Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
File: NZ5FeU8Bkp_awnLCYms-guvJxd8.mft (raw, json)
Hash identifier: QCkfLlfzSp57CTAM8sDpERS4meoTCaITd5offzPVh9w=
Subject key identifier: 7C:BB:72:C9:0E:90:0D:B4:16:DD:2B:EA:88:11:17:0A:90:07:64:AE
Authority key identifier: 35:9E:45:79:4F:01:92:9F:DA:C2:72:C2:62:6B:3E:82:EB:C9:C5:DF
Certificate issuer: /CN=359e45794f01929fdac272c2626b3e82ebc9c5df
Certificate serial: 01988EEB5F1EB54DCC56AEC8CF3BE6F25950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
Manifest number: 1621
Signing time: Sat 09 Aug 2025 13:00:46 +0000
Manifest this update: Sat 09 Aug 2025 13:00:46 +0000
Manifest next update: Sun 10 Aug 2025 13:00:46 +0000
Files and hashes: 1: NZ5FeU8Bkp_awnLCYms-guvJxd8.crl (hash: btaZB+0K3kEHbU+BiaH1yc70o8lsNdEsAbfNOb82ISs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:eb:5f:1e:b5:4d:cc:56:ae:c8:cf:3b:e6:f2:59:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359e45794f01929fdac272c2626b3e82ebc9c5df
Validity
Not Before: Aug 9 13:00:46 2025 GMT
Not After : Aug 10 13:00:46 2025 GMT
Subject: CN=7cbb72c90e900db416dd2bea8811170a900764ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:22:fd:69:ea:5c:68:09:43:74:a5:e0:3c:8d:
86:58:a4:3a:12:a7:3c:78:e5:03:be:52:98:2b:4b:
52:03:18:d9:fa:76:25:4e:1e:b3:41:a4:b5:20:66:
ff:fe:c6:56:1f:1d:ca:8c:bf:13:f3:6b:8e:9f:9f:
68:a5:21:98:ff:47:54:ff:f2:fd:3a:51:a4:41:46:
6f:04:a9:84:26:29:be:40:69:dd:d1:e2:ac:dc:33:
48:3f:68:80:1b:f7:cc:57:3d:3a:cc:86:8a:9e:8c:
d4:c3:2c:ec:49:e9:10:66:07:16:23:7f:f3:09:15:
76:b0:48:a5:15:ce:6d:4a:a0:b9:f3:15:1e:03:52:
89:12:56:04:72:3f:65:55:9d:70:62:e2:51:da:f4:
c3:14:01:72:f0:5d:38:52:8f:20:98:b9:07:ad:7e:
06:77:a2:bc:c1:be:39:47:a7:4f:22:51:1c:56:f0:
4b:d0:0f:31:59:d8:bb:5f:a7:3a:15:b0:66:4a:a9:
56:88:fd:78:bc:52:a5:42:0d:ef:08:7b:84:7b:e8:
31:f0:7e:ed:2d:38:69:58:ea:b4:b0:62:66:b0:e6:
0c:a9:39:4c:66:7b:f9:d3:6e:d5:93:05:2a:84:cd:
e2:66:23:92:84:d0:8d:18:12:6b:81:a4:5e:4a:5a:
91:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BB:72:C9:0E:90:0D:B4:16:DD:2B:EA:88:11:17:0A:90:07:64:AE
X509v3 Authority Key Identifier:
keyid:35:9E:45:79:4F:01:92:9F:DA:C2:72:C2:62:6B:3E:82:EB:C9:C5:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ5FeU8Bkp_awnLCYms-guvJxd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/1c000d-7604-444b-b4e0-b844ce1c6238/1/NZ5FeU8Bkp_awnLCYms-guvJxd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:5b:d6:6a:7b:12:4e:2a:c8:99:8c:a5:bd:65:9b:02:96:72:
