Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft
File: nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft (raw, json)
Hash identifier: uDuPjl992ktwCyvUFmZnwGD0QM6P/hgBDuAr33PA4/o=
Subject key identifier: 03:FF:34:1B:0C:39:0E:E7:2D:36:28:64:BE:8F:46:A1:24:B4:86:0E
Authority key identifier: 9F:36:40:DA:7F:1B:C2:3E:D4:59:9F:84:A0:85:3C:83:99:F3:5D:72
Certificate issuer: /CN=9f3640da7f1bc23ed4599f84a0853c8399f35d72
Certificate serial: 01988B0EAF23ABB76AE74C587DA0B048B352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft
Manifest number: 076A
Signing time: Fri 08 Aug 2025 19:00:51 +0000
Manifest this update: Fri 08 Aug 2025 19:00:51 +0000
Manifest next update: Sat 09 Aug 2025 19:00:51 +0000
Files and hashes: 1: BlYqXPvciPfdyJ-GQUZOsP4jpLI.roa (hash: LmatIhZjxo/kiezrlbpjhiTczB9qo8t5QvMaWwqWJt0=)
2: nzZA2n8bwj7UWZ-EoIU8g5nzXXI.crl (hash: L31yziD0UoWDCxiuK2ZIIRZZ4TH4bmFYhXtpI9Mo39s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0e:af:23:ab:b7:6a:e7:4c:58:7d:a0:b0:48:b3:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3640da7f1bc23ed4599f84a0853c8399f35d72
Validity
Not Before: Aug 8 19:00:51 2025 GMT
Not After : Aug 9 19:00:51 2025 GMT
Subject: CN=03ff341b0c390ee72d362864be8f46a124b4860e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:36:02:9a:8a:31:f7:b9:32:4a:9a:be:de:cc:
c7:47:6a:02:06:c2:17:e7:a1:3d:e9:a8:7c:fc:1f:
b5:69:b1:94:cf:c8:6c:3f:c6:dc:d4:c3:cd:42:03:
e4:49:e2:a3:e3:9c:e2:13:f3:7f:18:39:40:fe:68:
7e:01:8b:fe:51:c0:5c:88:49:df:6f:0c:63:ac:11:
05:b7:01:80:fb:8d:3f:a0:e0:be:9f:11:bd:8a:57:
a6:53:b5:ee:b0:68:79:70:4d:c5:c2:b4:d2:2c:55:
a6:ef:0b:9a:c0:85:a7:ae:53:54:90:21:02:f2:57:
c2:69:79:f6:ae:8f:36:a3:9a:1f:1f:d8:c2:eb:12:
f6:52:5a:80:60:b0:23:03:75:44:d6:58:e0:33:c1:
71:63:c6:81:a3:88:61:8f:ce:11:62:1b:fc:0d:78:
46:6e:77:51:f0:db:8c:4a:8f:b1:27:cc:56:48:3b:
42:35:ef:0e:2c:2e:69:9a:99:12:52:7b:3f:7b:47:
3e:b2:7d:35:3d:33:27:0d:75:fe:d0:8c:5b:4e:9e:
3e:7f:37:5e:f5:b3:1d:ce:25:ff:6a:5f:35:90:e3:
0f:8a:d4:72:d8:11:dd:59:92:1f:34:9d:d6:81:8d:
ea:e5:72:4c:b2:d4:24:26:dd:ab:d0:f5:cd:16:3a:
b9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FF:34:1B:0C:39:0E:E7:2D:36:28:64:BE:8F:46:A1:24:B4:86:0E
X509v3 Authority Key Identifier:
keyid:9F:36:40:DA:7F:1B:C2:3E:D4:59:9F:84:A0:85:3C:83:99:F3:5D:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d3:fa:36:03:5a:24:6d:d3:88:8a:32:e2:20:c0:b8:42:88:
25:c3:c3:c4:74:31:10:9c:54:6b:59:47:51:6e:84:c0:4a:62:
8d:5b:d1:16:71:2e:84:bd:7f:c5:17:dc:a5:a5:4d:d4:3e:dc:
e9:97:cf:42:0b:bc:b1:42:7f:b8:c5:db:a7:8c:91:1e:d0:08:
51:09:d1:ae:f6:be:d8:4b:73:f4:8f:45:c8:43:d9:17:5f:4b:
77:df:a9:45:e1:57:18:a0:2d:2c:6b:1f:fe:29:1b:0a:2b:6b:
f0:42:94:9c:b2:e8:2e:3e:6a:9e:de:19:fb:8f:f0:df:83:67:
03:d3:6e:1a:a7:cc:e7:51:d1:8f:ff:b2:b6:34:8c:db:06:7c:
72:ab:b1:22:f3:84:3a:cd:ea:5d:99:ee:b8:e8:c9:ca:ee:d8:
dc:16:81:96:5d:19:54:c2:50:fe:e7:58:37:71:20:7f:cb:f4:
40:ca:cf:da:5e:a6:c4:85:98:ad:d5:90:93:bf:e5:18:1b:61:
b7:90:05:d8:6f:dc:66:5c:c3:dc:db:cb:44:ad:fa:ea:50:77:
a3:83:39:cb:80:7d:6f:34:39:33:0b:6b:37:0c:99:4f:f5:12:
18:55:43:8b:bb:5c:76:29:5c:b1:93:21:12:b1:48:8e:9a:eb:
43:81:96:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:54:37 2025 by rpki-client