Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.mft
File: Nz3Mauaq2IhZH7d75OqWDzU1__Q.mft (raw, json)
Hash identifier: Vs9zlhM1frdE0siwwTW7h55ZE0qaZR99eimL9xC2puY=
Subject key identifier: 9E:D9:75:86:FA:FA:5C:B4:21:79:A7:68:A9:90:74:DD:EB:8F:D7:BE
Authority key identifier: 37:3D:CC:6A:E6:AA:D8:88:59:1F:B7:7B:E4:EA:96:0F:35:35:FF:F4
Certificate issuer: /CN=373dcc6ae6aad888591fb77be4ea960f3535fff4
Certificate serial: 019873E1C77D9BA35D8AFE1709FF8269767A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nz3Mauaq2IhZH7d75OqWDzU1__Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.mft
Manifest number: 0C7B
Signing time: Mon 04 Aug 2025 07:00:33 +0000
Manifest this update: Mon 04 Aug 2025 07:00:33 +0000
Manifest next update: Tue 05 Aug 2025 07:00:33 +0000
Files and hashes: 1: Nz3Mauaq2IhZH7d75OqWDzU1__Q.crl (hash: z+OnYvFTViDgWO3eMahytWHIUkUbcRcsv8dRTbm9lFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nz3Mauaq2IhZH7d75OqWDzU1__Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:c7:7d:9b:a3:5d:8a:fe:17:09:ff:82:69:76:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=373dcc6ae6aad888591fb77be4ea960f3535fff4
Validity
Not Before: Aug 4 07:00:33 2025 GMT
Not After : Aug 5 07:00:33 2025 GMT
Subject: CN=9ed97586fafa5cb42179a768a99074ddeb8fd7be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f8:04:e0:a7:73:bc:76:e1:e5:90:82:7b:b7:
b9:4e:23:78:1b:34:31:77:5f:32:07:61:34:28:f0:
05:dc:cd:6f:e6:85:24:f4:5a:b3:30:2b:15:2f:8b:
01:43:1a:35:9b:46:70:c0:93:23:fd:af:7d:ad:01:
3a:e0:23:49:67:18:b6:12:13:3d:33:fa:94:9b:01:
82:5c:c9:9c:72:df:a2:75:09:95:70:87:41:b3:46:
95:68:94:73:ae:c2:5a:30:70:b0:b9:93:0e:bf:8d:
15:e5:cc:d9:72:d8:a7:bd:e7:ee:ae:e3:c8:8b:88:
6e:fc:ef:f9:46:e8:89:e9:f2:11:1c:17:db:35:3b:
79:e2:da:a4:12:7c:71:cb:56:c6:52:9c:f5:38:a4:
c7:6f:e9:06:57:01:48:4c:9b:b0:4d:5a:ba:33:9f:
32:97:8a:c9:db:53:11:4c:40:55:c6:b7:94:2e:00:
53:8a:9c:be:9f:18:38:11:f9:e8:1b:e4:2a:82:7e:
09:24:57:2d:14:e1:a8:ba:09:fd:af:8c:d2:3c:e4:
f0:e0:00:23:aa:df:c3:f2:8c:a3:58:d0:9d:a4:67:
25:d1:96:b1:51:b5:9e:d7:c3:a4:aa:f0:2e:e6:05:
ab:61:b5:31:68:1f:e8:8f:73:b4:0f:92:0c:6a:14:
aa:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D9:75:86:FA:FA:5C:B4:21:79:A7:68:A9:90:74:DD:EB:8F:D7:BE
X509v3 Authority Key Identifier:
keyid:37:3D:CC:6A:E6:AA:D8:88:59:1F:B7:7B:E4:EA:96:0F:35:35:FF:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nz3Mauaq2IhZH7d75OqWDzU1__Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:7b:4c:ec:be:b5:61:16:eb:25:96:ea:ef:06:a8:0c:71:f8:
ae:f7:3a:d3:44:26:c6:84:59:34:ca:a4:67:ab:6b:c2:f7:4b:
7b:d8:c1:ed:0c:61:35:7c:ea:83:3b:a1:35:0c:70:e1:55:46:
ab:6b:b0:f4:bb:af:e3:4a:fe:95:92:19:6e:3b:c2:da:f0:1d:
e3:b0:83:17:37:8e:2b:43:5d:5f:3e:5f:6d:5d:39:15:ca:07:
45:26:61:13:5c:da:3d:23:f3:30:ea:ff:ab:b0:11:12:ba:5c:
f9:74:76:47:fe:1a:ed:1e:7d:68:5b:6b:c3:42:05:53:57:12:
c3:22:53:5d:39:a3:80:27:f6:5f:87:c5:0e:f0:27:a7:04:f9:
15:74:91:a6:e7:1e:83:b8:66:ff:39:51:16:a7:85:51:e2:ae:
a5:53:5d:ff:09:d5:d1:8e:fe:9f:de:7d:52:e5:ec:18:4e:fa:
d0:4f:c0:0f:b0:92:48:08:0a:a1:58:31:4b:c7:3b:fb:71:24:
68:0c:79:3e:98:f5:cd:fc:c8:cd:59:27:35:5e:45:2c:84:7e:
8b:24:f4:fa:5c:43:98:34:52:ec:b9:e6:16:f5:c5:6b:2d:2c:
86:41:91:2b:da:e6:ab:e7:85:d4:4c:43:67:71:57:9b:c0:3f:
73:f2:a0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:20:22 2025 by rpki-client