Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
File: NZTKzdk15Fz3HGFngKGx1Kpox7U.mft (raw, json)
Hash identifier: oijNOqouPh6hIRfqgMtjnjv+CT0TmcH+06gwIussdFU=
Subject key identifier: A2:87:9E:B1:1A:47:6B:87:03:C5:94:46:F3:E3:66:76:E8:13:60:27
Authority key identifier: 35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
Certificate issuer: /CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Certificate serial: 019849D31154B0EEB8E7A2E1A272866678A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 03:00:25 +0000
Manifest this update: Sun 27 Jul 2025 03:00:25 +0000
Manifest next update: Mon 28 Jul 2025 03:00:25 +0000
Files and hashes: 1: NZTKzdk15Fz3HGFngKGx1Kpox7U.crl (hash: KsX0yOVtQffOCZF+p/j1dG1YiyWFPD/a3l5VXY2LswY=)
2: ofsbRp2fd5LCZL5t0IaGNjdbGV0.roa (hash: bLNeuXUfAO52F/EGBeoEWZNzHoJs12X+xc+mr+Ggzjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:11:54:b0:ee:b8:e7:a2:e1:a2:72:86:66:78:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Validity
Not Before: Jul 27 03:00:25 2025 GMT
Not After : Jul 28 03:00:25 2025 GMT
Subject: CN=a2879eb11a476b8703c59446f3e36676e8136027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2e:f7:2d:2c:a6:57:34:28:ce:2f:4b:af:2c:
3f:64:94:b3:a2:9c:10:bf:e1:73:08:42:73:7c:19:
8e:d8:6e:78:29:4a:57:aa:6a:9c:f3:3a:4d:fb:0b:
14:44:6c:cc:f6:c1:f3:5a:5d:b9:1f:52:ad:5b:bf:
eb:3e:79:3d:d4:e4:1b:af:03:34:db:4d:43:b6:f8:
63:b3:78:4d:9f:c7:34:3c:c2:21:ae:f8:a5:83:55:
51:62:ce:83:c2:56:a1:33:e2:e2:ef:33:ba:9c:9b:
24:3b:c7:0a:4d:35:42:60:9a:7e:56:41:58:76:0e:
98:09:f6:c5:66:12:07:27:89:a9:e2:01:ed:41:83:
a2:6c:32:31:5f:1e:c0:99:aa:f4:66:4f:7e:f2:d5:
a6:45:15:81:19:fe:a2:99:79:20:c4:46:90:52:59:
7d:b4:8c:1f:2c:20:54:17:bc:70:15:71:5b:f9:59:
ba:2a:57:7b:3a:ca:dd:d1:d0:ae:5e:80:b4:7f:db:
0a:e6:c6:1c:eb:e9:5c:70:59:36:53:74:c9:b2:e7:
f7:c2:5a:78:8c:3b:4b:31:ac:d0:3f:e1:0e:aa:c0:
12:55:9a:4e:31:c8:5c:8b:16:31:2d:2c:6b:dd:2f:
a4:88:ed:cf:ad:0d:bd:af:5c:33:b6:6a:bc:dc:f8:
66:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:87:9E:B1:1A:47:6B:87:03:C5:94:46:F3:E3:66:76:E8:13:60:27
X509v3 Authority Key Identifier:
keyid:35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8f:37:5b:ea:b2:f0:f1:fc:dc:82:5d:61:c8:7b:76:9e:3e:
8c:60:0e:d5:28:9c:2b:03:83:e5:51:7b:69:0b:b1:b5:9c:b4:
89:44:d3:37:5b:ae:f3:11:5a:32:39:69:fb:8f:c1:3c:d9:ad:
98:2d:6c:5d:70:79:8b:2b:1f:e0:4f:8f:4e:d3:86:13:bc:c5:
6b:37:e0:a3:43:71:b4:a2:d9:fb:e4:9f:03:d3:9d:f8:35:05:
71:08:03:11:2a:32:f2:14:9e:17:b8:ac:4d:95:e3:0d:44:1a:
2d:3a:e9:1d:87:00:07:5b:ce:fe:90:71:f7:c4:9c:f8:93:3c:
b5:9c:93:70:8e:2a:b6:d7:ed:af:e5:a8:84:25:f4:a5:50:0c:
cc:5f:19:bd:16:5d:7e:59:6a:33:65:52:ea:ad:2a:86:ef:6c:
5a:71:64:36:b1:d4:2a:62:35:dd:2c:a5:e5:4a:38:5e:e5:3f:
34:3a:fb:ec:2c:38:8a:ff:97:0d:b0:18:9f:28:f3:d8:9b:ba:
23:b3:79:ed:3e:61:30:00:b8:e9:4a:a1:27:4e:a0:4d:6a:0d:
7c:ef:d2:f0:ab:96:48:4d:90:e2:9a:e5:ba:53:d6:a5:70:6b:
c7:f8:5a:92:51:28:3d:c9:9a:68:3a:b4:86:ad:16:10:ff:52:
8f:b5:7a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:38:50 2025 by rpki-client