Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
File: RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft (raw, json)
Hash identifier: KFSrfr6t0AzEQaZ8n9/jQ9Z5qBPw3acKosGKB9Nv6mE=
Subject key identifier: 62:8C:AF:28:37:07:1F:7E:8B:E0:F0:81:77:5E:2B:5A:DC:EE:12:92
Authority key identifier: 44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40
Certificate issuer: /CN=44d64dac03f1a57c1931667118048d82c43c5540
Certificate serial: 01968849BE64829E17D95D0D1D50241C2B19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
Manifest number: 0B93
Signing time: Wed 30 Apr 2025 20:00:56 +0000
Manifest this update: Wed 30 Apr 2025 20:00:56 +0000
Manifest next update: Thu 01 May 2025 20:00:56 +0000
Files and hashes: 1: RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl (hash: RSWQFtjuxBlbGsaTrpBfmxv7AfqbNCG//5rYUVRF7dU=)
2: vPwQH1RvTV4M1J-vAZbjIjKDG4c.roa (hash: bhhfgUa9IkevuU6kgmPNLfOfpmJN6kMgsbrrhzr6WCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:49:be:64:82:9e:17:d9:5d:0d:1d:50:24:1c:2b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d64dac03f1a57c1931667118048d82c43c5540
Validity
Not Before: Apr 30 20:00:56 2025 GMT
Not After : May 1 20:00:56 2025 GMT
Subject: CN=628caf2837071f7e8be0f081775e2b5adcee1292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:21:8a:6e:0a:c7:60:9b:44:61:d6:21:76:00:
87:65:f3:c2:be:c0:8b:90:5a:eb:55:ce:ca:35:fa:
88:55:9d:45:fc:ff:2a:5b:32:49:b2:a2:47:5f:52:
fc:ad:0d:98:b7:a2:f4:42:90:e3:71:e4:c5:3e:0d:
12:ef:3e:71:b9:08:35:d8:b6:ad:a0:57:2e:38:92:
c4:86:80:69:57:36:e3:98:db:90:13:f3:43:b6:47:
a6:ae:20:1c:b9:d1:f2:d5:a8:99:28:07:b2:f6:ce:
3e:a9:5d:fd:1a:cf:8a:e9:4d:7a:dd:f8:1e:80:a9:
d8:c2:ea:09:0d:20:c1:1a:98:31:b5:be:4e:e9:80:
ef:e4:63:f8:33:9e:a4:fa:0a:cf:f3:53:51:1d:e0:
c3:03:b4:dc:c6:b7:36:7f:70:ea:34:b6:60:c7:6d:
cd:fe:74:88:9c:e2:95:85:0d:c1:b3:f6:3d:2c:55:
00:bb:7b:3d:d8:b6:d8:f4:4a:0d:d7:a1:08:50:e2:
ca:29:e7:cd:c1:d3:af:9c:52:e9:71:75:04:0e:e2:
23:a5:bb:bd:25:1b:31:0c:f4:d2:b4:16:cf:3f:18:
ad:95:26:38:08:35:e0:a3:e1:ee:6f:fb:34:3e:5f:
9b:d5:b1:6f:3e:ef:cf:30:43:74:1f:48:4f:2b:66:
84:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:8C:AF:28:37:07:1F:7E:8B:E0:F0:81:77:5E:2B:5A:DC:EE:12:92
X509v3 Authority Key Identifier:
keyid:44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:62:07:0e:47:53:26:e4:44:a0:dc:96:63:28:69:c5:1f:ab:
58:ed:2c:53:4d:3b:9c:29:98:c1:15:02:d2:83:35:58:97:1a:
bf:bd:c6:33:41:17:c3:38:74:c6:f9:62:a4:67:8c:42:7b:e2:
d9:99:f6:21:ff:57:d6:52:c8:f0:15:f2:76:bc:9f:49:f9:7e:
0c:50:6a:79:67:ae:70:1c:65:23:de:b9:ed:83:74:d9:4f:7f:
9f:02:50:d9:b0:88:2c:ac:13:47:9f:69:23:a1:cf:53:91:a5:
36:8a:b5:a4:24:fc:a0:64:bc:23:f4:d0:2a:b6:15:6b:62:27:
f7:86:47:ca:21:eb:73:3e:47:1e:87:53:17:31:d8:10:13:5b:
f9:3e:8e:48:29:50:d0:31:05:97:0d:b3:0d:8b:6f:80:be:8f:
b1:62:3b:1c:0b:56:9a:96:cf:ed:a5:53:1e:76:46:90:a1:82:
42:7e:0a:5e:c0:39:82:14:db:e4:5e:4e:cc:f5:79:90:09:99:
4d:75:70:76:53:64:0b:52:a6:b3:07:6f:ea:0f:36:33:f0:48:
f2:92:b3:c3:50:06:a8:d4:9b:62:fa:7e:e4:71:0a:4a:8e:40:
56:d0:db:00:32:71:e1:76:51:76:1f:b6:26:c0:3d:71:b1:31:
97:a3:83:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:24:57 2025 by rpki-client