Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
File: Nz2PVXyuGOI12Ti608-uF8kbneY.mft (raw, json)
Hash identifier: yG3ylQqYQJ4+98uv3bS+zH3aA5KVosEhSItMmLT5N8k=
Subject key identifier: 21:69:E9:6C:79:7A:7E:ED:0C:EA:0B:A5:AD:90:2C:01:C6:81:7C:27
Authority key identifier: 37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6
Certificate issuer: /CN=373d8f557cae18e235d938bad3cfae17c91b9de6
Certificate serial: 01988B45BA03F869510DDC888CBDCC9924B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
Manifest number: 0CE4
Signing time: Fri 08 Aug 2025 20:00:59 +0000
Manifest this update: Fri 08 Aug 2025 20:00:59 +0000
Manifest next update: Sat 09 Aug 2025 20:00:59 +0000
Files and hashes: 1: Nz2PVXyuGOI12Ti608-uF8kbneY.crl (hash: BpJn53lZHO58wf7Q40HsnK457NpwZ9yl7SEP0vD7hO0=)
2: ozI4hI8kFkEQxCSmEwvkBXoCapM.roa (hash: nsuE7KYFnBTkOwSYDCdNStBanVXhSb5SsJb22tB9rcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:45:ba:03:f8:69:51:0d:dc:88:8c:bd:cc:99:24:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=373d8f557cae18e235d938bad3cfae17c91b9de6
Validity
Not Before: Aug 8 20:00:59 2025 GMT
Not After : Aug 9 20:00:59 2025 GMT
Subject: CN=2169e96c797a7eed0cea0ba5ad902c01c6817c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:88:25:52:92:7c:77:c5:c5:5c:54:c1:98:d1:
db:f7:6c:aa:f3:66:c2:04:ff:49:a0:2e:ab:f3:e7:
75:b5:35:78:d1:ab:29:d9:4c:6b:2f:bf:b1:d1:50:
34:ef:db:4b:74:19:54:fd:08:1a:31:ee:be:be:ee:
bb:ec:ed:ba:13:2f:89:60:34:e2:e4:a3:c7:99:08:
af:fb:80:e5:a7:e2:95:4a:60:0b:11:ba:ef:e4:f1:
e3:d5:12:c5:5d:ad:95:b1:f7:19:2d:cc:2c:e0:a2:
7b:ba:79:f0:d3:56:38:a7:72:8e:ee:89:7a:97:29:
32:b3:c9:64:6d:17:de:13:10:91:e4:b8:f0:ff:7e:
7d:9a:4f:05:69:84:4d:e5:dc:96:ee:25:4e:c5:58:
25:e1:85:35:64:31:21:2a:c1:10:0b:af:60:e0:1a:
bb:c0:13:45:70:bb:2b:e0:07:d8:6a:93:02:e5:0c:
0c:0b:d0:fe:6d:48:0c:1f:74:90:6b:69:9e:98:3c:
92:f5:b4:33:7c:97:c4:c1:ee:af:c1:a1:cf:9a:d3:
f1:64:8a:a6:80:c1:34:dd:07:f6:b9:8d:70:10:cf:
e8:69:dc:95:3b:20:ef:98:88:bd:86:d3:a7:c0:8f:
b6:8f:52:eb:53:3f:c2:aa:93:f9:a2:97:91:86:22:
c8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:69:E9:6C:79:7A:7E:ED:0C:EA:0B:A5:AD:90:2C:01:C6:81:7C:27
X509v3 Authority Key Identifier:
keyid:37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:78:3d:c3:b6:d0:91:bb:e2:dd:cf:fb:38:0d:00:66:95:84:
b0:6b:38:94:59:c1:35:a5:dd:2c:36:99:35:f4:99:4a:f4:d8:
