Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
File: _nzo-_uEec-5drRDzDx84vcDq34.mft (raw, json)
Hash identifier: CdiUwiKwSi4ZM96pPY2FztAHNZh5mhlujDdEQJlugZI=
Subject key identifier: 5A:66:41:72:30:B5:18:4F:F5:C3:58:94:B2:1C:51:78:B6:4B:FD:C1
Authority key identifier: FE:7C:E8:FB:FB:84:79:CF:B9:76:B4:43:CC:3C:7C:E2:F7:03:AB:7E
Certificate issuer: /CN=fe7ce8fbfb8479cfb976b443cc3c7ce2f703ab7e
Certificate serial: 0198816869C90A1D71CB95F93354BADDB258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
Manifest number: 0CFF
Signing time: Wed 06 Aug 2025 22:02:40 +0000
Manifest this update: Wed 06 Aug 2025 22:02:40 +0000
Manifest next update: Thu 07 Aug 2025 22:02:40 +0000
Files and hashes: 1: _nzo-_uEec-5drRDzDx84vcDq34.crl (hash: WtaR4aPiGgFB8StIcEoc49o94fMQuYbfIVBtY/Kp29E=)
2: beiUjzIIFq8lUZEsjU5aHKjNnJA.roa (hash: mFm580c3qaH3SmCWZbvTiuZ0e3oedku3mVQP4lTuq5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:69:c9:0a:1d:71:cb:95:f9:33:54:ba:dd:b2:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe7ce8fbfb8479cfb976b443cc3c7ce2f703ab7e
Validity
Not Before: Aug 6 22:02:40 2025 GMT
Not After : Aug 7 22:02:40 2025 GMT
Subject: CN=5a66417230b5184ff5c35894b21c5178b64bfdc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:36:30:43:8a:37:67:a1:16:72:6c:2f:6b:d0:
39:ba:e1:14:0c:dc:e6:a7:fd:d8:24:17:2e:1a:15:
fa:48:13:c8:b5:ba:e8:74:b4:c6:74:75:2b:ba:ff:
1d:7e:19:9f:04:b6:61:eb:3f:b4:6e:8b:c9:d3:a5:
43:3f:92:50:a8:43:dc:a8:4d:6b:49:d2:e9:3b:18:
31:c7:7e:15:6b:c6:7a:75:00:be:fb:40:43:90:86:
b8:1a:be:ac:49:e9:9b:45:7a:52:b2:c8:29:bf:35:
03:7e:a2:db:0f:f3:51:ee:32:48:50:e5:f5:0d:3e:
63:af:ca:b3:d0:14:7c:5f:3e:4f:ed:40:20:29:59:
f8:4e:4a:b6:09:f7:a2:1f:2c:01:c7:91:e2:3f:6a:
34:45:91:74:8d:86:f9:3b:55:55:c2:59:78:8b:08:
f7:1a:91:75:3c:76:b0:0f:10:42:0b:d6:42:9f:02:
bc:fe:0d:04:50:24:0c:a2:7a:93:a2:67:50:4a:ef:
b8:ed:c3:5e:8d:a6:b1:a8:e8:e0:d3:2d:e8:b2:58:
22:3f:27:13:0e:b8:05:8c:96:ee:1f:1f:61:5b:6d:
bb:c5:6c:22:56:9b:e9:ee:83:9b:ac:78:5b:46:47:
6a:c6:d5:ec:3a:f8:47:11:0a:15:d9:68:6c:7d:83:
43:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:66:41:72:30:B5:18:4F:F5:C3:58:94:B2:1C:51:78:B6:4B:FD:C1
X509v3 Authority Key Identifier:
keyid:FE:7C:E8:FB:FB:84:79:CF:B9:76:B4:43:CC:3C:7C:E2:F7:03:AB:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nzo-_uEec-5drRDzDx84vcDq34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/927638-fd47-4e56-bb9e-d7920ae44920/1/_nzo-_uEec-5drRDzDx84vcDq34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:27:ce:08:16:af:3f:5d:a3:c0:b7:5e:6f:84:5d:c2:aa:40:
0c:29:84:b9:ef:09:2e:32:c4:15:d0:fe:38:35:b9:ca:38:73:
0d:4c:ed:a5:46:d3:6a:da:84:fb:0e:83:b8:4e:ec:89:07:5c:
25:b1:4f:c7:d5:d0:7f:f9:fd:ba:7c:40:35:dc:4e:6d:24:0b:
45:37:27:ed:45:f9:01:f2:9c:47:3d:bf:66:e2:22:25:06:21:
c2:9f:39:ba:6a:ab:b4:24:fb:22:23:97:a3:f1:0c:21:ab:6a:
22:ce:21:96:5b:9b:89:c6:50:c4:d2:b1:5e:29:e4:86:bc:ca:
99:e6:74:62:f1:bf:cb:a3:73:b5:cb:ff:33:6a:b3:4e:0e:e5:
96:70:43:44:e8:77:68:6f:a4:f1:0c:19:b5:68:fa:9d:68:a5:
79:08:ba:5d:41:ec:ea:ee:94:47:74:b0:31:6a:b5:36:74:5e:
9a:59:42:70:7a:6b:e4:a2:ef:29:34:d7:66:21:cb:fc:63:92:
f9:52:b9:d4:97:e3:b2:21:a3:82:e5:75:80:94:47:f3:76:68:
de:27:b8:cb:4b:67:a9:09:c5:cf:21:3e:78:e1:24:9a:db:84:
cc:cc:e1:03:55:11:81:72:73:a7:5c:c7:4f:81:3f:49:f3:c3:
88:ee:b2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:34:10 2025 by rpki-client