Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.mft
File: nz-YcVNtYL90vfaQYMkNVBB9jjg.mft (raw, json)
Hash identifier: KpXe+BERKh09wH8gTjFCaBKNl77Io4rEZaYp7Oo4WE8=
Subject key identifier: 9D:81:3C:0B:DF:97:DF:9F:A8:E1:FB:E8:BC:3E:97:F8:A0:96:31:23
Authority key identifier: 9F:3F:98:71:53:6D:60:BF:74:BD:F6:90:60:C9:0D:54:10:7D:8E:38
Certificate issuer: /CN=9f3f9871536d60bf74bdf69060c90d54107d8e38
Certificate serial: 01984A419E544885F8BC495EBFDC9753AD7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nz-YcVNtYL90vfaQYMkNVBB9jjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.mft
Manifest number: 0E81
Signing time: Sun 27 Jul 2025 05:01:11 +0000
Manifest this update: Sun 27 Jul 2025 05:01:11 +0000
Manifest next update: Mon 28 Jul 2025 05:01:11 +0000
Files and hashes: 1: cZq1EWW-Cck7oNh5z2nVrTYMRQM.roa (hash: ptcOLOBEIgDro10MJyiqeVzzPTgAas0GugoUSuUsWgQ=)
2: nz-YcVNtYL90vfaQYMkNVBB9jjg.crl (hash: eIP98qDtR/hxhGMCrDuqdsaQnGpaWAg+jGWfmfKhp4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nz-YcVNtYL90vfaQYMkNVBB9jjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:9e:54:48:85:f8:bc:49:5e:bf:dc:97:53:ad:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f3f9871536d60bf74bdf69060c90d54107d8e38
Validity
Not Before: Jul 27 05:01:11 2025 GMT
Not After : Jul 28 05:01:11 2025 GMT
Subject: CN=9d813c0bdf97df9fa8e1fbe8bc3e97f8a0963123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:85:f1:2f:37:71:78:81:83:40:da:89:dd:a5:
ef:7e:b7:15:a6:4f:a4:a6:a0:11:69:f7:97:4b:80:
60:52:5f:d2:f8:74:fe:ec:fc:63:5f:28:00:50:1f:
2a:ca:84:bf:7e:2f:07:19:03:a6:98:2b:0e:4a:af:
cd:7b:9d:75:5d:d8:20:25:ed:8e:c5:87:74:5e:ad:
30:b6:07:1e:3a:99:2e:0d:da:a9:3e:0e:cc:05:48:
2b:33:04:b9:fd:4b:f1:ba:a3:48:8a:c3:bb:3b:c5:
0a:e0:a3:a3:98:15:67:da:3a:73:b7:d4:f9:09:db:
1e:98:e1:36:a8:39:94:f8:4b:2e:40:5b:81:e4:79:
b8:a5:3b:3d:99:3a:dc:9b:e8:3d:c0:8c:b2:e2:a5:
d7:b5:f9:dc:2f:8f:5e:4f:4a:e7:02:cf:46:58:cf:
74:1c:dc:5d:6f:24:43:9f:69:d2:1b:09:c2:45:16:
a6:0e:39:5a:40:88:63:7b:3f:1e:b1:26:1b:bc:bb:
0a:47:1e:3b:2f:93:7a:65:68:d6:e7:8b:f9:f0:59:
b3:e5:a1:67:24:2d:74:38:49:e2:be:28:b8:71:87:
b8:63:fa:b7:ea:9e:0d:dd:3c:b5:cb:d7:96:cc:75:
46:75:2f:f4:7e:98:82:c5:4d:c8:d6:90:7d:64:c9:
aa:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:81:3C:0B:DF:97:DF:9F:A8:E1:FB:E8:BC:3E:97:F8:A0:96:31:23
X509v3 Authority Key Identifier:
keyid:9F:3F:98:71:53:6D:60:BF:74:BD:F6:90:60:C9:0D:54:10:7D:8E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nz-YcVNtYL90vfaQYMkNVBB9jjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:2f:e2:fa:fc:89:0a:29:59:ec:38:28:95:cc:f1:d7:21:92:
