:fc:aa:3e:d2:16:75:51:fa:c3:41:80:80:17:
24:e2:95:c0:6b:2e:d7:96:fa:b0:bd:24:ee:64:24:3b:64:e2:
2d:82:09:09:1d:c7:2a:b5:4c:4b:7b:4c:29:5c:c5:bd:29:06:
f6:34:d3:a8:c8:41:e7:dc:80:fe:60:c4:e7:d4:3d:f1:97:ca:
7e:63:d8:d5:33:b4:0a:23:37:e9:23:57:ec:71:4d:13:42:fe:
cb:98:d1:df:db:9c:60:16:c6:01:06:12:96:2f:e4:87:30:38:
d0:97:24:67:b5:ea:c4:94:35:32:95:3b:c7:41:50:81:53:23:
a3:ab:fe:1a:67:40:f6:b2:ad:46:34:2a:ea:f5:bd:44:70:88:
1b:f8:e3:92:aa:3f:6c:bc:6b:70:93:bf:15:34:f2:77:58:27:
26:f2:9f:c0:1c:6c:ea:d6:b5:bc:23:33:cf:d0:08:49:bd:73:
48:43:30:f9:95:89:60:58:55:ee:a2:4a:0a:20:5b:89:d5:58:
e0:01:ed:1a:75:34:3d:de:35:ee:4f:4b:f7:be:7f:cd:12:61:
73:7c:06:89:b8:ee:68:16:84:e9:10:46:46:81:e7:c3:a1:bf:
d8:90:c6:5c:da:10:65:67:5a:1b:d5:36:99:77:f4:1f:76:06:
ed:c5:56:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:13 2025 by rpki-client