Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
File: nz7CHhDzZG5NwOI_X37ERQFWDeM.mft (raw, json)
Hash identifier: NAid6I+Z6wNGZa2SBh8R4hqrLvNs7IBOmHwp686QQuU=
Subject key identifier: 98:84:F0:21:60:FF:C7:1A:98:04:2C:1C:3F:A5:2D:FD:EA:2B:07:B1
Authority key identifier: 9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3
Certificate issuer: /CN=9f3ec21e10f3646e4dc0e23f5f7ec44501560de3
Certificate serial: 01978C9189985E8B73618F88EADBF6843652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
Manifest number: 056E
Signing time: Fri 20 Jun 2025 09:00:37 +0000
Manifest this update: Fri 20 Jun 2025 09:00:37 +0000
Manifest next update: Sat 21 Jun 2025 09:00:37 +0000
Files and hashes: 1: nz7CHhDzZG5NwOI_X37ERQFWDeM.crl (hash: rn6oDWyb/ojZWw9gGsoRorhzLPngjuP67+CRAjmrcm4=)
2: rj7cMvisc5sEsNUl1EQ8tKzz6C8.roa (hash: 6mpsbNewWQwOLcJiFmFyeCARGSCjU8+BOm6oNSA/kho=)
3: ymi9yVyZH-4QjFqx4TNJYTh4zAw.roa (hash: BjRl81ZbEIDdTp592nI0/wEPMbPN+bb2781H4ezqZJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 04:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:91:89:98:5e:8b:73:61:8f:88:ea:db:f6:84:36:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3ec21e10f3646e4dc0e23f5f7ec44501560de3
Validity
Not Before: Jun 20 09:00:37 2025 GMT
Not After : Jun 21 09:00:37 2025 GMT
Subject: CN=9884f02160ffc71a98042c1c3fa52dfdea2b07b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a4:95:82:fc:e4:e1:a2:e5:ac:e5:6c:c4:82:
db:30:71:57:53:69:21:8a:d2:38:7b:c8:d0:48:02:
22:2f:49:22:9b:ab:fa:8e:ed:52:f6:0c:40:ad:d8:
bb:49:9e:88:7c:0e:9b:de:7b:85:6a:53:96:a3:06:
59:57:54:2c:3f:66:b5:32:1e:7c:7f:36:f5:b6:22:
a5:11:a9:d6:fb:d4:25:f5:78:94:a6:b3:00:15:17:
72:73:2e:a5:a6:aa:3f:0c:60:91:a9:53:c3:3c:6b:
fc:d1:86:35:9e:61:82:52:dd:d4:5c:78:22:f3:16:
a5:a3:a4:52:45:75:e8:09:33:20:ee:eb:22:7c:2b:
f3:ad:57:b2:d4:b4:17:ab:d0:33:03:d9:c8:51:c8:
29:04:48:40:a5:9e:c2:77:4b:1b:84:7d:cc:6f:e6:
52:89:bb:20:f3:46:63:40:d2:fd:4f:d8:8d:32:0b:
aa:e6:4b:7d:ab:29:10:91:a9:45:5a:69:aa:dc:2f:
11:41:3b:98:55:8b:52:ff:ee:27:78:55:81:6b:79:
fe:7b:72:17:e1:18:c4:38:47:35:04:c6:a3:5a:ba:
01:16:77:5c:ae:c7:bc:77:8d:ca:51:3d:a0:f7:c2:
43:4b:c4:51:46:36:fc:af:91:04:d7:ab:1e:af:48:
84:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:84:F0:21:60:FF:C7:1A:98:04:2C:1C:3F:A5:2D:FD:EA:2B:07:B1
X509v3 Authority Key Identifier:
keyid:9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:5b:3d:46:fd:dd:aa:ce:4e:49:6b:09:fd:ec:eb:85:e4:95:
8a:25:ca:ee:7c:b6:a8:d4:76:86:27:02:10:f5:2b:2c:4e:75:
01:e0:98:5d:69:52:09:9f:f9:92:5e:02:91:58:3b:a8:9d:d7:
a6:c8:bc:2d:f5:4e:e7:0e:80:46:78:30:82:3f:91:45:ea:3b:
6c:9a:f0:d9:df:c5:fe:9f:68:f1:5c:4d:f4:96:88:74:4e:ab:
5b:fe:29:83:72:46:14:65:f3:66:41:49:67:59:17:89:6e:53:
1d:3f:c4:9f:91:c4:0a:19:a1:73:76:d7:ed:e4:87:43:d7:aa:
01:e6:d6:b9:ac:a8:dc:19:76:f4:cc:d5:d1:74:e1:c4:0b:ff:
9b:58:3f:70:51:7f:f9:5d:90:de:85:fd:ee:c9:23:55:b5:3f:
47:5e:90:26:8e:f3:96:82:4c:d9:a8:02:52:49:6a:25:84:8a:
dd:ca:35:ea:03:57:43:ab:f6:d7:a4:7a:a6:35:8d:9d:93:5d:
f1:03:b7:15:99:51:ee:5f:49:38:4a:60:12:ff:41:87:9f:28:
97:ea:7d:6c:e0:cc:a2:43:97:97:62:9d:f6:0f:e5:e8:13:c7:
02:49:5e:d1:d8:87:55:f8:c3:a0:cc:d0:7e:11:75:69:a9:6c:
51:e2:72:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 14:15:01 2025 by rpki-client