Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
File: RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft (raw, json)
Hash identifier: 1oe7LsAIeePYLMlxtsVIOBc4MgwP6ZH9KaMZ9eGWVi0=
Subject key identifier: 60:FA:22:06:8A:84:CA:6C:0C:76:6E:6A:A5:29:40:15:C5:EC:01:AF
Authority key identifier: 44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40
Certificate issuer: /CN=44d64dac03f1a57c1931667118048d82c43c5540
Certificate serial: 019777C104B146ED67A495FA221A84D29517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
Manifest number: 0C0F
Signing time: Mon 16 Jun 2025 08:00:27 +0000
Manifest this update: Mon 16 Jun 2025 08:00:27 +0000
Manifest next update: Tue 17 Jun 2025 08:00:27 +0000
Files and hashes: 1: RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl (hash: OGvVVoqdM/SN26PMB0sumre30c5qd3EePmwCkgXDezs=)
2: vPwQH1RvTV4M1J-vAZbjIjKDG4c.roa (hash: bhhfgUa9IkevuU6kgmPNLfOfpmJN6kMgsbrrhzr6WCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:c1:04:b1:46:ed:67:a4:95:fa:22:1a:84:d2:95:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d64dac03f1a57c1931667118048d82c43c5540
Validity
Not Before: Jun 16 08:00:27 2025 GMT
Not After : Jun 17 08:00:27 2025 GMT
Subject: CN=60fa22068a84ca6c0c766e6aa5294015c5ec01af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8f:84:b8:49:09:c3:57:f4:9f:9c:9f:a1:6f:
6b:f5:0d:8b:aa:23:1f:a6:d2:cf:2e:fd:7e:3f:78:
59:47:15:17:d0:fb:b9:03:f6:89:48:19:9f:c2:1a:
fe:15:60:89:2f:f2:fb:e4:80:0d:33:aa:ba:82:06:
d3:42:40:9c:c1:90:67:ff:a2:c5:d5:90:8f:4a:01:
0e:a8:83:f3:b1:3c:0a:34:99:5c:5d:17:ec:af:f8:
c2:b0:24:13:af:dd:87:0e:69:b3:bb:f2:37:55:b7:
d9:7f:85:1e:31:4f:49:19:1d:99:89:f3:cb:c9:76:
11:ad:41:09:f3:78:b0:6c:21:32:a0:fc:72:b4:58:
4a:67:10:42:25:a6:85:2c:80:a0:59:11:46:1e:94:
00:00:26:4f:73:f7:9d:fa:a5:f6:ef:51:d5:5b:61:
93:f1:75:f8:8b:8f:5a:cd:68:90:d5:42:ad:3d:46:
1c:e6:74:59:99:e8:37:34:8e:9c:c4:d7:ea:51:7b:
80:51:34:f1:69:48:45:ce:70:c4:5b:b0:15:48:e3:
ea:dc:4f:a5:63:e7:75:4b:d8:aa:da:85:de:f9:3c:
23:51:ea:0a:cc:b3:a6:8c:b6:81:df:e9:45:96:40:
3e:68:c4:0b:fc:f8:f4:bd:d3:e0:3f:67:f2:e3:4d:
cd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FA:22:06:8A:84:CA:6C:0C:76:6E:6A:A5:29:40:15:C5:EC:01:AF
X509v3 Authority Key Identifier:
keyid:44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:f3:f3:56:7b:7c:ee:66:b3:4b:55:d7:25:d7:d4:bc:a0:48:
bd:aa:46:fa:87:53:bc:b5:46:c8:89:06:29:34:0c:58:d6:f1:
1a:7f:4a:88:4e:d6:af:42:c0:cd:bf:4f:2f:94:ef:a9:c8:b0:
5f:68:24:23:4c:4e:d8:db:31:4a:0e:2a:cd:cb:2c:d4:72:95:
ac:66:6d:2e:4f:7d:34:dc:de:c0:3e:1f:ba:41:c6:79:66:e9:
c7:77:f7:34:6e:f5:c4:f4:69:e9:27:86:b2:bc:62:46:1c:9d:
9b:7f:72:58:5a:20:87:5a:71:03:9b:b6:70:73:03:1d:f1:79:
fe:dd:1f:f3:d6:94:9a:30:f1:b1:c4:a1:d5:83:41:b5:a1:a1:
c4:8b:f1:4d:cf:ca:50:35:d0:d3:71:8f:de:c8:77:5f:15:68:
3e:59:ba:f4:35:99:bb:00:d4:cd:a3:e1:28:0b:92:23:99:99:
f3:56:56:68:b0:3d:0e:80:d8:a4:6b:3c:04:aa:f0:d6:b6:2d:
81:d5:a0:32:bb:d5:cf:33:d8:75:aa:4a:13:bd:9b:8a:12:0d:
bc:39:1d:5e:11:ec:64:51:b1:1c:25:d5:3c:53:85:2b:cc:56:
03:d0:84:3f:54:d0:bd:f6:bb:6f:dd:bb:2b:d3:35:0f:d6:2f:
26:cf:ba:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 16:52:28 2025 by rpki-client