Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.mft
File: Nz3Mauaq2IhZH7d75OqWDzU1__Q.mft (raw, json)
Hash identifier: MaYdzGcXxZogHa3P6jueRdt2HCKvyeZilGkRbB4+MTU=
Subject key identifier: 98:BA:F9:2D:29:DB:37:B5:A3:7D:27:35:74:D5:E1:99:DD:AD:DF:F7
Authority key identifier: 37:3D:CC:6A:E6:AA:D8:88:59:1F:B7:7B:E4:EA:96:0F:35:35:FF:F4
Certificate issuer: /CN=373dcc6ae6aad888591fb77be4ea960f3535fff4
Certificate serial: 0197711A3A4A68136F2D537FEAF121D67E89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nz3Mauaq2IhZH7d75OqWDzU1__Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.mft
Manifest number: 0BF5
Signing time: Sun 15 Jun 2025 01:00:33 +0000
Manifest this update: Sun 15 Jun 2025 01:00:33 +0000
Manifest next update: Mon 16 Jun 2025 01:00:33 +0000
Files and hashes: 1: Nz3Mauaq2IhZH7d75OqWDzU1__Q.crl (hash: vpawpqDlfm+Aa5YPq7rItCG17++KJKFNa0lNMS/pBRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nz3Mauaq2IhZH7d75OqWDzU1__Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:3a:4a:68:13:6f:2d:53:7f:ea:f1:21:d6:7e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=373dcc6ae6aad888591fb77be4ea960f3535fff4
Validity
Not Before: Jun 15 01:00:33 2025 GMT
Not After : Jun 16 01:00:33 2025 GMT
Subject: CN=98baf92d29db37b5a37d273574d5e199ddaddff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:72:a8:18:74:4f:fb:02:21:48:bc:1f:f4:e9:
41:ea:fd:c3:0a:48:62:21:ff:fc:da:cd:5a:e1:7c:
bf:c3:c4:82:ad:5b:9d:b7:78:a2:e2:7a:0b:09:ff:
a0:ec:87:3c:0c:a4:dd:6f:7c:8f:f7:8f:3a:13:eb:
d1:a6:68:1b:9e:da:5c:5f:4b:16:7c:55:77:9c:9d:
7d:de:28:85:95:8c:43:f8:70:12:0d:91:c8:46:8b:
68:6d:e2:a8:9b:f4:52:da:b0:be:cd:0a:6d:7f:f6:
db:45:55:fc:8c:3c:4a:34:f9:4d:9d:c7:c6:53:be:
dc:ef:ad:da:8e:59:df:58:fb:17:2e:c4:9c:06:29:
e5:7b:05:05:d9:84:8c:42:0d:51:70:ed:53:57:68:
bc:94:e0:35:22:ff:0b:ea:98:7d:64:5a:79:bc:ba:
7a:af:20:b4:5c:62:6a:e8:c9:4c:0a:14:cf:c6:c8:
19:2a:4b:a4:c2:77:17:a9:51:2a:09:bb:9c:92:01:
a4:d4:77:4f:6d:da:94:6d:62:72:22:41:0c:38:71:
fd:e3:e2:14:8d:49:2d:4b:7d:fb:ce:79:f3:20:de:
e9:5a:72:b3:8d:4e:4b:d1:8b:99:28:6a:9c:b0:6c:
fd:2b:dd:d2:9e:2a:52:d3:f6:81:8e:c8:dd:b9:06:
33:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BA:F9:2D:29:DB:37:B5:A3:7D:27:35:74:D5:E1:99:DD:AD:DF:F7
X509v3 Authority Key Identifier:
keyid:37:3D:CC:6A:E6:AA:D8:88:59:1F:B7:7B:E4:EA:96:0F:35:35:FF:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nz3Mauaq2IhZH7d75OqWDzU1__Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/44890f-d744-4b8f-a5f4-229a70a00384/1/Nz3Mauaq2IhZH7d75OqWDzU1__Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:8d:6c:8e:82:f5:00:3f:c5:97:32:84:1d:0d:59:9b:20:52:
60:4b:68:10:e2:96:1d:76:87:6d:35:ba:61:db:ca:b9:75:fb:
6d:5c:e1:ed:65:27:34:25:93:d5:28:cd:cb:2f:8b:a3:81:b7:
d4:a1:f6:99:95:16:e9:bb:9c:0d:5b:17:1b:48:58:3f:07:4f:
47:d3:2a:0a:8c:d0:6a:19:51:58:e4:6b:e2:db:80:66:5b:fd:
01:9d:26:3d:da:4e:b1:08:ae:8d:2f:b0:9a:94:ab:72:ee:68:
0f:3a:0f:2d:ba:fd:5b:63:9c:4a:56:db:49:9e:34:61:f7:9b:
9e:91:83:0d:09:a1:f3:e9:db:c6:17:b7:9b:dc:74:46:e2:4b:
0a:35:9b:44:96:cd:6e:ce:94:e2:a7:b9:ba:6f:3e:bc:c7:ee:
c6:e3:51:db:54:71:54:f5:12:f4:8b:97:4a:84:1d:2b:9c:16:
2b:62:ad:a3:15:ee:67:5f:0f:74:54:30:dd:c3:6f:02:0a:51:
bb:ef:66:a2:d9:17:65:4d:4c:74:39:ca:f7:40:2c:e9:59:c0:
fd:42:67:70:c3:64:1c:83:4b:30:cb:b0:8f:6b:1f:f1:0c:82:
7a:a4:b3:65:fb:1c:61:91:8b:62:78:16:15:e5:52:c5:af:c1:
14:b3:63:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:06:52 2025 by rpki-client