Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
File: Nz2PVXyuGOI12Ti608-uF8kbneY.mft (raw, json)
Hash identifier: sfJ9nUml5GxNPhB+qg6AWk+8Yl3QyKEq80HyonUaeQk=
Subject key identifier: BB:C6:11:EC:50:09:6F:D4:04:0D:82:58:CE:9E:58:AE:A6:2E:03:E7
Authority key identifier: 37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6
Certificate issuer: /CN=373d8f557cae18e235d938bad3cfae17c91b9de6
Certificate serial: 01976D744C9BA4E654E8D237A82CFFF114B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
Manifest number: 0C50
Signing time: Sat 14 Jun 2025 08:00:27 +0000
Manifest this update: Sat 14 Jun 2025 08:00:27 +0000
Manifest next update: Sun 15 Jun 2025 08:00:27 +0000
Files and hashes: 1: Nz2PVXyuGOI12Ti608-uF8kbneY.crl (hash: xICwAiviD647m++ugbwweKOcnuSWuscFChO/NjJ0SPE=)
2: ozI4hI8kFkEQxCSmEwvkBXoCapM.roa (hash: nsuE7KYFnBTkOwSYDCdNStBanVXhSb5SsJb22tB9rcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:4c:9b:a4:e6:54:e8:d2:37:a8:2c:ff:f1:14:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=373d8f557cae18e235d938bad3cfae17c91b9de6
Validity
Not Before: Jun 14 08:00:27 2025 GMT
Not After : Jun 15 08:00:27 2025 GMT
Subject: CN=bbc611ec50096fd4040d8258ce9e58aea62e03e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d2:51:9d:7b:94:80:ac:c5:3e:ee:9c:dd:e8:
dc:1f:60:0a:d1:ac:97:57:ba:41:28:cc:03:cb:61:
d6:23:26:20:8d:51:d4:f1:dc:fd:0e:4d:64:7b:dd:
04:30:91:19:11:e1:c4:81:e4:39:d9:ab:ab:65:cf:
f5:a1:b2:0a:10:d4:3a:26:14:35:48:90:17:32:6e:
2c:f7:d5:5a:f5:c4:eb:ca:e0:c4:d7:a0:a7:b0:92:
b8:59:01:d0:2c:57:e0:ff:c7:fa:51:fe:9a:8b:71:
34:40:5e:e1:52:2f:37:b6:a7:5a:f5:b8:61:9d:9a:
b1:90:18:48:b1:21:10:78:70:86:79:00:ac:79:43:
d0:5a:f8:74:f3:73:94:87:a0:8a:e4:47:97:46:d6:
29:02:0a:10:10:c8:03:50:02:a9:79:e8:9f:04:e0:
20:df:bb:84:da:a3:22:7f:d5:33:ca:68:c1:f4:80:
38:02:62:8f:af:c3:36:14:81:db:9f:2b:85:fb:74:
92:7d:79:91:c2:88:65:96:f5:0a:71:1f:94:80:48:
61:59:81:b9:98:4d:19:1e:27:11:17:fc:fb:77:01:
03:c7:ff:15:3b:3e:99:e4:9b:8d:2e:58:12:4d:e2:
c9:fb:38:25:9f:d8:95:a4:5a:bf:52:15:40:22:db:
35:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C6:11:EC:50:09:6F:D4:04:0D:82:58:CE:9E:58:AE:A6:2E:03:E7
X509v3 Authority Key Identifier:
keyid:37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:cf:9a:69:a4:e2:68:8c:84:5e:45:f2:dc:7f:55:4e:f6:bb:
18:6f:b3:7f:2a:ec:cf:ea:6b:7e:9d:f0:24:e5:8d:5e:78:a0:
62:1a:7b:80:c6:66:98:44:eb:80:1e:42:f6:98:aa:66:a4:79:
2e:c8:c5:09:05:bd:fd:f3:12:81:ef:f7:1b:a5:3f:a5:8a:89:
ae:5c:cb:a7:70:79:5a:ea:de:a4:94:68:30:a6:c9:44:31:de:
d1:e8:2d:00:c5:1d:30:d1:35:d7:8c:63:1b:e6:a3:90:42:67:
c7:e6:2c:5a:a9:25:48:aa:70:c5:c8:f0:53:40:53:35:36:55:
50:53:42:ea:a9:47:25:a9:21:e2:0b:f5:75:c3:d8:6e:48:6e:
cb:76:8f:ca:ad:42:32:e5:18:c4:85:c2:2c:4c:f8:66:9f:57:
f3:67:91:60:24:36:ef:e2:94:61:e2:c1:3e:f2:cb:d1:23:e8:
46:8d:58:e8:b6:21:12:0f:00:a1:b9:ed:b9:12:15:c1:2e:57:
f2:8d:72:b9:f0:dc:52:9b:a9:dc:a2:fb:ee:e7:ae:98:8e:dc:
53:91:43:80:b1:fd:66:3d:37:7b:10:f0:53:c8:22:f2:79:5f:
74:40:4b:2d:f2:d2:8d:06:ed:86:e6:47:a1:ee:d5:f5:7d:2e:
9c:c8:d3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:11:49 2025 by rpki-client