Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
File: r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft (raw, json)
Hash identifier: FbtLBwXlF1zo05OE5zQtPlNJPDbQ09lIgMwq1WyaUVU=
Subject key identifier: 9C:BC:B2:30:E5:7B:3C:6B:A3:9A:D4:45:EF:15:D7:00:70:F4:C4:60
Authority key identifier: AF:F3:59:65:46:D4:62:0B:02:A9:64:2F:08:B7:7C:FE:65:02:AE:99
Certificate issuer: /CN=aff3596546d4620b02a9642f08b77cfe6502ae99
Certificate serial: 019872CFDCDAC0037B4C682105B8E6BB8BF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
Manifest number: 1614
Signing time: Mon 04 Aug 2025 02:01:21 +0000
Manifest this update: Mon 04 Aug 2025 02:01:21 +0000
Manifest next update: Tue 05 Aug 2025 02:01:21 +0000
Files and hashes: 1: r_NZZUbUYgsCqWQvCLd8_mUCrpk.crl (hash: Fru7DKA5zLbLLKMCghgsQTKSdd9dqiOZ2HFGZKMvnkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:dc:da:c0:03:7b:4c:68:21:05:b8:e6:bb:8b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff3596546d4620b02a9642f08b77cfe6502ae99
Validity
Not Before: Aug 4 02:01:21 2025 GMT
Not After : Aug 5 02:01:21 2025 GMT
Subject: CN=9cbcb230e57b3c6ba39ad445ef15d70070f4c460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2c:fe:93:15:9d:ce:56:77:22:d3:3c:51:ef:
ba:04:ba:12:53:60:bb:32:24:58:cb:df:74:01:cc:
af:5b:2d:3c:99:cb:43:80:65:3e:64:64:7e:32:25:
f5:53:01:27:5d:2c:72:27:93:59:47:a7:0f:11:28:
dc:e3:7d:61:e7:8e:1c:dc:52:49:20:4b:cf:df:20:
5d:da:5f:36:8f:fd:9f:ab:ae:62:2f:43:b9:0e:c5:
e9:a5:47:22:22:82:e3:1b:a7:e9:59:87:69:85:45:
64:3c:43:cc:36:d9:8b:c2:80:41:72:9a:e8:e7:bf:
44:5f:4b:92:3d:14:38:a1:9d:cf:98:29:7f:33:da:
7f:19:2d:bc:ee:55:31:34:04:48:5a:7c:5e:e8:3d:
51:bd:94:ec:4a:e1:68:6d:cf:ff:af:24:23:69:d6:
60:91:2b:3a:96:fc:c1:a1:d4:12:dd:df:bd:63:1e:
50:22:a9:ad:e9:35:84:75:25:a5:b3:bb:e0:b5:85:
fb:5b:c0:d4:db:cb:af:58:66:7c:fa:00:b9:16:df:
5d:75:6d:98:14:c8:28:95:2c:6a:6c:e7:7d:cf:59:
44:78:d8:0e:ed:df:90:80:dc:71:48:33:77:eb:77:
28:40:a4:a6:d9:bc:53:be:d4:52:ad:1e:66:f1:75:
a8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:BC:B2:30:E5:7B:3C:6B:A3:9A:D4:45:EF:15:D7:00:70:F4:C4:60
X509v3 Authority Key Identifier:
keyid:AF:F3:59:65:46:D4:62:0B:02:A9:64:2F:08:B7:7C:FE:65:02:AE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:01:bd:32:87:d0:9a:b1:96:33:e9:68:dd:1d:8d:d6:17:02:
17:ee:98:c1:ce:08:4e:55:37:b9:e2:c0:35:d7:cb:5d:53:ab:
b9:1f:fa:6d:b1:4e:1d:79:3c:c7:03:3a:5c:15:5e:1d:fe:2d:
f4:a4:4e:23:11:21:cd:b5:f0:c7:1e:0a:44:a1:cc:23:4b:94:
b6:1e:d4:73:4a:dd:97:aa:7b:29:a0:e4:03:e6:58:6a:15:d0:
d8:05:cc:5a:2b:0c:8a:68:dc:90:68:68:5a:db:d1:91:08:da:
b5:20:68:aa:d8:87:69:cb:09:51:ff:4e:31:d5:93:4e:3b:d2:
50:af:9c:66:4b:aa:81:e7:7b:73:3f:9b:e7:e5:d7:a9:82:7d:
5a:60:c1:d6:89:d6:1d:36:24:35:10:e7:f5:a5:45:be:94:d6:
d1:02:86:52:88:90:c7:25:3e:59:6a:58:f1:f0:d7:d8:cd:c0:
77:e0:b1:39:ca:0f:88:84:e2:75:bf:df:98:6c:9e:66:1f:6d:
a3:07:52:8f:cb:29:47:ad:89:88:77:57:10:ba:09:3c:4c:a7:
74:87:ae:ec:a0:ff:83:6b:d7:ee:5a:a1:bb:17:db:01:3b:9c:
70:38:3d:da:86:a0:7f:c4:55:7a:68:0a:86:61:fb:dd:38:7b:
ac:86:63:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:13 2025 by rpki-client