Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
File: NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft (raw, json)
Hash identifier: QL+XCzJQX28xYV/0rZmcJJX45kMZJ0vQhRsF/7WFobg=
Subject key identifier: 07:56:A5:55:F5:09:FF:64:F8:A1:92:61:A5:67:E4:05:DF:16:3A:F3
Authority key identifier: 35:14:FF:67:F3:B8:D4:F6:F6:BD:A2:3E:CB:BC:7B:0F:09:FE:60:80
Certificate issuer: /CN=3514ff67f3b8d4f6f6bda23ecbbc7b0f09fe6080
Certificate serial: 01983DCF0147B793428765236A4DFB591D50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
Manifest number: 0F60
Signing time: Thu 24 Jul 2025 19:00:33 +0000
Manifest this update: Thu 24 Jul 2025 19:00:33 +0000
Manifest next update: Fri 25 Jul 2025 19:00:33 +0000
Files and hashes: 1: NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl (hash: sfOWFeB999NJ+n9bMvB0IiZZPW1tJ2jup4yZBiNn298=)
2: j7uIJiPhcZxIrIipfuK1rqo935Y.roa (hash: 7J2YXXzcaOGsarNoeRvp5q8jGItI0Hy8Dxn5tPP/JpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:cf:01:47:b7:93:42:87:65:23:6a:4d:fb:59:1d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3514ff67f3b8d4f6f6bda23ecbbc7b0f09fe6080
Validity
Not Before: Jul 24 19:00:33 2025 GMT
Not After : Jul 25 19:00:33 2025 GMT
Subject: CN=0756a555f509ff64f8a19261a567e405df163af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:53:81:f2:db:83:bd:8d:94:df:8a:1f:39:19:
bb:ae:1b:56:10:09:41:ac:7e:6e:96:f6:a6:da:35:
2b:a9:55:5f:91:7f:65:5f:bc:de:a3:e3:d9:35:c1:
3c:36:4e:be:9e:a9:08:6b:f9:7c:85:50:47:cf:e0:
53:c0:86:40:9e:01:f8:25:71:0e:92:cb:34:66:30:
0c:19:6f:2d:0d:d5:a7:c1:fe:f2:dd:6c:b6:5b:97:
e5:d8:97:a2:cf:4b:c7:ed:a4:ce:e0:c2:1e:02:55:
af:90:fc:b1:8f:9e:4a:4c:ec:bb:9c:20:ee:43:63:
49:17:5c:d6:8c:d9:99:d2:1c:e3:d1:dc:38:20:46:
81:e4:ab:57:f9:5b:a7:7e:b5:23:26:92:a5:94:fc:
9f:36:85:4a:f3:40:81:2d:2d:1d:0b:6e:aa:d3:76:
5c:50:0e:04:ad:3e:54:09:ad:6f:53:d6:d4:8d:5b:
b6:28:0f:4c:9b:48:8a:4e:af:f0:2d:aa:8f:af:ff:
01:0d:14:a6:b1:8f:d2:58:58:04:3f:a6:7b:97:1b:
56:0a:84:1e:0e:af:7f:b9:0e:08:72:c7:ed:93:dd:
f8:06:08:c8:ef:2e:df:d7:3f:83:ab:4e:74:9a:b5:
25:63:35:d0:b7:71:ef:7b:c9:b3:08:70:06:bf:50:
24:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:56:A5:55:F5:09:FF:64:F8:A1:92:61:A5:67:E4:05:DF:16:3A:F3
X509v3 Authority Key Identifier:
keyid:35:14:FF:67:F3:B8:D4:F6:F6:BD:A2:3E:CB:BC:7B:0F:09:FE:60:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a815b3-c48c-4ff9-989d-8854c92d47b1/1/NRT_Z_O41Pb2vaI-y7x7Dwn-YIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:06:64:13:fb:7d:a6:71:e4:b6:de:ce:7f:4c:88:33:eb:c5:
b8:a6:64:37:ce:76:07:2e:1c:aa:de:7e:6e:42:97:ea:3f:80:
26:0b:1c:06:1b:4b:78:6d:f9:2f:6d:2a:94:07:a4:09:23:d0:
dd:26:62:b6:70:da:cf:ee:c7:85:1a:ad:e3:e7:dd:2c:57:6d:
fd:a4:a3:c3:31:f6:d3:15:b4:f1:1a:de:65:d2:ef:37:d1:a0:
88:d9:4d:d9:86:c0:1d:09:ae:74:88:ec:b1:1c:9a:1a:11:81:
16:14:97:04:97:36:91:3c:49:f9:52:a6:98:8d:4d:01:a9:52:
c9:02:6d:82:f3:35:9b:2c:9d:f0:06:0c:8b:54:4e:c9:ee:f7:
76:51:56:3a:d2:2a:fa:8a:93:74:bd:26:f9:9c:1e:30:d6:25:
cd:14:c3:50:1d:80:2c:80:d2:ae:f9:3e:8a:db:e4:62:f9:66:
c0:10:bf:5c:a8:ca:e1:f1:ae:b5:b2:7a:75:38:98:e7:42:15:
33:b4:dc:75:39:cb:3e:be:a0:1f:3b:d1:4a:c2:01:76:7c:3c:
fc:34:47:42:2a:84:6e:e0:97:7a:f6:ac:f8:05:bd:74:f8:73:
7c:be:69:9d:3f:48:c8:ee:e4:ef:2b:e9:c8:e6:72:9e:27:81:
9a:f7:0b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:34:27 2025 by rpki-client