d0:e1:ba:39:16:36:6b:d2:1f:c6:80:a9:a3:9e:e9:3f:13:6a:
8e:76:85:ec:39:69:c5:08:84:ff:64:ea:d8:61:e7:06:a6:1a:
87:e2:70:f4:d5:c5:cd:14:bd:c1:fe:a9:d2:8f:4c:38:e3:02:
26:69:c3:47:94:90:95:bd:63:c0:a8:3b:f3:1d:e6:60:98:fc:
3f:ae:1d:88:31:ed:00:18:d2:d3:2c:b0:fa:59:64:7d:54:c9:
c8:63:7c:a8:48:30:a2:fe:e7:1b:9c:0b:70:46:fe:49:e8:8e:
af:4e:f6:f6:30:2f:2e:0a:81:88:f7:89:8a:26:26:cb:25:6d:
8d:93:9c:7f:a5:01:76:00:b0:e0:b5:9e:40:cf:b0:b6:aa:4e:
15:61:a8:b9:92:c0:3f:36:d2:49:59:db:8d:2c:f9:73:50:52:
b4:f3:73:67:72:d7:d9:b1:d0:83:4d:1c:2a:13:b4:7d:10:1f:
b8:05:0e:a6:90:9a:54:f0:1b:17:87:e0:8a:db:0d:ec:31:2e:
27:09:67:6c:da:94:24:3a:3a:a8:00:eb:85:ff:5b:ed:e8:ac:
17:14:bf:c8:4e:31:c7:a2:61:12:27:b2:2b:3a:ee:fc:02:e5:
2b:8e:f9:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiO618etU3MVq7Izzvm8llQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1OWU0NTc5NGYwMTkyOWZkYWMyNzJjMjYyNmIzZTgyZWJj
OWM1ZGYwHhcNMjUwODA5MTMwMDQ2WhcNMjUwODEwMTMwMDQ2WjAzMTEwLwYDVQQD
Eyg3Y2JiNzJjOTBlOTAwZGI0MTZkZDJiZWE4ODExMTcwYTkwMDc2NGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviL9aepcaAlDdKXgPI2GWKQ6Eqc8
eOUDvlKYK0tSAxjZ+nYlTh6zQaS1IGb//sZWHx3KjL8T82uOn59opSGY/0dU//L9
OlGkQUZvBKmEJim+QGnd0eKs3DNIP2iAG/fMVz06zIaKnozUwyzsSekQZgcWI3/z
CRV2sEilFc5tSqC58xUeA1KJElYEcj9lVZ1wYuJR2vTDFAFy8F04Uo8gmLkHrX4G
d6K8wb45R6dPIlEcVvBL0A8xWdi7X6c6FbBmSqlWiP14vFKlQg3vCHuEe+gx8H7t
LThpWOq0sGJmsOYMqTlMZnv5027VkwUqhM3iZiOShNCNGBJrgaReSlqRWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHy7cskOkA20Ft0r6ogRFwqQB2SuMB8GA1UdIwQY
MBaAFDWeRXlPAZKf2sJywmJrPoLrycXfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlo1RmVVOEJrcF9hd25MQ1ltcy1ndXZKeGQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8xYzAwMGQtNzYwNC00NDRiLWI0ZTAt
Yjg0NGNlMWM2MjM4LzEvTlo1RmVVOEJrcF9hd25MQ1ltcy1ndXZKeGQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8xYzAwMGQtNzYwNC00NDRiLWI0ZTAtYjg0NGNlMWM2MjM4
LzEvTlo1RmVVOEJrcF9hd25MQ1ltcy1ndXZKeGQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAblvWansS
TirImYylvWWbApZy0OG6ORY2a9IfxoCpo57pPxNqjnaF7DlpxQiE/2Tq2GHnBqYa
h+Jw9NXFzRS9wf6p0o9MOOMCJmnDR5SQlb1jwKg78x3mYJj8P64diDHtABjS0yyw
+llkfVTJyGN8qEgwov7nG5wLcEb+SeiOr0729jAvLgqBiPeJiiYmyyVtjZOcf6UB
dgCw4LWeQM+wtqpOFWGouZLAPzbSSVnbjSz5c1BStPNzZ3LX2bHQg00cKhO0fRAf
uAUOppCaVPAbF4fgitsN7DEuJwlnbNqUJDo6qADrhf9b7eisFxS/yE4xx6JhEiey
Kzru/ALlK4750w==
-----END CERTIFICATE-----
Generated at Sat Aug 9 20:47:20 2025 by rpki-client