Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
File: nlzy-Led9mJBfsllbtEWbpGquAg.mft (raw, json)
Hash identifier: N1qFmF6wW5YFhykd4avD9C/OVrzbzE5S90vD4MrbFUU=
Subject key identifier: CC:EC:AC:D9:10:1A:50:D4:77:B0:FE:C1:95:D0:27:E7:EC:66:5C:F0
Authority key identifier: 9E:5C:F2:F8:B7:9D:F6:62:41:7E:C9:65:6E:D1:16:6E:91:AA:B8:08
Certificate issuer: /CN=9e5cf2f8b79df662417ec9656ed1166e91aab808
Certificate serial: 01984407F68A16ADC56933A69EC851861424
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
Manifest number: 0E7F
Signing time: Sat 26 Jul 2025 00:00:29 +0000
Manifest this update: Sat 26 Jul 2025 00:00:29 +0000
Manifest next update: Sun 27 Jul 2025 00:00:29 +0000
Files and hashes: 1: Qa3IwStcz_sWRz0L6oud4ZOJOR8.roa (hash: WbvR7lgO/S3QOwy/R14Yl51OkTUajPVQcMXibufV2RY=)
2: nlzy-Led9mJBfsllbtEWbpGquAg.crl (hash: i/KmYv9KpNNvLPlBjT5wbPKMS2nvygPJmjFQxIW5v64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:07:f6:8a:16:ad:c5:69:33:a6:9e:c8:51:86:14:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e5cf2f8b79df662417ec9656ed1166e91aab808
Validity
Not Before: Jul 26 00:00:29 2025 GMT
Not After : Jul 27 00:00:29 2025 GMT
Subject: CN=ccecacd9101a50d477b0fec195d027e7ec665cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a5:81:70:44:80:9f:e9:3b:27:d9:97:2c:ef:
20:db:34:e7:5d:4b:ca:4b:82:85:b4:00:88:43:82:
6b:f7:51:ce:0b:66:9c:b0:11:79:d2:ca:d5:64:27:
39:7f:a5:c1:e3:33:ef:b3:04:9b:82:48:d7:f0:9f:
e6:90:e1:f9:9d:d7:d6:06:cd:97:9b:09:42:98:c8:
d1:1a:77:bb:b8:10:b9:50:f8:71:2a:f9:07:75:32:
42:0c:66:cb:45:71:7a:df:8b:c4:21:b0:2c:d6:7b:
b9:0b:91:a4:6e:3f:e8:dd:f6:2b:ad:48:f0:40:a5:
92:90:23:9b:9f:7d:c3:3c:5a:43:76:40:6b:25:2d:
72:3e:21:21:e8:36:7f:5c:18:48:3e:06:19:f8:a5:
e4:73:ac:1a:48:21:81:aa:53:d4:23:a3:36:6f:73:
96:89:89:8d:aa:b4:39:ac:d0:61:8f:8e:96:6f:c7:
0c:f9:a8:4d:e8:86:0a:ea:8f:33:dd:a2:78:97:f5:
58:5c:d6:28:8c:73:0d:0b:e8:a3:f6:e8:31:da:9e:
da:27:bc:74:7a:5a:57:f4:57:52:41:d7:03:8b:29:
1d:2b:aa:02:bf:9f:e7:ba:f7:86:67:1b:f6:c1:55:
14:c4:1f:00:46:73:d0:b1:91:1e:06:07:15:45:a1:
f6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:EC:AC:D9:10:1A:50:D4:77:B0:FE:C1:95:D0:27:E7:EC:66:5C:F0
X509v3 Authority Key Identifier:
keyid:9E:5C:F2:F8:B7:9D:F6:62:41:7E:C9:65:6E:D1:16:6E:91:AA:B8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:27:56:64:69:2a:84:c0:62:fc:73:f2:73:ad:dc:ed:a6:bc:
68:30:a1:40:14:a0:f3:cc:48:3b:d1:7d:c2:df:9c:ab:d0:65:
b8:aa:23:94:b8:28:b6:8a:fd:32:17:3c:eb:d2:ee:95:1e:2c:
7c:48:bc:20:c2:26:8c:d5:1b:dd:fb:d6:e9:34:1b:13:0b:9f:
3b:d8:07:67:a7:9c:f9:92:8f:ac:ce:0c:10:ad:99:de:b6:af:
ca:ae:4c:2b:5e:e4:aa:c3:28:f7:0b:58:b8:6d:6a:55:af:3e:
a4:07:ad:08:e6:47:39:b6:10:62:ad:eb:37:0f:12:dc:a4:48:
49:0d:23:f6:87:d3:a6:19:a9:e2:62:25:3f:d6:90:c3:b3:5a:
b8:ac:78:d5:f5:b8:9b:58:16:ef:cb:d2:8f:ed:14:6e:8a:fa:
34:f4:51:52:8d:8f:cd:aa:b8:97:25:ca:3a:4c:15:45:6e:f8:
67:73:a7:77:87:e0:99:ba:0a:3b:23:ef:2b:8d:e5:cc:3d:61:
81:9e:6a:0f:ca:e2:f7:8e:53:2a:05:84:bf:be:d5:43:23:f3:
4d:a6:ce:c6:3c:bd:75:30:57:d5:71:09:58:06:ca:ce:a9:14:
4c:fe:aa:a1:af:c6:5e:c8:41:81:e1:b1:ad:45:32:de:cf:91:
08:96:b4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:19:43 2025 by rpki-client