Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
File: NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft (raw, json)
Hash identifier: nvTTydyTx3rnM5DrkqciinXDyNCbILMyUxExkJIOL6k=
Subject key identifier: 08:6E:CD:2E:40:87:AF:B9:73:0C:E0:9A:C1:0A:3F:E3:9A:9B:8B:B4
Authority key identifier: 35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
Certificate issuer: /CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Certificate serial: 019768F2AB660BBAABDDCBAD086A499AC81B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
Manifest number: 0A71
Signing time: Fri 13 Jun 2025 11:00:23 +0000
Manifest this update: Fri 13 Jun 2025 11:00:23 +0000
Manifest next update: Sat 14 Jun 2025 11:00:23 +0000
Files and hashes: 1: NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl (hash: nWCz2eUYgW+UPk6xcy7FOvxy0s+IPYFplJxhZp+9F9I=)
2: Zk0y4tHHB8Yu3r49IrGLEovlzps.roa (hash: Z8BlFARu3PiIVKgAzCmvXp/n3Elo4eu1cJ/tXUB0sZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:ab:66:0b:ba:ab:dd:cb:ad:08:6a:49:9a:c8:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Validity
Not Before: Jun 13 11:00:23 2025 GMT
Not After : Jun 14 11:00:23 2025 GMT
Subject: CN=086ecd2e4087afb9730ce09ac10a3fe39a9b8bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:08:a6:3a:16:f3:5a:9f:82:90:33:58:e8:60:
e7:99:21:0e:35:5c:c0:f9:a0:45:d3:81:3b:66:c4:
ec:87:d8:8c:f0:71:3c:75:4b:63:29:cc:ae:8b:3e:
4e:ea:32:d4:a3:f2:b7:ae:ee:37:d1:c0:60:2a:d8:
3d:61:d3:73:37:c4:cd:61:35:91:23:da:a8:9a:f8:
b4:c0:ff:69:da:07:c0:7d:e8:d9:05:a2:41:8f:bd:
dd:0d:bf:d4:43:79:46:cf:a6:ea:1a:88:59:98:78:
e0:49:d2:59:cf:40:ce:2a:29:84:8a:08:5f:be:9e:
6a:d3:27:a9:ca:19:43:ce:24:e8:ed:c8:8c:72:3f:
85:29:f8:e7:d9:57:ba:db:4f:bd:51:ec:a8:97:c3:
31:4c:a1:83:ed:58:99:7e:05:23:c7:90:7a:0a:9c:
f1:fd:24:74:67:93:4b:99:04:ac:2d:f4:8d:a7:77:
a5:29:08:0e:69:87:a1:74:ed:b5:3d:7b:18:74:71:
c4:9d:1e:38:ee:c5:68:8d:17:11:54:9c:41:c4:ce:
eb:67:6f:a9:a1:fa:b3:76:c0:57:b0:86:a5:f8:d7:
65:79:3b:a4:42:e1:b5:f1:fd:3a:4c:62:6f:98:01:
a5:6c:9e:92:84:e9:07:17:15:a1:a4:bb:cc:f3:a6:
64:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6E:CD:2E:40:87:AF:B9:73:0C:E0:9A:C1:0A:3F:E3:9A:9B:8B:B4
X509v3 Authority Key Identifier:
keyid:35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c3:fa:d9:76:a7:6b:45:2c:32:36:a9:92:06:13:bc:6b:e0:
9c:e4:b1:b5:69:85:67:43:7b:55:ed:92:f9:64:c4:9f:ac:07:
41:63:93:b6:82:ce:58:1f:83:fe:fd:e5:f0:ac:0e:5c:b1:f5:
b1:58:6d:53:db:d2:3f:2d:c5:43:28:01:df:91:b0:fb:7f:20:
e1:1d:7b:7c:26:bd:63:58:51:cc:4b:43:42:13:d4:58:9f:8b:
04:16:87:08:09:c7:61:69:0f:ee:35:3c:d4:0e:c2:dc:69:01:
48:37:e0:d9:81:d0:a1:07:25:a9:b3:09:14:56:59:87:5d:66:
9f:e0:8d:1d:76:a4:1d:44:27:20:bf:91:56:93:ca:c9:d3:01:
53:c1:0a:5e:4f:6d:e0:3d:0d:7d:8a:60:91:1b:50:51:2c:95:
c1:38:ee:10:ab:34:0f:58:ca:b3:07:a5:03:8c:bd:8a:a2:5d:
9e:de:1e:8e:6a:0d:72:5f:d5:9b:e8:fc:26:d6:91:57:66:22:
c8:db:63:ba:dc:27:d7:0a:c8:cc:20:0c:cb:c3:b2:04:78:7e:
9b:32:63:fa:83:02:9f:69:75:a0:db:29:85:2e:f8:f1:15:f7:
50:5a:e0:9e:69:5e:e0:38:96:65:1c:2f:93:49:01:b4:2c:c7:
fc:99:da:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:55:56 2025 by rpki-client