3a:1d:da:00:93:f5:88:10:1c:84:fd:96:31:06:24:66:ae:d1:
a5:82:09:07:48:2b:ef:01:78:bd:6f:c3:5d:e8:8e:3b:28:fb:
94:1c:3a:1c:f3:f3:a3:40:9a:49:97:d1:ea:e2:c1:ca:c9:b2:
da:8a:88:f2:5e:72:d3:77:42:d5:67:fd:b7:2f:c7:a7:81:70:
98:0e:08:bb:af:8a:fa:f5:61:e5:7f:25:4a:9d:f0:c6:0a:f0:
54:37:21:96:bd:a1:65:2e:f3:64:cc:87:dd:9c:18:c3:5a:95:
51:20:6a:1c:74:fe:38:02:d5:d0:b1:dc:f0:0a:c8:e9:f3:79:
09:59:af:44:c7:13:8c:a4:c7:8a:44:b9:ab:97:73:e8:96:51:
01:7e:34:b7:41:2e:da:b7:62:4c:ba:d0:4f:b7:3a:2b:8b:a3:
d7:bd:11:4f:61:4e:32:65:17:9a:8c:42:19:b3:75:2b:7c:e3:
e9:a5:06:60:25:c5:1c:7f:37:6a:19:ae:00:7c:5c:03:44:f4:
01:b8:ce:5c:d6:c1:81:9b:9a:fc:d7:77:fd:45:e0:2f:5c:1f:
54:e0:5a:78:73:9b:ec:d0:dc:8e:9a:c2:8d:2d:62:d3:16:bb:
e8:c7:05:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQZ5USIX4vElev9yXU61+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmM2Y5ODcxNTM2ZDYwYmY3NGJkZjY5MDYwYzkwZDU0MTA3
ZDhlMzgwHhcNMjUwNzI3MDUwMTExWhcNMjUwNzI4MDUwMTExWjAzMTEwLwYDVQQD
Eyg5ZDgxM2MwYmRmOTdkZjlmYThlMWZiZThiYzNlOTdmOGEwOTYzMTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYXxLzdxeIGDQNqJ3aXvfrcVpk+k
pqARafeXS4BgUl/S+HT+7PxjXygAUB8qyoS/fi8HGQOmmCsOSq/Ne511XdggJe2O
xYd0Xq0wtgceOpkuDdqpPg7MBUgrMwS5/UvxuqNIisO7O8UK4KOjmBVn2jpzt9T5
CdsemOE2qDmU+EsuQFuB5Hm4pTs9mTrcm+g9wIyy4qXXtfncL49eT0rnAs9GWM90
HNxdbyRDn2nSGwnCRRamDjlaQIhjez8esSYbvLsKRx47L5N6ZWjW54v58Fmz5aFn
JC10OEnivii4cYe4Y/q36p4N3Ty1y9eWzHVGdS/0fpiCxU3I1pB9ZMmqdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ2BPAvfl9+fqOH76Lw+l/igljEjMB8GA1UdIwQY
MBaAFJ8/mHFTbWC/dL32kGDJDVQQfY44MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnotWWNWTnRZTDkwdmZhUVlNa05WQkI5ampnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9mNmJiZDMtYWUyNy00ZGM3LWI2Njkt
YzUyNjNiMzMwM2I5LzEvbnotWWNWTnRZTDkwdmZhUVlNa05WQkI5ampnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9mNmJiZDMtYWUyNy00ZGM3LWI2NjktYzUyNjNiMzMwM2I5
LzEvbnotWWNWTnRZTDkwdmZhUVlNa05WQkI5ampnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAES/i+vyJ
CilZ7Dgolczx1yGSOh3aAJP1iBAchP2WMQYkZq7RpYIJB0gr7wF4vW/DXeiOOyj7
lBw6HPPzo0CaSZfR6uLBysmy2oqI8l5y03dC1Wf9ty/Hp4FwmA4Iu6+K+vVh5X8l
Sp3wxgrwVDchlr2hZS7zZMyH3ZwYw1qVUSBqHHT+OALV0LHc8ArI6fN5CVmvRMcT
jKTHikS5q5dz6JZRAX40t0Eu2rdiTLrQT7c6K4uj170RT2FOMmUXmoxCGbN1K3zj
6aUGYCXFHH83ahmuAHxcA0T0AbjOXNbBgZua/Nd3/UXgL1wfVOBaeHOb7NDcjprC
jS1i0xa76McFrQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:57:17 2025 by rpki-client