
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
File: nlzy-Led9mJBfsllbtEWbpGquAg.mft (raw, json)
Hash identifier: UW5vSoFenrCCeu4Vv/5/5BWS0S6OGeiWtZ1p3N88xtw=
Subject key identifier: FE:37:EB:86:2D:37:89:EA:FC:D0:4E:65:FC:12:AF:5B:1D:4E:BE:2E
Authority key identifier: 9E:5C:F2:F8:B7:9D:F6:62:41:7E:C9:65:6E:D1:16:6E:91:AA:B8:08
Certificate issuer: /CN=9e5cf2f8b79df662417ec9656ed1166e91aab808
Certificate serial: 0197470C238F41C1AC17F8A2FB8A1B123D20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
Manifest number: 0DFC
Signing time: Fri 06 Jun 2025 21:01:07 +0000
Manifest this update: Fri 06 Jun 2025 21:01:07 +0000
Manifest next update: Sat 07 Jun 2025 21:01:07 +0000
Files and hashes: 1: Qa3IwStcz_sWRz0L6oud4ZOJOR8.roa (hash: WbvR7lgO/S3QOwy/R14Yl51OkTUajPVQcMXibufV2RY=)
2: nlzy-Led9mJBfsllbtEWbpGquAg.crl (hash: NAkhCqnOSzxm4M1lx9rdaNHFwXS+DK6Eh4dzy5JwjJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:23:8f:41:c1:ac:17:f8:a2:fb:8a:1b:12:3d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e5cf2f8b79df662417ec9656ed1166e91aab808
Validity
Not Before: Jun 6 21:01:07 2025 GMT
Not After : Jun 7 21:01:07 2025 GMT
Subject: CN=fe37eb862d3789eafcd04e65fc12af5b1d4ebe2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:51:82:df:b6:6c:90:0d:6e:29:0c:e4:68:23:
27:dd:a4:53:28:c4:40:6c:f3:df:2e:1d:d7:df:78:
a2:63:01:1e:f0:fe:0f:8a:a3:3b:63:e0:91:0e:ea:
e1:a9:5a:8f:6c:ba:7e:93:f7:41:3e:81:90:44:9d:
0c:c2:bf:52:e9:e9:8d:94:8c:aa:54:32:7d:94:e0:
a8:af:a3:3d:bd:72:c5:d9:8a:21:6f:db:f2:22:5e:
91:dd:fc:92:26:64:60:5c:aa:16:69:91:46:f6:84:
7c:fd:5d:94:47:80:bd:44:fa:5c:e4:50:82:da:49:
03:89:8a:df:64:5d:c5:9b:11:f0:a0:ed:6d:b2:ca:
cc:17:d3:c4:40:94:5c:58:31:04:99:cf:dd:63:b9:
22:db:bc:d9:3c:7e:09:49:b5:36:6c:d9:ce:56:cb:
86:06:b5:bf:60:d6:13:20:47:bc:79:57:03:3f:1b:
24:8a:dc:9a:f7:67:49:ee:f1:e0:b3:24:e0:87:8d:
ed:73:92:ea:ad:f5:a2:a5:eb:1d:e9:da:5c:ba:5d:
8c:b8:c9:7e:ed:bd:3a:2f:65:fe:b6:82:d7:43:d4:
4d:c7:c8:da:a8:f8:97:af:6c:73:81:2b:21:89:52:
a5:37:2f:ef:4a:30:ed:e8:fb:a0:36:bf:31:53:11:
93:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:37:EB:86:2D:37:89:EA:FC:D0:4E:65:FC:12:AF:5B:1D:4E:BE:2E
X509v3 Authority Key Identifier:
keyid:9E:5C:F2:F8:B7:9D:F6:62:41:7E:C9:65:6E:D1:16:6E:91:AA:B8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:48:32:cc:8c:08:a8:b0:57:3c:c5:6b:b4:70:54:55:1e:2c:
3f:30:4a:1e:76:3a:ca:51:ef:fb:11:fc:9c:5f:4e:6a:cc:15:
1b:95:10:d0:72:84:bf:eb:9c:04:50:65:5e:cd:dc:9a:71:e6:
fd:e2:58:87:59:e8:f4:d4:9d:9a:92:b0:ea:4d:8c:cc:27:23:
90:be:71:fe:d9:23:1f:e2:b8:18:63:b1:44:68:c9:cb:b5:d8:
6a:f1:01:29:ae:e5:60:52:9e:4f:ff:30:6d:1d:ee:65:8a:9c:
ab:b5:c3:e4:b6:8c:d9:35:c4:c3:03:bb:d9:a9:27:61:c3:15:
19:8e:76:ba:58:06:ac:bb:5c:21:bc:9f:27:c6:d5:1f:bd:67:
85:c5:c6:cd:76:b1:94:62:02:d6:1a:01:07:51:e4:87:b3:d0:
ad:7b:f0:9e:f8:56:87:4c:33:a7:fc:1e:af:37:60:82:4d:be:
d8:7b:3c:ee:8a:88:ab:52:07:30:43:71:3a:68:52:28:db:9a:
fc:12:57:3a:1e:70:32:91:eb:72:64:ba:0b:18:6d:52:bc:72:
58:7a:2f:b2:37:d7:01:d5:79:e0:04:9c:a0:7a:be:0f:b4:a3:
67:e0:f9:22:6c:62:10:99:4f:32:6d:ad:38:5e:13:1d:9e:c1:
ed:bd:02:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:26:21 2025 by rpki-client