Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
File: RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft (raw, json)
Hash identifier: 7fFTsBujJ6RlBISBX22QoAgtXgagGItmtOaqpxc+vEE=
Subject key identifier: 47:BF:15:BF:06:1A:69:DE:D6:F9:9F:DA:7F:FD:1D:8B:A1:64:6C:ED
Authority key identifier: 44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40
Certificate issuer: /CN=44d64dac03f1a57c1931667118048d82c43c5540
Certificate serial: 0198880E12553EFB558F1F05A5C4B7E91461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
Manifest number: 0C9C
Signing time: Fri 08 Aug 2025 05:01:20 +0000
Manifest this update: Fri 08 Aug 2025 05:01:20 +0000
Manifest next update: Sat 09 Aug 2025 05:01:20 +0000
Files and hashes: 1: RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl (hash: dUmhv9fnY5oLtrhCnVBi/DjXoiMV5MnQzJUtdoS1rbE=)
2: vPwQH1RvTV4M1J-vAZbjIjKDG4c.roa (hash: bhhfgUa9IkevuU6kgmPNLfOfpmJN6kMgsbrrhzr6WCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:0e:12:55:3e:fb:55:8f:1f:05:a5:c4:b7:e9:14:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d64dac03f1a57c1931667118048d82c43c5540
Validity
Not Before: Aug 8 05:01:20 2025 GMT
Not After : Aug 9 05:01:20 2025 GMT
Subject: CN=47bf15bf061a69ded6f99fda7ffd1d8ba1646ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dc:be:65:91:0a:6d:b3:93:26:e0:ba:59:e9:
2c:61:1b:04:d4:f0:82:37:8f:2a:f0:a9:77:da:1e:
40:42:ae:5b:1d:c5:8f:93:04:46:66:db:74:ec:6a:
d3:fa:2c:fc:4c:a5:f1:ac:2a:a9:9a:ec:e5:7a:86:
3b:d7:e3:ac:da:88:52:85:87:55:d5:2e:c9:4d:78:
5e:2b:6d:2f:07:67:f6:d9:e0:90:c4:f6:95:ee:21:
3d:28:95:78:c6:15:25:66:18:ab:da:a9:9c:09:9a:
d0:cf:53:01:fb:fe:55:f1:d3:b8:57:83:1e:44:bf:
07:29:ea:5b:29:0f:90:ee:02:19:1d:c3:f5:24:17:
bf:53:8a:c7:81:78:8b:5a:fc:d1:84:fb:05:8e:75:
af:ff:06:5f:f3:92:7f:37:ea:ce:34:8f:e8:45:62:
a3:54:f5:0f:a8:0f:c4:c3:2f:f7:88:bc:34:fe:c6:
47:bc:c6:7d:9a:2a:91:57:eb:c5:eb:71:4c:b8:4e:
0d:a0:2e:d9:b0:b6:88:5f:1b:15:1c:fd:f5:c7:a5:
68:13:16:d5:5a:42:80:3f:e4:bd:47:0b:2a:95:43:
b7:9c:a0:0f:8e:44:4f:3f:97:27:83:94:eb:79:27:
1f:79:5d:bf:99:89:20:9d:a4:47:a2:16:16:3d:6e:
d8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BF:15:BF:06:1A:69:DE:D6:F9:9F:DA:7F:FD:1D:8B:A1:64:6C:ED
X509v3 Authority Key Identifier:
keyid:44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d0:78:46:16:67:b4:ad:ff:d9:a1:95:60:74:2f:81:ed:43:
6a:f4:8b:37:22:d4:e3:c7:e2:d0:40:54:0d:b8:b4:2b:94:68:
0f:19:50:81:85:95:95:a5:9d:b1:ce:c1:82:6d:99:bb:97:18:
11:bf:40:fd:1f:66:ef:1a:ff:47:89:b8:06:84:1b:b0:e3:65:
ac:85:67:ff:d9:df:9b:c0:ad:61:e4:1b:19:2c:f0:ee:53:8d:
0d:cc:51:b4:98:bd:36:48:c8:de:21:47:74:da:aa:d3:50:a6:
05:5b:14:56:f4:ee:90:9e:67:81:82:94:f0:09:d6:93:b9:27:
ec:0b:a4:d7:bc:c3:c4:b9:f8:4c:60:56:9b:39:b7:8d:dc:26:
4a:a9:07:fb:fc:94:6c:3f:95:26:e0:21:ed:dd:69:3b:8e:cb:
88:e1:f5:8d:5d:39:57:7e:3b:13:25:33:62:8c:91:59:7f:7a:
83:88:40:25:53:b6:2d:ca:c8:eb:47:9f:9c:78:c9:b9:d9:d2:
65:89:36:99:eb:7d:95:d3:87:26:4d:34:1b:79:09:24:d7:1d:
7b:b5:37:89:23:f9:41:bd:af:f5:d1:51:a9:9c:be:8a:a4:23:
d9:e3:01:4d:e8:cf:ab:0e:86:78:48:55:ed:b0:68:66:b0:a2:
77:1a:a2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:18:26 2025 by rpki-client