Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
File: nz7CHhDzZG5NwOI_X37ERQFWDeM.mft (raw, json)
Hash identifier: vYmcBBn/HPmszNcYp4j9Ei3BRuj7QE6sVGYuWLAj7MI=
Subject key identifier: 1F:AC:89:65:00:A2:49:30:46:74:60:B4:D8:A7:35:B2:67:E6:12:66
Authority key identifier: 9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3
Certificate issuer: /CN=9f3ec21e10f3646e4dc0e23f5f7ec44501560de3
Certificate serial: 01989147FBDA0DA0799E41D92189FF5C7261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
Manifest number: 05F5
Signing time: Sun 10 Aug 2025 00:01:10 +0000
Manifest this update: Sun 10 Aug 2025 00:01:10 +0000
Manifest next update: Mon 11 Aug 2025 00:01:10 +0000
Files and hashes: 1: nz7CHhDzZG5NwOI_X37ERQFWDeM.crl (hash: lrwQNw+F6pLqkFRTA35e+mdRGBl5Y94aUBhy8Ah9lKs=)
2: rj7cMvisc5sEsNUl1EQ8tKzz6C8.roa (hash: 6mpsbNewWQwOLcJiFmFyeCARGSCjU8+BOm6oNSA/kho=)
3: ymi9yVyZH-4QjFqx4TNJYTh4zAw.roa (hash: BjRl81ZbEIDdTp592nI0/wEPMbPN+bb2781H4ezqZJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:47:fb:da:0d:a0:79:9e:41:d9:21:89:ff:5c:72:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3ec21e10f3646e4dc0e23f5f7ec44501560de3
Validity
Not Before: Aug 10 00:01:10 2025 GMT
Not After : Aug 11 00:01:10 2025 GMT
Subject: CN=1fac896500a24930467460b4d8a735b267e61266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a5:8e:e0:e7:6c:3b:a0:80:78:7f:12:dd:3c:
30:8f:35:de:52:95:46:2a:5e:4d:76:11:5a:d5:77:
4b:05:6d:f2:9e:48:6e:d8:9d:01:42:36:db:3e:71:
84:2c:fb:73:96:73:b3:e0:62:cc:33:48:0d:b9:1e:
30:ea:d3:0d:62:31:2b:38:e2:e0:c2:81:df:71:0b:
78:48:5d:1d:85:c9:1c:89:2e:30:4f:9d:b6:8e:15:
3f:e9:a9:56:60:5d:58:5d:ba:bf:db:fe:22:a3:12:
6c:81:4e:6c:d2:36:c3:df:51:ce:4c:4a:44:13:0f:
d6:b2:14:61:96:d9:ff:b2:c2:8b:c2:30:0f:bc:1c:
07:4e:84:e1:6c:7d:da:35:01:a5:99:cd:94:86:07:
5c:95:aa:b6:0b:dd:29:90:ff:10:cd:da:a2:e4:b6:
1e:1e:37:8c:c7:9f:9d:20:39:0c:ea:d8:8c:2d:12:
25:7a:f9:fa:ce:4e:ee:78:26:2e:66:a6:97:41:3d:
bd:b9:3e:eb:ee:26:fe:c4:06:33:a0:66:7a:d8:2d:
a8:ba:b9:52:f3:38:70:1b:cd:64:6e:a9:5a:83:79:
cf:1e:04:d3:9b:99:5d:a2:a6:9d:f7:43:9c:89:45:
5d:e1:8e:a1:ec:8c:5d:3a:e3:9a:7d:ce:85:0b:27:
09:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AC:89:65:00:A2:49:30:46:74:60:B4:D8:A7:35:B2:67:E6:12:66
X509v3 Authority Key Identifier:
keyid:9F:3E:C2:1E:10:F3:64:6E:4D:C0:E2:3F:5F:7E:C4:45:01:56:0D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nz7CHhDzZG5NwOI_X37ERQFWDeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6bafe9-878b-46fd-a305-7ba25d5595fa/1/nz7CHhDzZG5NwOI_X37ERQFWDeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:52:a5:b2:b1:74:5f:b3:e2:b4:d6:7e:45:8c:e1:de:85:c9:
73:d0:27:1e:d8:ab:b7:ad:af:c6:b1:b5:fe:0a:9f:71:33:32:
96:80:e2:56:90:82:1e:4a:5b:e6:5e:35:e4:58:59:c3:ac:df:
25:ab:2e:21:b2:46:a1:d1:c3:21:80:b3:73:78:97:9d:eb:0a:
48:37:ce:a1:b7:d4:b7:5a:37:6d:3f:13:bb:ff:74:79:44:71:
7b:d5:7c:90:5c:0d:2b:76:0b:7e:3b:61:a2:0b:57:75:95:c6:
fd:aa:40:2c:4f:73:e4:2a:ae:23:98:60:7d:db:65:0c:a5:8f:
a3:33:71:3c:95:6f:0a:77:ce:8a:01:c6:fc:70:ee:93:5e:47:
9d:7b:33:47:dc:b8:5e:7d:70:36:1f:22:95:09:3b:64:d9:06:
8b:52:bf:6c:95:96:22:ea:52:b6:b7:87:33:97:3a:2c:d9:69:
39:5d:34:6f:20:0b:a9:1c:62:b2:6e:87:89:ba:f6:75:be:23:
07:b8:3a:d2:58:f9:8e:08:d3:c1:3b:6e:22:a7:0a:21:2b:6c:
76:20:4e:e3:72:e8:af:8e:fe:fe:ac:95:8d:e3:b8:16:5e:0f:
06:f8:46:65:53:13:43:68:ea:bd:4c:be:d5:bf:4b:77:b3:09:
e5:95:29:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:54:53 2025 by rpki-client