8e:8c:9c:93:20:f7:83:e0:8c:1a:00:46:8b:a2:ad:8d:ef:d6:
2d:b0:2e:42:23:dd:5d:3f:66:3c:64:95:55:0f:be:9c:6b:56:
b2:bf:e1:ac:e9:f6:86:25:d8:86:25:3c:54:6e:86:eb:1a:58:
96:23:3e:83:5a:ad:5d:b3:03:b1:ff:ea:da:31:01:75:ff:d8:
ec:52:1d:39:d2:82:7c:c2:e1:2c:18:d0:a0:68:54:a9:61:8a:
62:6c:13:d6:65:48:a6:70:25:73:f0:e8:f1:7f:3c:79:fc:77:
91:bd:95:ac:b7:92:f4:3d:f2:49:ed:98:31:b0:63:f9:cc:a7:
91:03:ba:01:d9:6c:99:6a:98:95:e6:ce:cb:66:d0:da:af:99:
06:f3:58:a9:68:9e:14:a4:e4:e0:36:0f:96:c8:65:de:93:c4:
48:e0:13:b0:6e:48:1d:76:3f:b7:4c:ae:a5:62:b2:75:b3:f0:
20:04:76:26:23:d6:4a:f0:94:77:e9:af:0f:fd:af:f1:28:c6:
48:8e:12:f3:79:6c:73:66:c8:18:0d:42:16:38:0c:16:fe:06:
b9:16:59:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLRboD+GlRDdyIjL3MmSS4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3M2Q4ZjU1N2NhZTE4ZTIzNWQ5MzhiYWQzY2ZhZTE3Yzkx
YjlkZTYwHhcNMjUwODA4MjAwMDU5WhcNMjUwODA5MjAwMDU5WjAzMTEwLwYDVQQD
EygyMTY5ZTk2Yzc5N2E3ZWVkMGNlYTBiYTVhZDkwMmMwMWM2ODE3YzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4glUpJ8d8XFXFTBmNHb92yq82bC
BP9JoC6r8+d1tTV40asp2UxrL7+x0VA079tLdBlU/QgaMe6+vu677O26Ey+JYDTi
5KPHmQiv+4Dlp+KVSmALEbrv5PHj1RLFXa2VsfcZLcws4KJ7unnw01Y4p3KO7ol6
lykys8lkbRfeExCR5Ljw/359mk8FaYRN5dyW7iVOxVgl4YU1ZDEhKsEQC69g4Bq7
wBNFcLsr4AfYapMC5QwMC9D+bUgMH3SQa2memDyS9bQzfJfEwe6vwaHPmtPxZIqm
gME03Qf2uY1wEM/oadyVOyDvmIi9htOnwI+2j1LrUz/CqpP5opeRhiLIpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFp6Wx5en7tDOoLpa2QLAHGgXwnMB8GA1UdIwQY
MBaAFDc9j1V8rhjiNdk4utPPrhfJG53mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnoyUFZYeXVHT0kxMlRpNjA4LXVGOGtibmVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81MTc0MTEtMGM0Mi00ZDE4LTkwMzkt
Yzk5ZGQzOTBhN2Q2LzEvTnoyUFZYeXVHT0kxMlRpNjA4LXVGOGtibmVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy81MTc0MTEtMGM0Mi00ZDE4LTkwMzktYzk5ZGQzOTBhN2Q2
LzEvTnoyUFZYeXVHT0kxMlRpNjA4LXVGOGtibmVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqHg9w7bQ
kbvi3c/7OA0AZpWEsGs4lFnBNaXdLDaZNfSZSvTYjoyckyD3g+CMGgBGi6Ktje/W
LbAuQiPdXT9mPGSVVQ++nGtWsr/hrOn2hiXYhiU8VG6G6xpYliM+g1qtXbMDsf/q
2jEBdf/Y7FIdOdKCfMLhLBjQoGhUqWGKYmwT1mVIpnAlc/Do8X88efx3kb2VrLeS
9D3ySe2YMbBj+cynkQO6AdlsmWqYlebOy2bQ2q+ZBvNYqWieFKTk4DYPlshl3pPE
SOATsG5IHXY/t0yupWKydbPwIAR2JiPWSvCUd+mvD/2v8SjGSI4S83lsc2bIGA1C
FjgMFv4GuRZZzA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:32 2025 by rpki-client